Atom (@Atom_User_) header
Atom (@Atom_User_) profile picture

Atom

@Atom_User_

Full time Bug Bounty Hunter on Google

 Android
at0m.space/
Joined May 2018
  • Tweets39
  • Following257
  • Followers184
7Media
Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)
1/4 In bug bounty, finding Critical vulnerability in widely used software like Jira can take months Mine took three
Image from Atom (@Atom_User_)
1
1
5
386
While we wait for the #PHP2Shell patches, we pulled some numbers from Profundis. PHP shows up in 347,425 of 6.08M HTTP(S) records over 24h (5.7%). That isn't a count of vulnerable servers. CVE-2026-109618 / CVE-2026-109619 Fixes: 14:00 UTC.
🤖 Made with AI
Image from Profundis.io (@profundisio)
1
6
11
2,110
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
69
528
100
3,157
378,382
I found Two Critical vulnerabilities on Google Always feels good to receive emails from them #bugbounty #cybersecurity #infosec #hacking
Image from Atom (@Atom_User_)
8
196
6,689
We investigated a spam campaign running on throwaway domains, and found the company behind it with our new Pivot tool. Its WHOIS was privacy-protected, but the company name was left in the organization field, on 208 domains. blog.profundis.io/blog/from-…
From one spam email to 208 domains and a French webmarketing company

From one spam email to 208 domains and a French webmarketing company

I took one junk email from my quarantine folder, pivoted on its WHOIS registrant with Claude Fable 5 and the Profundis MCP, and ended up on the web server of a registered French webmarketing company.

blog.profundis.io
1
7
4
11
1,886
What consulting or advising 2,000 executives taught me about performing under pressure

What consulting or advising 2,000 executives taught me about performing under pressure

Article · @marcuswlefton
1
1
158
Our AI-powered Favicon Matcher just got a major upgrade! Search is now ~90× faster (near-instant results) and it considers more candidates, so matches are sharper than ever 😎 Find visually similar favicons across billions of indexed sites 👇 profundis.io/tools/favicon-m… #Bugbounty #recon #osint #ai
3
1
9
1,677
1/2 9 minutes, 400€ One of the simplest bugs I ever found I almost skipped this target This time I did the opposite of what I usually do I hunted where nobody looks I jumped into @profundisio (my favorite asset discovery engine) and used its Pivot tool
Image from Atom (@Atom_User_)
1
1
1
8
1,272
2/2 Out of nowhere, after a few minutes I found a forgotten domain I ran ffuf on it One endpoint answered: /api/Users → 500 Weird I opened it in my browser → 200 It leaked 600+ accounts. The full user database Trivial bug The hard part was finding a door nobody else tried
2
2
268
I earned $10,000 for my submission on @bugcrowd bugcrowd.com/h/elsicarius #ItTakesACrowd #BugBounty Bug: Weak JWT sign key + mass assignment in the JWT -> read arbitrary customer sensitive/PII data Fully found by Claude using @profundisio MCP
6
16
333
10,480
4/4 Result: $3,600 bounty on a bug older than my career. I didn't find it because I was the best. I found it because I committed to one target long after most people had moved on
Image from Atom (@Atom_User_)
1
213
#bugbounty #cybersecurity #infosec #hacking
98
Still using a single hash to reverse search your target favicons? We did some intensive research on a recon technique nobody thought about: visual similarity search across 50M+ favicons. Full write-up 👇 blog.profundis.io/blog/favic… #osint #cybersecurity #recon
Visual Favicon Similarity Search for Reconnaissance

Visual Favicon Similarity Search for Reconnaissance

What if you could search for similar favicons, not just exact hash matches? Discover how we built a favicon similarity search that processes 50+ million images in seconds.

blog.profundis.io
3
22
3
98
11,571
Super événement ! Ravi d’avoir pu partager mes connaissances lors d'un talk. Des échanges enrichissants, hâte de revoir les autres interventions en rediffusion. Merci à l’ESN'HACK pour l’organisation !
Bleizack (@bleizack) profile pictureBleizack@bleizack28 Jan 2025
🎥 Les rediffusions du dernier Ambrosia sont enfin dispo ! Retrouvez les talks de @Creased_, @GnousRick, @Atom_User_, @_Worty, @kevin_mizu, Onirix et Iziram sur notre PeerTube : peertube.esnhack.fr 🎬
Image from Bleizack (@bleizack)
1
3
433
Hello ! 🧙🏼‍♂️ On se retrouve demain (Mardi 22) à 21h as usual ! ⏰ Topic 1 : Optimize your BSCP 🤔 FT. @Atom_User_ Topic 2 : Lalubuntu Ground Work & 24.04 migration 🤯 rdv @ twitch.tv/thelaluka
TheLaluka - Twitch

TheLaluka - Twitch

Sharing is Caring | Hacker, Eternel Learner, & Cat. =^~^= // Intro at youtube.com/watch?v=EaMDFxfcQHY — TheLaluka streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
1
3
4
1,949
(1/2) Mission accomplie ! Après plusieurs mois de travail intense, je suis officiellement Burp Suite Certified Practitioner (BSCP) ! 📢 J'ai rédigé un article sur mon blog afin de vous partager les stratégies qui m'ont permis d'obtenir la BSCP Merci à @PortSwigger ⬇️
Image from Atom (@Atom_User_)
7
9
56
4,842
(2/2) 📢 Retex pour la communauté : at0m.space Vous voulez en savoir plus ? Rejoignez-moi en live le 21 octobre 21h avec @TheLaluka ! On parlera méthodo, hacking et conseils pour réussir la BSCP. 👉 teapawt.net/TheLaluka/status/18482… #blog #BSCP #cybersecurite
Image from Atom (@Atom_User_)
Laluka@OffenSkill (@TheLaluka) profile pictureLaluka@OffenSkill@TheLaluka21 Oct 2024
Hello ! 🧙🏼‍♂️ On se retrouve demain (Mardi 22) à 21h as usual ! ⏰ Topic 1 : Optimize your BSCP 🤔 FT. @Atom_User_ Topic 2 : Lalubuntu Ground Work & 24.04 migration 🤯 rdv @ twitch.tv/thelaluka
TheLaluka - Twitch

TheLaluka - Twitch

Sharing is Caring | Hacker, Eternel Learner, & Cat. =^~^= // Intro at youtube.com/watch?v=EaMDFxfcQHY — TheLaluka streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
1
5
561
...
Image from Atom (@Atom_User_)
Image from Atom (@Atom_User_)
1
1
2
14
2,748
Load more