/home/toxicat0r @toxicsolution

Tweets

108
Followers

262
Following

2K
Likes

3K

/home/toxicat0r @toxicsolution

5 years ago

@Empezando51 @AnonOpsSE True. It is confirmed by the Norwegian politician Ola Borten Moe, who made the decision alongside with the Norwegian government. - Sincerely, a Norwegian citizen

3 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@Bugcrowd IDOR and XSS

0 0 2 0 0

View Details

PortSwigger Research @PortSwiggerRes

5 years ago

HTTP/2: The Sequel is Always Worse by @albinowax portswigger.net/research/http2

12 473 994 0 137

View Details

/home/toxicat0r @toxicsolution

5 years ago

@brkb4mk Without doubt @PortSwigger ‘s Web Academy: portswigger.net/web-security They also just released a new cert. Highly recommended.

1 0 7 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@Bugcrowd Duplicate

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@BrekkeJan @JacksonHHax I know you got a taste for Biebian. Don’t lie :) biebian.sourceforge.net

1 0 2 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@BrekkeJan @ingebjorgthor Ord blir fattige…

1 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@ingebjorgthor Minner meg om denne jeg fant i Portugal

0 0 0 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@Bugcrowd Cheers 🥳

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

I earned $1800 for my submission on @bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd API takeover (customer data exposed). Several small bugs resulted in one big final payment :)

2 1 27 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@iamrobot321 @Bugcrowd Thanks mate! I usually dig in every app available from the customer. You can usually find endpoints through the iOS app which are otherwise not exposed in the web app. Some endpoints in the mobile app are not properly secured compared to web.

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@cwinfosec @thecybermentor hunter2

0 0 7 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@nudelbrot @Bugcrowd Yip, I agree. I’m just thinking about the damage someone could have caused. Anyway, thanks :)

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

I earned $600 for my submission on @bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd Administrator privileges to their API :)

2 2 35 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@drunkrhin0 @Bugcrowd Awesome 😍

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

@Bugcrowd @_zwink Nice blog post :) I actually have the same mindset. Bug bounty hunting is fun, and kind of like a game. I’ve actually stopped playing video games for the exact same reason. The money is a bonus ;) Kudos @_zwink

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

I earned $450 for my submission on @bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd IDOR exposed customer data. Changed the HTTP method from PUT to GET, shortened down the URL, and finally changed the user ID :)

1 2 33 0 2

View Details

/home/toxicat0r @toxicsolution

5 years ago

@Bugcrowd Thanks @Bugcrowd 🥳💯

0 0 1 0 0

View Details

/home/toxicat0r @toxicsolution

5 years ago

I earned $300 for my submission on @bugcrowd bugcrowd.com/toxicat0r #ItTakesACrowd IDOR in a private program ;) Got another $150 for no rate limiting as well 🥳