Let's disclose everyone's IP addresses and brag about it. What could go wrong :D fly.pieter.com/fly_server.log #bugbounty

Have you ever found a TE-CL smuggling? It has to be TE-CL specifically, not CL.0, CL.TE, or any other type #bugbounty

Ever had triage issues after losing the final CRLF when copying an HTTP request? I discussed this with James Kettle a while ago, and the latest Burp release now flags missing blank lines automatically! #bugbounty

👀

One of the most interesting things I realized over the years is that the greatness of a #bugbounty program (even at huge companies) is often in the hands of a single passionate employee or at most a few. When they leave, things can quickly become very different

Good day to everyone - except those who report http requests smuggling as DoS #bugbounty

I don't know who needs to hear this, but if you have Param Miner installed in Burp Suite, you can use $randomplz anywhere (repeater, etc) to get a random value that can be useful as a cache buster #bugbounty

Imagine the internet but without: - 429 rate limits - HTTP Timeouts - CAPTCHAs - HTTP/1 so good 🥲