🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Bug bounty was so much more exciting to me back in 2016

Wondering how much sensitive info example.com has in its access logs

I knew it

Pain is what you experience when you have a decent amount of followers but 0 likes on your latest tweet :P

BOOM! This is it. The "BOOM" that started it all, or as Inti De Ceukelaire likes to call it: The big BOOM. 6 years ago: hackerone.com/reports/16392

Read all about our investigation on the HouseParty hack! 👇

.Karel Origin, Nadir and I won the most advanced hack prize and second price for the hackademic award 🥳 was a fun day and I'm looking forward to next year IRL

What are some creative or less known takeover techniques using DNS? Such as subdomain or zone takeovers

All good things come to an end, even 1337up0522. Never thought that I would finish in 2nd place. Super grateful for the Most Valuable Hacker award. Thanks a lot Intigriti! Hope I get to do this again sometime! :)

Had a lot of fun this event with Intigriti and The Paranoids! Meeting the hackers and Yahoo/Intigriti people was a real pleasure :) #1337up0822

In yesterday's Core Rule Set release several critical issues are getting fixed which I and other hackers reported during #1337up0522. The most interesting bug affecting broader number of WAFs is yet to be released so stay tuned!👾👾 coreruleset.org/20220919/crs-v…

Okay, who's going to be the first to find an IDOR in Twitter's Edit Tweet functionality?

You have command injection in a GitHub Actions workflow. Now what? Read my blogpost on leaking secrets from GitHub Actions workflows: karimrahal.com/2023/01/05/git…

I just published Identifying and Exploiting Unsafe Deserialization in Ruby XMLRPC link.medium.com/tc9mOBQlUBb

👋 I'm graduating (Spring 2024), and I am looking for a security role in the US. My interests include web app security, CI/CD security, and open-source security. Email - [email protected] LinkedIn - linkedin.com/in/karimrahal/ Any RT for reach would be appreciated ❤️

Easy you say?👀