Lauritz @_lauritz_

IT-Security Researcher, Pentester and Bug Hunter. Passionate about 💻, 🤽‍♂️, ⚜️, 🎸 and ⚽ (@VfLBochum1848eV ) #Kaeferjaeger + H1 Ambassador security.lauritz-holtmann.de Germany Joined April 2012

Tweets

2K
Followers

2K
Following

1K
Likes

3K

Lauritz @_lauritz_

2 days ago

If you are using Nextcloud Mail... you may want to make sure to update to the most recent version of the extension. apps.nextcloud.com/apps/mail/rele… Just stumbled over a trivial XSS issue by accident, just to find out, it was apparently addressed yesterday: github.com/nextcloud/mail…

0 0 2 288 0

Download Image

ArtSec @_ArtSec_

a week ago

Secured my First Hacker Award at the 3rd H1 Club Event Germany, as Most Helpful Hacker🫡It's been a pleasure as always, huge thanks to @_lauritz_ and @Hacker0x01 for the Event!! Leaderboard results coming soon

3 1 43 2K 4

Download Image

Lauritz @_lauritz_

3 weeks ago

@nullcon Berlin was a blast 💥 Thanks for the amazing time, great talks, impactful collaboration with @Krevetk0Valeriy in @yeswehack's Mini-LHE and all the networking! See you all again next year at NullCon Berlin 2026.🤞 Thanks @antriksh_s for organizing this awesome event. ❤️

Valeriy @Krevetk0Valeriy

3 weeks ago

3 4 62 5K 1

Download Image

2 1 16 920 0

Lauritz @_lauritz_

2 months ago

Unser @Hacker0x01 Bug Bounty Meetup geht in die nächste Runde 🤩 👥 30 Plätze 📆🌐 10. - 20.09.25 (Remote-Hacking) 📆🧑‍💻 20.09.25 (In-Person in Essen) ⏰ 12 - 18 Uhr 📍 Rivvers Essen-Lindenallee rivvers.de/essen/coworkin… 🚝🚶 10min Fußweg vom HbF Essen 👉 h1.community/e/mbkdm3/

2 1 7 452 1

Download Image

Lauritz @_lauritz_

2 months ago

I just got the confirmation that I was selected for this year's @nullcon Berlin Bug Bounty Scholarship 🎉 This will actually be my fourth @nullcon, I am looking forward to meeting friends and doing some bug bounty hunting in September. See you there! :) nullcon.net/berlin-2025

1 2 32 1K 3

Download Image

Oli (C..1..P.H.Y) @marcolivermunz

3 months ago

I reported a single, highly critical vulnerability that earned the top payout of the event. 💥🐞 Big thanks to @EXNESS for putting together such a great virtual meetup, and a special shoutout to @_lauritz_! Everything was incredibly well organized! 🙌

Lauritz @_lauritz_

3 months ago

3 3 61 14K 5

Download Image

1 1 34 2K 1

xssdoctor @xssdoctor

4 months ago

I just found the coolest csp bypass ever! did you know that a valid pdf can ALSO be valid javascript? (details below)

11 123 788 58K 717

Lauritz @_lauritz_

4 months ago

I am getting a lot of spam recently via DM, even though I have the filter for low-quality messages enabled. Sad, but I feel like I have to restrict message requests for now, even though I think open DMs are generally a good thing. If you want to contact me, use Discord or email

1 0 3 680 1

Download Image

Lauritz @_lauritz_

5 months ago

It was an honor to participate with a German team for the first time - thanks a lot @Arl_rose and everyone who made the event possible. :) Looking forward to the next AWC 🙌 Make sure to join your regional H1 chapter at h1.community/chapters/ to not miss events like this!

Ariel Garcia @Arl_rose

5 months ago

8 15 133 18K 9

Download Image

1 0 6 616 0

Lauritz @_lauritz_

8 months ago

When testing "regional" bug bounty programs, often a local phone number is required for signup. Are there any goto tools/services in the bug bounty space to get valid non-blacklisted temporary phone numbers? Most services look very shady tbh 🙈 #bugbountytips

2 0 16 1K 8

Lauritz @_lauritz_

8 months ago

I get why @intigriti has the "Auto-Suspension" feature (kb.intigriti.com/en/articles/59…). But it is very annoying for researchers. Trying to get reports through for days. Program becomes active from time to time and is locked after few mins. It is not even possible to create drafts. 🙄