Ivan Grigorov (@reactors08) profile picture

Ivan Grigorov

@reactors08
Joined January 2016
  • Tweets27
  • Following88
  • Followers244
3Media
Photo by Ivan Grigorov (@reactors08)Photo by Ivan Grigorov (@reactors08)Photo by Ivan Grigorov (@reactors08)
“The greatest bug will hide in the last place you would ever look.”
4
Any options to bypass IE11 anti-xss filter?
Google indexed a pass reset link to acc X.You need to set up a new pass to check if the bug exists
80%will set a new pass
20%will report w/o new pass
5 votes • Final results
#6am It feels like the whole community warms me in a cold morning. @Hacker0x01 Thanks for swags
Image from Ivan Grigorov (@reactors08)
1
2
17
added to Facebook hall of fame #facebook #bugbounty facebook.com/whitehat/thanks…
2
"Hi,Facebok will make a donation for you"3 month later.."Oh sorry,you should wait, due to the country you resides in
Image from Ivan Grigorov (@reactors08)
2
Ivan Grigorov retweeted
Dmitriy Shagov (@dmi3sh) profile picture
Dmitriy Shagov@dmi3sh18 May 2016
2/2 Still no response and absolutely zero activity in the program. Imho @Hacker0x01 should think about pausing such "dead" programs.
1
1
Wow new bbp! My hands are trembling in excitment to test Pornhub! 😆😆 hackerone.com/pornhub
2
4
Ivan Grigorov retweeted
harisec (@har1sec) profile picture
harisec@har1sec21 Apr 2016
unfuckingbelievable! devco.re/blog/2016/04/21/how…
23
18
Ivan Grigorov retweeted
HackerOne (@Hacker0x01) profile picture
HackerOne
@Hacker0x0116 Apr 2016
Check out H1's 5 Most Viewed Bugs of 2016! hackerone.com/blog/top-5-mos… @Aesteral @reactors08 @wesecureapp_bbp reactors08 and Orange Tsai
2
11
Who cares?! #FAIL #Skype goo.gl/ik8IGa
Ivan Grigorov retweeted
Sasi Levi 🎧 (@sasi2103) profile picture
Sasi Levi 🎧@sasi21031 Apr 2016
Which one you like the most? (order via alphabets).
31%Bugcrowd.com
7%Cobalt.io
55%HackerOne.com
7%Synack.com
55 votes • Final results
3
4
7
loooooool ))))) hackerone.com/reactors08 @Hacker0x01 #foolsday
3
Awful bounty range at private bb.min 50$.Reflect XSS=50$.Stored XSS=50$.CSRF+limited privilege escalation+XSS = admin account takeover = 50$
1
1
Ivan Grigorov retweeted
Sergey Belov (@sergeybelove) profile picture
Sergey Belov@sergeybelove28 Feb 2016
21 0day XSS on yahoo - blog.sergeybelove.ru/2016/02… (just want to write someting to my blog again, lol)
2
48
1
84
Спасибо за баунти. Можем дисклозить? - Great when finder of vuln gets bounty & report is published to the world hackerone.com/reports/116508
2
4
Checking your e-mail as a security researcher can be pretty exciting. Today was a good day. #bugbounty #hackerone
Image from Inti De Ceukelaire (@securinti)
18
21
83
Ivan Grigorov retweeted
Sean Melia (@seanmeals) profile picture
Sean Melia@seanmeals6 Feb 2016
Write up for the RCE and some other findings. seanmelia.wordpress.com/2016…
Getting Hustled by the Yahoo! Bug Bounty Program

Getting Hustled by the Yahoo! Bug Bounty Program

Note: I was at one point the top bug reporter for Yahoo! If they do this to me. They are very likely to do this to you. Yahoo Remote Code Execution CMS Yahoo Response: Hey Sean, Our committee finis…

seanmelia.wordpress.com
8
19
37
What can we learn from hackerone.com/reports/111440? Always treat third-party JS as untrusted and apply privilege separation where possible.
1
3
4
Ivan Grigorov retweeted
Nick Malcolm (@nickmalcolm) profile picture
Nick Malcolm@nickmalcolm20 Jan 2016
Perfect example of doing a bug bounty. Detailed report, and resolved quickly. Good job @reactors08 and @trello teapaw.org/hacker0x01/status/6898…
HackerOne (@Hacker0x01) profile pictureHackerOne
@Hacker0x0120 Jan 2016
Great report! MT: Trello's most serious security report yet hackerone.com/reports/111440. Caused by @wistia script on Trello @reactors08 @d_lec
4
4
Load more