Youssef (@regex33) header
Youssef (@regex33) profile picture

Youssef

@regex33

Pentester | Bug Bounty Hunter

youssefachtatal.medium.com/
Joined February 2025
  • Tweets5
  • Following90
  • Followers35
Bug bounty programs are using weak excuses to scam researchers out of critical payouts. I reported a full sandbox escape to a Kubernetes node as root from normal access in a container to the host node in their infrastructure. @Hacker0x01 #bugbounty
Image from Youssef (@regex33)
Image from Youssef (@regex33)
Image from Youssef (@regex33)
Image from Youssef (@regex33)
15
16
2
149
8,679
The funny part is they received all the details, applied the exact remediation I recommended, and then asked me to reproduce it again. They literally just played dumb to get a free retest out of me before closing it lmao. 😂
4
250
Youssef retweeted
Youssef (@regex33) profile picture
Youssef@regex33Nov 5
Bug bounty programs are using weak excuses to scam researchers out of critical payouts. I reported a full sandbox escape to a Kubernetes node as root from normal access in a container to the host node in their infrastructure. @Hacker0x01 #bugbounty
Image from Youssef (@regex33)
Image from Youssef (@regex33)
Image from Youssef (@regex33)
Image from Youssef (@regex33)
15
16
2
149
8,679
CVSS' Attack Complexity metric is the bane of bug bounty hunters: "you tried really hard to find that bug, so we'll pay you less".
Image from James Kettle (@albinowax)
17
16
2
312
27,160
Load more