Full time bug hunter.
Lyon, France
Joined October 2011
- Tweets618
- Following366
- Followers1.5K
- Likes1.7K
Pinned Tweet
I don't own hethical.io/ anymore (I didn't renew given how inactive I was) so be careful regarding the new cryptocurrency stuff there 😉
535
Florian Courtial retweeted
how am I so successful at bug bounties? it's really easy bro. I wake up at 4am every day and solve some linear algebra problems to get my mind going. after this i go for my daily half-marathon run. you know what they say, healthy body healthy mind. 1/3 #bugbountytips
As everyone is giving some statistics about 2021. Bug hunting is my full time job. I spent 256 hours bug hunting and earned 72,340$. I filled 80 reports on 4 programs. My goal isn't to make millions but have lots of free time. Hopefully this year will be as good 🤞
On a random topic, I went to visit ITER which is a nuclear fusion reactor under construction in the south of France, it was really interesting. Hopefully it will deliver, the first plasma is planned for 2025.🤞
1
Florian Courtial retweeted
Today I am blessed with a baby girl making me a proud father of 3! :) :) :)
Having said that I am now ready to take on new challenges and hence I am officially #opentowork
Remote / full / part time! Relocation if needed? sure!
Please share! Thank you in advance! =)
If you ever find an XSS in a Git branch name you are quite limited in which characters you can use. In that case split your payload in two parts, in the branch name you do an eval() and your full payload is elsewhere on the page (if possible).
Cool chaining of three bugs to get a RCE on a Kindle: medium.com/realmodelabs/kind…
Florian Courtial retweeted
2021 = more writeups! 🎉
Check out my new @GoogleVRP writeup about stealing any private @YouTube video:
bugs.xdavidhu.me/google/2021…
Florian Courtial retweeted
Bitcoin just crashed ~8%. This proves, as I have been saying for the last 5 years, that it is a terrible investment
Florian Courtial retweeted
Atlassian agreed to publicly disclose my report which resulted in CVE-2020-28914 against @katacontainers, and netted my second largest bounty ever! Thanks to @Atlassian and @Bugcrowd 😎 #BugBounty
bugcrowd.com/disclosures/7bf…
Florian Courtial retweeted
People keep asking me how I went from 143 followers to 150 in just 6 months.
Let me tell you it has been a journey.
A thread 👇
If I find an XSS but cannot run js code due to the CSP, I redirect the website to the attacker's website through a meta tag and run my evil code from there. You are not on the same domain but you can still do some cool stuff. Any other ideas?
I found my first valid Microsoft bug and got 5k as reward, it was more complicated than usual. A second vuln was considered hard to exploit and not rewarded, it will be the topic of my next write-up.
Hello fellow hackers. Last Friday was my last working day, I am now a full time bug hunter. My goal is not to make millions but have more flexibility about my work schedule. I will also have more time for write-ups and sharing. 🤞
The smallest CSS injection calling an external url I came up with. If you have smaller I am interested 🙂
