Ivan Grigorov (@reactors08) profile picture

Ivan Grigorov

@reactors08
Joined January 2016
  • Tweets27
  • Following88
  • Followers244
3Media
Photo by Ivan Grigorov (@reactors08)Photo by Ivan Grigorov (@reactors08)Photo by Ivan Grigorov (@reactors08)
Ivan Grigorov retweeted
Dmitriy Shagov (@dmi3sh) profile picture
Dmitriy Shagov@dmi3sh18 May 2016
2/2 Still no response and absolutely zero activity in the program. Imho @Hacker0x01 should think about pausing such "dead" programs.
1
1
Ivan Grigorov retweeted
harisec (@har1sec) profile picture
harisec@har1sec21 Apr 2016
unfuckingbelievable! devco.re/blog/2016/04/21/how…
23
18
Ivan Grigorov retweeted
HackerOne (@Hacker0x01) profile picture
HackerOne
@Hacker0x0116 Apr 2016
Check out H1's 5 Most Viewed Bugs of 2016! hackerone.com/blog/top-5-mos… @Aesteral @reactors08 @wesecureapp_bbp reactors08 and Orange Tsai
2
11
Ivan Grigorov retweeted
Sasi Levi 🎧 (@sasi2103) profile picture
Sasi Levi 🎧@sasi21031 Apr 2016
Which one you like the most? (order via alphabets).
31%Bugcrowd.com
7%Cobalt.io
55%HackerOne.com
7%Synack.com
55 votes • Final results
3
4
7
Ivan Grigorov retweeted
Sergey Belov (@sergeybelove) profile picture
Sergey Belov@sergeybelove28 Feb 2016
21 0day XSS on yahoo - blog.sergeybelove.ru/2016/02… (just want to write someting to my blog again, lol)
2
48
1
84
Спасибо за баунти. Можем дисклозить? - Great when finder of vuln gets bounty & report is published to the world hackerone.com/reports/116508
2
4
Checking your e-mail as a security researcher can be pretty exciting. Today was a good day. #bugbounty #hackerone
Image from Inti De Ceukelaire (@securinti)
18
21
83
Ivan Grigorov retweeted
Sean Melia (@seanmeals) profile picture
Sean Melia@seanmeals6 Feb 2016
Write up for the RCE and some other findings. seanmelia.wordpress.com/2016…
Getting Hustled by the Yahoo! Bug Bounty Program

Getting Hustled by the Yahoo! Bug Bounty Program

Note: I was at one point the top bug reporter for Yahoo! If they do this to me. They are very likely to do this to you. Yahoo Remote Code Execution CMS Yahoo Response: Hey Sean, Our committee finis…

seanmelia.wordpress.com
8
19
37
What can we learn from hackerone.com/reports/111440? Always treat third-party JS as untrusted and apply privilege separation where possible.
1
3
4
Ivan Grigorov retweeted
Nick Malcolm (@nickmalcolm) profile picture
Nick Malcolm@nickmalcolm20 Jan 2016
Perfect example of doing a bug bounty. Detailed report, and resolved quickly. Good job @reactors08 and @trello teapaw.org/hacker0x01/status/6898…
HackerOne (@Hacker0x01) profile pictureHackerOne
@Hacker0x0120 Jan 2016
Great report! MT: Trello's most serious security report yet hackerone.com/reports/111440. Caused by @wistia script on Trello @reactors08 @d_lec
4
4
Ivan Grigorov retweeted
HackerOne (@Hacker0x01) profile picture
HackerOne
@Hacker0x0120 Jan 2016
Great report! MT: Trello's most serious security report yet hackerone.com/reports/111440. Caused by @wistia script on Trello @reactors08 @d_lec
9
11
Trello disclosed a bug submitted by reactors08: hackerone.com/reports/111440 - Bounty: $1,152 #hackerone #bugbounty
Image from publiclyDisclosed (@disclosedh1)
1
11
9
❤ that sudden adrenaline rush when discovering a critical vulnerability
1
7
Ivan Grigorov retweeted
Daniel LeCheminant (@d_lec) profile picture
Daniel LeCheminant@d_lec20 Jan 2016
Trello's most serious security report yet: hackerone.com/reports/111440 by @reactors08 Caused by a flaw in a @wistia script we were including…
7
17
Load more