Christian. Bug Bounty Hunter (Website Ethical Hacker)
curl ifconfig.me
Joined January 2025
- Tweets412
- Following41
- Followers148
- Likes1.8K
It's disappointing to see how many people still don't recognize the style of writing this show uses after we have had 5 seasons of it.
This is very clearly a build up depiction to what Jesus said in Matthew 26:53-54:
Matthew 26:53-54 KJV
Thinkest thou that I cannot now pray to my Father, and he shall presently give me more than twelve legions of angels? [54] But how then shall the scriptures be fulfilled, that thus it must be?
This show has a great writing style of building up to central story points. From the first episode it started this writing pattern, introducing Mary Magdalene and her being possessed with devils and her suffering, and Jesus healing her. We also saw this with the lead up of Herodias' daughter learning how to dance perfectly to seduce King Herod to ultimately ask for John the Baptist's head. Those are just 2 examples, the list goes on.
This is a depiction. The Chosen have decided to show Jesus Christ seeing angels ready at any time to slaughter those people around him coming to arrest him. I have no doubt they will continue this theme throughout that episode too and Jesus continually keeping them at bay nodding "no," even while being tortured. It's to make you feel exactly what he went through and understand that he COULD have nodded "yes" at any point and that would have been the end of it, but he DELIBERATELY CHOSE to allow it to happen, for you and I.
Very unfortunate
I'm usually not the type to argue about dupes, I just take them like a good boy and move on. But this time I actually want an explanation. I'm not gonna pretend the bounty doesn't matter, but at this point I care more about getting the full timeline and a proper explanation. I just want clarity.
I reported my LPE to MSRC back in JULY. Spent over 3 months waiting just for them to dismiss it over Developer Mode, even tho I already updated the PoC to work without it before they dismissed it.
Oct 27 I sent them another working PoC on a newer build that contains an unusually specific sig check. Same day I called them out publicly and they even DMed me saying they asked their team to take another look. Oct 28 they finally announce a secondary review and literally ONE DAY later its suddenly a duplicate???
Back when I was selling game cheats I genuinely got more professional handling from cheat resellers/staff I used to deal with than from MSRC.
FROM PEOPLE SELLING GAME CHEATS.
If it was a duplicate all along, then why did you let my report sit for months, argue about Developer Mode, and then after I got around what looks like deliberate security hardening, suddenly mark it as a dupe two days later instead of telling me that in the first place? The root cause was there since my initial submission, so why not mark it as a dupe right off the bat?
Krigshaw retweeted
Bug bounty has definitely changed.
I used to spend hours analyzing HTTP requests, switching back and forth between Firefox and Burp Suite.
Now, I open my terminal, point my AI skills at a target, intercept and analyze HTTP traffic using Burp Suite MCP, and offload heavy tasks to my HackBot running on a VPS.
But here’s the thing: AI doesn’t replace your hacking skills. It scales them.
The goal is to get really good at manual hacking first, then use AI to automate and scale what you already know.
Not the other way around.
You don’t start by building a HackBot and expecting it to hack for you when you don’t even understand what it’s doing.
Learn to hack first. Automate second. Scale third.
Keep hacking! ✌️
Krigshaw retweeted
5+ years of hard work, sleepless nights, and verified contributions on @Hacker0x01 vanished overnight with ZERO warning, zero email, and zero explanation.
#BugBounty #infosec #CyberSecurity #BugBountyCommunity #hackernews #securitynews
👇🧵
Krigshaw retweeted
I decided to give Immunefi Studio Review a shot before submitting a High severity finding.
The submission for this particular program costs $75 so I decided to pay $20 for a Studio review first to sanity-check the report.
Immunefi Studio came back with "Ready" - "meets standard escalation criteria with no blocking technical flaws".
To be fair, it suggested a couple of improvements to the PoC which I applied to the report before submitting.
So I paid the $75 and submitted.
15 minutes later, my favorite guy Andrew closed it as a duplicate of a report submitted 9 days earlier.
So that's $20 for Studio Review + $75 submission fee = $95 to have one Immunefi bot tell me "send it" and another Immunefi bot tell me "duplicate report".
That's the part I'm struggling with.
Immunefi Studio is explicitly advertised as checking duplicate risk too.
If a duplicate has already been sitting in your system for 9 days and the Review bot can't catch it, but the triage bot catches it almost immediately after submission, then what exactly is the value proposition here?
@immunefi / @MitchellAmador - I genuinely think this is useful feedback if you're still iterating on Immunefi Studio.
But from the whitehat side, this flow feels pretty broken.
Especially when it costs $95 to get to this outcome.
Praise God in the name of Jesus Christ. Got bounties for 2 of my reports on Intigriti! Let's gooo! #intigriti
If you've not worked intimately with AI yet, you probably shouldn't have an opinion on this, because it's more than likely wrong. Elon Musk has been warning about this exact scenario for like 15 - 20 years btw. Probably nothing.
Krigshaw retweeted
Claiming to be "white-hats" here is entirely incorrect. That's not how ethical hackers behave, regardless of intent. True white-hats disclose responsibly and DO NOT hold assets hostage. This is rogue, gray-hat behavior far outside typical ethical constraints.
JUST IN: 4,000 Bitcoin worth $320 million withdrawn following Liquid Network hack.
The hacker is now communicating with network maintainers through on-chain Bitcoin transactions & intends to return the $BTC after the vulnerability is fixed.
Ancient HackerOne technique resurfaces: take so long to mediate the report that the researcher forgets about it.
Krigshaw retweeted
ALERT: Wife has to read her husband's lips and speak for him after he broke his neck trying to rescue children in the ocean.
Josh Collette, a father of five, has been in the intensive care unit after he jumped into San Clemente’s Riviera Beach, breaking 2 vertibrea and badly damaging his spinal cord.
Josh, an avid swimmer and surfer, was trying to rescue 2 kids caught in a rip current.
Rose, Josh’s wife, has to read his lips and speak for him, as he is paralyzed after he hit his head on a sand wall created by the rip current.
“I dove headfirst, and that’s my fault. I should not have… I could feel myself dying. I couldn’t breathe, and they pulled me up out of the water.”
The family has raised $204,000 to help Josh get transferred to a Colorado facility that specializes in these types of injuries.
