PlatasSec @PlatasSec

Tweets

717
Followers

607
Following

154
Likes

620

PlatasSec @PlatasSec

a month ago

I keep progressing on @Hacker0x01 bug bounty platform as this weekend I reported 3 valid cross-tenant IDOR #vulnerabilities (1 High, 2 Medium). Less than 4 days and I got them all triaged - quite surprised but glad to see such speedy work of H1 triage team!

9 3 132 5K 26

Download Image

PlatasSec @PlatasSec

2 months ago

Digging through #JavaScript source code often reveals juicy endpoints not (intentionally?) exposed in the UI. They’re often highly vulnerable, specially when those are developed for internal use or potentially 'trusted' users. Cheers to the developers!🤘

0 0 4 253 0

PlatasSec @PlatasSec

3 months ago

First valid report on @Hacker0x01 platform just got triaged with a Medium severity IDOR found in public program @Klarna! #bugbounty #hacking #IDOR

1 0 80 2K 8

Download Image

PlatasSec @PlatasSec

3 months ago

Sweet High vulnerability on @Bugcrowd , breaking personal record! IDOR allowed low-priv. user to change payment configurations of other companies 🤘 #bugcrowd #hacking #bugbounty

1 0 86 3K 16

Download Image

PlatasSec @PlatasSec

3 months ago

I've officially entered the overall Top 100 (currently ranked #98) on the @intigriti Bug Bounty platform — 120+ valid vulnerabilities, and Top 1 in 3 private programs! Looking forward to growing further & climbing even higher in the rankings. #BugBounty #Intigriti #hacking

1 1 38 1K 2

Download Image

PlatasSec @PlatasSec

6 months ago

Great performance on the @intigriti Bug Bounty platform — I've surpassed 1k points and ranked 4th on the last 90-day leaderboard!

2 0 11 795 2

Download Image

PlatasSec @PlatasSec

7 months ago

More compliments from companies coming in! This time it's for a Critical #IDOR reported on @intigriti platform - that's what we're here for!🫡 #BugBounty #hacking #HackWithIntigriti

2 1 42 2K 2

Download Image

PlatasSec @PlatasSec

8 months ago

Reporting is the hardest and most boring part of #BugBounty, but sometimes it's just worth it when companies appreciate good quality reports - kind bonus received on @intigriti platform! #hacking #pentesting

0 0 39 2K 2

Download Image

PlatasSec @PlatasSec

9 months ago

Starting the week with 2 juicy IDORs as P2 in @Bugcrowd - nice Christmas gift $X,XXX🎁! bugcrowd.com/platassec #BugBounty #Bugcrowd #ItTakesACrowd

3 0 19 511 4

Download Image

PlatasSec @PlatasSec

9 months ago

Kudos to @intigriti's triage team - you guys make our research experience amazing with your speedy response times. Always happy to help triaggers by making easy-to-follow reports ;) #bugbounty #intigriti

1 2 35 2K 2

Download Image

PlatasSec @PlatasSec

10 months ago

Seems I've been busy lately on @intigriti #BugBounty platform. So far 1 Critical and quite a few High/Medium vulnerabilities were reported and already pending (16) in the pipeline

5 0 66 3K 6

Download Image

PlatasSec @PlatasSec

10 months ago

Another IDOR accepted in @Bugcrowd, close to reach 30 valid vulnerabilities reported in this platform and increasing the ones from BB. Sadly, GUIDs are killing me due to BC's VRT / high complexity attack classification as P4. bugcrowd.com/PlatasSec

1 0 6 463 2

Download Image

PlatasSec @PlatasSec

10 months ago

An IDOR I reported some days ago classified as Medium severity has been increased to High by the company as their dev team managed to find another and even more severe issue due to my report - thanks @intigriti, best #BugBounty platform in the space!

2 1 84 4K 13

Download Image

PlatasSec @PlatasSec

11 months ago

Nice end of the week! So far 9 vulnerabilities accepted in @intigriti! #BugBounty #hacking #BB #Pentesting

1 0 43 3K 4

Download Image

PlatasSec @PlatasSec

a year ago

Just stacked some $BTC for long term-plans. On the flip side, I made a bank transfer over the weekend and still waiting for it to 'arrive'...traditional banking system at the top of innovation, isn't it? 👀😂 Even if it's just playing around with fake numbers though.

0 0 0 314 0

PlatasSec @PlatasSec

a year ago

New video on my YouTube channel is up! 3 machines from @VulnHub on diff. networks where I explain how to use #chisel & #socat for Pivoting with techniques that allowed me to pass the #eCPPT & will help for #OSCP. youtu.be/h8ITLYekt6I #pivoting #hacking #vulnhub #pentesting

0 0 2 487 0

PlatasSec @PlatasSec

a year ago

After some time off - working and getting cybersecurity certifications - I'm just back cooking some fresh content for my #YouTube channel! Stay tuned 📹 youtube.com/@platassec

2 0 1 357 0

PlatasSec @PlatasSec

a year ago

Happy to share I've passed the Certified Professional Pentration Tester (#eCPPT) certification exam from @ine @inesecurity! It required great skills on enumeration, pivoting and PE techniques on a corporate network for both Linux and Windows systems. certs.ine.com/fab1a3f3-3691-…

2 0 3 430 0

PlatasSec @PlatasSec

a year ago

Finally, my #eCPPT report from @ine has been submitted! It has been a fun certification so far which made me push harded on pivoting and enumeration. Now I'm looking forward to receiving the results and jumping into the next cert soon!😜

0 0 5 405 0

Download Image

PlatasSec @PlatasSec

a year ago

Happy to share that I've recently passed the Certified AppSec Pentester (#CAPen) exam from @TheSecOpsGroup. The certification is a practical exam which includes #OWASP 10 app security-related topics such as #SQLi, #XSS, #CSRF, #BAC, & other misconfigs. #web #security #hacking