Logo
Picture

Flo @fgdesign

Web Developer, Sports photographer Joined November 2013
  • Tweets
    157
  • Followers
    85
  • Following
    143
  • Likes
    392
fgdesign Profile Picture

Flo @fgdesign

a year ago

That was a really interesting finding. Feel free to read through my write up 😊

Krevetk0Valeriy Profile Picture

Valeriy @Krevetk0Valeriy

a year ago

My friend made a very interesting disclosure while searching for vulnerabilities. I personally couldn't believe it when I saw that he was able to make Self-XSS in a Ruby on rails application to RCE. Deserves time to read 👇 medium.com/@handball10/fr…

fgdesign Profile Picture

Flo @fgdesign

2 years ago

@matt_ruwe Hey @matt_ruwe can you reach out? I have a topic related to pointing poker I'd like to discuss via DM but I can't send you a message. Thank you :)

fgdesign Profile Picture

Flo @fgdesign

2 years ago

@nnwakelam To be said, that h1 re-opened my report which was rewarded and set status back to triaged. Let's see, what happens 😅

fgdesign Profile Picture

Flo @fgdesign

2 years ago

XSS to ATO from 2019 (not by me) - got duped in March 23. Resolved in October 23, still working. Reported, triaged, rewarded, closed in December 23. Still working right now. Re-reported and stated that a fix has never been deployed🤯What are they doing? #hackerone #xss #bugbounty

fgdesign Profile Picture

Flo @fgdesign

2 years ago

Found a RXSS to full account takeover last year March => dupe from 2019. Initial report resolved in October. Payload still working in December => reported, triaged, rewarded, resolved in February 2024. Payload still working now. Report again? #bugbounty #xss #hackerone

fgdesign Profile Picture

Flo @fgdesign

2 years ago

@Krevetk0Valeriy @monkehack @Hacker0x01 Same for me, also had some programs where resolved reports for single scope entries exceeded the 100% like having 560% 🧐

fgdesign Profile Picture

Flo @fgdesign

3 years ago

Found an endpoint like target .com/foo/ => forbidden Added ..;/ and a tomcat landing page of tomcat 7.0.57 appeared. /manager/html and other ones are basic auth protected. What would you do next? #bugbounty #hackerone #tomcat

fgdesign Profile Picture

Flo @fgdesign

3 years ago

Any ideas to exploit this SQLi? Single quote to escape; OR 1=1 -- returns 3mb of data (not critical) ORDER BY says 17 columns. chr() works but SELECT and UNION SELECT arent working. IF/CASE and sleep functions trigger the error. Errors do not differ. #bugbounty #sqlinjection

fgdesign Profile Picture

Flo @fgdesign

3 years ago

Program states that every RXSS is medium unless you can show significant operational or financial impact. Do you think ATO through password change should be considered as this? #xss #ato #bugbounty

fgdesign Profile Picture

Flo @fgdesign

3 years ago

Reported an XSS to ATO in March this year, which was a dupe from 2019 🫣 The initial report is now resolved but xss still works. Report again? #bugbounty #xss

fgdesign Profile Picture

Flo @fgdesign

3 years ago

Just found a post auth 1-click xss which allows exfiltration of clear text password and send it to attacker endpoint. Program says xss is OOS because of akamai is not blocking it... What would you do? #bugbounty #xss #hackerone

Flo retweeted
stangomat Profile Picture

Daniel Stange @stangomat

5 years ago

Friends from Ukraine, Belarus, Russia: if you need to bail out, DM me for help. I have opened all roles and levels in my team for blue card / relocation support so that I can leverage my hiring plan as the strongest resource available to me to build exit strategies & safe places

Flo retweeted
Linuzifer Profile Picture

linuzifer @Linuzifer

5 years ago

Der neue #LucaApp Hack ist eine Gefahr für Nutzerinnen und Gesundheitsämter. Werden die Ministerpräsidentinnen endlich Konsequenzen ziehen? Oder kommt nexenio/culture4life WIEDER damit durch, zu leugnen? Es reicht langsam. youtu.be/xTljfac-0ag

fgdesign Profile Picture

Flo @fgdesign

6 years ago

Yay, I was awarded a $100 bounty on @Hacker0x01! hackerone.com/handball10 #TogetherWeHitHarder

fgdesign Profile Picture

Flo @fgdesign

7 years ago

@stangomat @vladimge Taken from electronjs.org/docs/api/touch…

Flo retweeted
thekitze Profile Picture

kitze @thekitze

7 years ago

I'm *extremely* excited to announce sizzy.co - The Responsive Design Browser 🎉 🎊 🔥 🥁 🎺 🥳 YES! An actual browser for designers and developers 🤩 Tons of amazing features and even more coming soon! 😎 3 random people who RT will get a lifetime license 👌 🎫

fgdesign Profile Picture

Flo @fgdesign

7 years ago

@stangomat @SalesforcePetr @rsoesemann And text type for formatting purpose after blurring. It looks like that FF gets confused when changing types. I just left it as a lightning:input but without any formatter 💁‍♂️ In chrome it works well... bugzilla.mozilla.org/show_bug.cgi?i… Thats the bug tracking link the support sent me... 2/2

fgdesign Profile Picture

Flo @fgdesign

7 years ago

@stangomat @SalesforcePetr @rsoesemann This seems to be an issue in firefox. I opened a case in the past and they told me, they wont fix it because it's not "lightning related". In the background the lightning component changes input type from number to text. Number type when user focuses input field... 1/n

Flo retweeted
Senficon Profile Picture

Felix Reda @Senficon

8 years ago

Achtung! @ManfredWeber will die Abstimmung über #Artikel13 & die Urheberrechtsreform auf nächste Woche vorverlegen, um den #SaveYourInternet-Protesten zuvorzukommen! Wir brauchen einen öffentlichen Aufschrei, um das zu stoppen. Für die EU-Fraktion der SPD entscheidet @UdoBullmann

Flo retweeted
internetwache Profile Picture

Internetwache.org @internetwache

8 years ago

Today we are publishing that we had access to 7 water purification plant in Germany. We reported the issues to the German BUND CERT @BSI_Presse and the vendor of the control software. (1/2)

Trends for United States

Tommy John
Jacquet
Arsenal
Happy Birthday Sophie
Brett Callahan
#IndyCar
Man City
Maresca
Tzolis
Odegaard
Sandoval
Sunday Funday
Crash
Pozo
Community Shield
#SeductiveSunday
Grosjean
Jeffries
Sean Burke
Good Sunday

You might like

Digital Transformation/AI Architect @Microsoft (I believe in a liberal, secular, and democratic world where equality, fairness, and kindness prevail)
Godwin
@godwin003
66 Followers
Curious, Calm, Digital, German, .... Early stage in building my own business
Markus Keller
@markuscurious
292 Followers
Father of Four. Tightrope Walker from IT to humanity. Local politician (FREIE WÄHLER) „against all odds“.
Andreas. Der. FREIE. ...
@andreaswalter
62 Followers