 Clover 

women in the 1600’s: “i think…” men:

2nd APK vuln in less than 30 days, this one validates the potential of the impact for the first 'crit' that I reported earlier this year (that one is still awaiting triage due to questionable exploitation, back and fourth on need more info... i'm hoping this one solidifies it!).

very good talk: youtube.com/watch?v=c5XAvR…

@thedawgyg such a clean piece!

Time to take avfew dabs and play a couple games of chess. Let's see how this goes lol

made a tool that maps every HackerOne bug bounty program to its github repos (116+ programs). github.com/actuallyclover… #bugbounty #tools #opensource

@rez0__ claude is actually insane, a lot of people sleep on it.

i kid you not. i got this message from a program manager: > try to hack it i proxy -> login -> tell claude "look at all the req in caido for <host>" 16 minutes later: 15 million users' info leaked LOL

@thedawgyg same with the midwest 😂 it was 74 Sunday and back down to 30s this week. Leave for work in a trench coat, come home in shorts or vice versa 😂

Virginia weather is bipolar as fuck.... Yesterday it was 87 degrees and today its suppose to be a snow storm in about 4 hours.. Current temp is still 70 lol by 2pm will be 30 + snow showers. Its been 75-90 for the last week and a half and now we back to winter lol

First ever sandbox escape/RCE report, hoping to see it triaged by the morning as I've been working on the POC for this all day 😅

@ctbbpodcast @thedawgyg heck yeah I was wondering when yall were gonna get him on the pod

We finally had @thedawgyg on the pod to talk about his origin story, recent Chrome research and how he optimises his AI workflow, his famous 180K payout on Yahoo and a LOT more. This is an episode we know a lot of people have been looking forward to, check it out! youtu.be/kpFfde3rNFs

@thedawgyg dude you've been killing it! it's so dope watching your consistency, super motivating.

The VRP replied last night... They needed more proof because they were concerned a patch i provided for my RCE proof would make it easier to achieve the RCE in the Chrome Render. So spent all night working on it, and now have the POC working with 0 code changes to Chrome (only reverting the fix for my vuln). The 'hit rate' is not great (it ranges from as low as ~1-2% success rate up to as high as ~60% success rate). There is absolutely no way now they cant accept this a full RCE (within the renderer) as I am able to run execlp('id') to be logged in the chrome logs 🎉🎉🎉🎉🥳🥳🤞🤞

@thedawgyg aye congrats!

$18,000 for my first ever Google bounties isn't bad I suppose... but the amount of work it took for these 2 specific issues, it deff feels like its lower than it should have been. Gonna ask for some clarity on the reasoning behind the amounts and see what they say.

Starting fresh and destroying my box I created and used for bug bounty 3 years ago. I've retained some old scripts but I am completely deleting everything else to "start over" .. 🤷‍♂️

@thedawgyg she’s gorgeous! this is milo 😎

My OG cat Momma Merlin (aka Bad Kitty) came inside the house thru the front door for first time in years. (She normally sneaks in backdoor and stays in my room solo to avoid her kids). She saw several of her grandkids and great grandkids for the first time, and is not a fan of so many kitties lol and this wasn't even all of them..

@thedawgyg that’s awesome! i tried reading the articles you posted about fuzzing but when i think fuzzing i think about like ffufing for directories etc.. is the the same in a sense of “fuzzing” for buffer overflows or memory overflow etc? i’m really interested in learning more.

i did binary hacking before, when i was a black hat in the 90s. It was just stupid easy back then to find/exploit buffer overflows and all. I decided to go back to it a couple months ago because I had taken a little over 2 years off from bug bounties, and was trying to find a way to get motivated to hack again (outside of my normal job). So started doing the fuzzing to get me motivated. It worked. I now spend most of my free time doing this instead of playing xbox like I was lol. But now I am trying to automate as much of it as I can, so that way I can play some xbox still while it does the boring stuff for me lol

Yay! The Chromium team has now marked my Heap Overflow Write as a S0/S1, marked as release blocker and assigned it to be fixed <3 So 2 of 3 validated and accepted. Now hafta keep fingers crossed I get the $10,000 for the READ and $55,000 for the write lol 🤞🤞🤞

@thedawgyg that’s awesome!! how does one go from web app hacking into browser exploitation? 👀

@actuallyclover thank you! and yea, its browser based. visiting a website with any version of chrome for the last 6-8 years can trigger the RCE in the renderer process.

@rawsalerts shoot it’d sure make me happy to pay off some debt 😂

🚨#BREAKING: Elon musk whos worth 852 billion dollars says that money can not buy happiness

Well the only fun thing I can do now is complete and publish a write up of this attack chain. It used a really fun POST self XSS via a blind form submission on an application that required a login to use but i was able to bypass the login by sending the POST request directly.

New AHB post 🫡 #bugbounty #bugbountytips #ahackersblog ahackersblog.com/p/chaining-ope…

@badcrack3r @fattselimi 😂

I’m hacking with @fattselimi. I think he’s high, but I can’t prove it yet. #BugBounty

@yungpinch pinch bro can we work?

can’t trust my friends no more..🤷‍♀️✨👯‍♀️🏴‍☠️ youtu.be/N1fISe6peUI?si…