How I hacked hundreds of companies through their helpdesk

Why you shouldn’t share links on Facebook

Update: Facebook decided to fix this issue after all. This blog post received way more (media) attention than I’d have expected. I am glad people responded and Facebook listened, but if I had known this article would gain this much attention I’d have spent…

How I got your phone number through Facebook

Don’t have the time to read the entire article? Go to the FAQ section below for…

GOTCHA: Taking phishing to a whole new level

Why X-FRAME-OPTIONS matters on API endpoints

Abusing autoresponders and email bounces

Being a bug bounty hunter, I face a lot of competition. Lots of companies are willing to…

How I found a stored XSS on thousands of webshops

… and the bug is still out there.

How I hijacked your account when you opened my cat picture

How I hacked a 38-year-old videogame in a bug bounty contest

Introduction

On September 2016 I went to the BruCON security conference in Ghent. As usual, multiple sponsors were promoting their latest products and platforms. After enjoying some talks by…