Fix Things and Break Others ¯\_(ツ)_/¯ | Old-School iOS Reverse Engineering | Electronic ST | WhiteHat | Bug Bounty Hunter | Acknowledged By Apple
Algeria 🇩🇿🇵🇸
- Tweets 400
- Following 840
- Followers 374
- Likes 24,739
إنا لله و إنا إليه راجعون. أعظم الله أجركم، الله يرحمو و يسكته الفردوس الأعلى من الجنة و يلهمكم جميل الصبر و السلوان
1
82
The Team promptly pushed a FIX for a Low-Hanging Fruit finding, and I delivered a FIX-Bypass just minutes later 🕑
@Bugcrowd
#BugBounty
#CyberSecurity
2
33
1,136
أعظم الله أجركم أخي صالح، الله يرحمها و يسكنها الفردوس الأعلى من الجنة و يلهمكم جميل الصبر و السلوان
1
35
أنا هو صاحب القصة شخصيا 😂😂😂
أنا بينت في ال PoC كيفية استغلال الثغرة و سحب ال PII بينما صاحبنا مبلغها origin reflection فقط، لكن بما أنو بلغ عليها قبلي بي 16 يوم يعني هو لي أخذ الباونتي.
11
5,596
3 years ago (Sep 2023):
On @Bugcrowd I reported a CORS Misconfig exposing PII → Closed as N/A.
Yesterday (31 Jul 2026):
A program Team Member re-classified it as a valid P3, but marked duplicate of a report submitted 16 days earlier.
¯\_(ツ)_/¯
#BugBounty
#CyberSecurity
5
1
88
5,432
Those bitchhes are IOF pigs. FYI, every single israheli pig is a legitimate target, not only in Palestine but all over the world
15
Thank you! I appreciate the collaboration and transparency from both the MSRC and Product Engineering teams. Always glad to contribute in strengthening the ecosystem.
1
161
My report to @msftsecresponse was assessed as "By Design". However, as a direct result of my report, Engineering had to update the docs to clarify undocumented/confusing behavior. Sometimes the Soft-Patch isn’t code, it’s the documentation.
#MSRC
#BugBounty
#CyberSecurity
1
5
1,093