Log inSign up
Image
user avatar
Niemand
@niemand_sec
Security Researcher at @xbow - Founder at @SwordBytesSec - Ex @immunityinc - #BugBounty hunter hackerone.com/niemand_sec - Blog niemand.com.ar
Argentina
youtube.com/channel/UCKmi4…
Joined May 2016
373
Following
5,320
Followers
  • Pinned
    user avatar
    Niemand
    @niemand_sec
    Jul 3, 2019
    "AntiCheat-Testing-Framework" is all the code developed during my research for @reconmtl I hope it will help people understand how Anti-Cheats work, and let them dive into this amazing topic. Feel free to collaborate. github.com/niemand-sec/An… #security #reversing
    Image
    GitHub - niemand-sec/AntiCheat-Testing-Framework: Framework to test any Anti-Cheat
    From github.com
  • user avatar
    Niemand
    @niemand_sec
    Nov 17, 2020
    So many Drupal apps vulnerable to this :) Endpoint: /node/1?_format=hal_json write up: ambionics.io/blog/drupal8-r…
  • user avatar
    Niemand
    @niemand_sec
    Jan 8, 2021
    Doing #BugBounty again :) Quick write-up about a Critical vuln I found: Exploiting Application-Level Profile Semantics (APLS) from Spring 🧙‍♂️ curl -H 'Accept:application/schema+json' -v http://localhost:8080/alps/profile/users niemand.com.ar/2021/01/08/exp… #BugBountyTips #infosec
    Image
  • user avatar
    Niemand
    @niemand_sec
    Sep 20, 2021
    Amazing write-up!! Two XOR-encryption, one structure reordering and one ROT shifting bypassed :)
    Image
    Reverse Engineering Adventures: League of Legends Wild Rift (IL2CPP)
    From katyscode.wordpress.com
  • user avatar
    Niemand
    @niemand_sec
    Aug 6, 2024
    Top 1 at the moment on both leaderboards (EpicGames and combined) for #h1702 from @Hacker0x01! 🙌🙌🙌 #BugBounty
    Image
    Image
    11K
  • user avatar
    Niemand
    @niemand_sec
    Jul 7, 2022
    After a lot of #bugbounty , it seems I finally made it over 10k points on @Hacker0x01 🤪
    Image
  • user avatar
    Niemand
    @niemand_sec
    May 27, 2022
    What an honor to finish between the top hackers at #h1303 🥳🥳 Congratulation to all the hackers that participated and also to @Hacker0x01 for hosting the event! #BugBounty
    Image
  • user avatar
    Niemand
    @niemand_sec
    Feb 19, 2021
    The moment you get THAT email: "Hey Hackerone ${{7*'7'}}, here is your SSTI" 30 seconds later I was logging into my @Hacker0x01 account 🤣
    Image
  • user avatar
    Niemand
    @niemand_sec
    Jun 16, 2021
    "Using BurpSuite to automate your work + 7 Tips and Mistakes when using this amazing tool!" A few months ago we did a Webinar with @hackerone and @shopify . Here is the recording in case you want to take a look at it: hackerone.com/resources/wist… #bugbountytips #security #hacking
    Image
  • user avatar
    Niemand
    @niemand_sec
    Jan 31, 2022
    If you are testing /graphql endpoints, don't forget to use @dee__see tool: graphql-path-enum Link: gitlab.com/dee-see/graphq… This helped me a lot last week! #bugbountytips #BugBounty
    Image
    gitlab.com
    dee-see / graphql-path-enum · GitLab
    Tool that lists the different ways of reaching a given type in a GraphQL schema.
  • user avatar
    Niemand
    @niemand_sec
    Jan 21, 2023
    MVH at #h1407, we did it @lean0x2f & kcho 😁😁 A pleasure to achieve this together with friends! Thank you @Hacker0x01 for this incredible event, and thank you #EpicGames for such an interesting and challenging scope!
    user avatar
    HackerOne
    @Hacker0x01
    Jan 21, 2023
    Congratulations to the winners from #H1407! This collaboration with #EpicGames shows how impactful working with hackers can be. 🙌 See the complete list of winners in the 🧵 below and show them some love.
    Image
    28K
  • user avatar
    Niemand
    @niemand_sec
    Nov 4, 2023
    Congrats to Spain and Israel for the 1st place and 2nd place an the #ambassadorworldcup from @Hacker0x01 🙌🙌🔥🔥🔥🎊🎊🎊
    Image
    Image
    20K
  • user avatar
    Niemand
    @niemand_sec
    Mar 18, 2021
    Today I hit 500 bugs reported to @Hacker0x01 🥳
    Image
  • user avatar
    Niemand
    @niemand_sec
    Jan 19, 2022
    In January 2021, after a 3 years pause, I decided to do #BugBounty again at @Hacker0x01 Excited to share the result of all my efforts😁: - Top 3 Argentina - Top 26 World Wide - Top 19 High/Critical Rep - 46 Criticals - 45 High/49 Medium/9 Low - +30 collabs @lean0x2f and others
    Image
    Image
    Image