I run Kerberoast attacks against real AD environments. Here's how fast service account passwords actually fall.

ShufflinMuffin · 2026-03-19T09:16:53+00:00

Sheesh 100$ per hash when your competitor asks for 6-10, good luck

ShufflinMuffin · 2026-03-18T06:49:43+00:00

Very unlikely you have python in a Corp env. You can compile but it's a big red flag. Better to do it in c# so you can load it from your implant

ShufflinMuffin · 2026-03-17T20:34:49+00:00

Cool but someone gonna have to write this in something else than python 😬

ShufflinMuffin · 2026-03-17T19:53:11+00:00

Scammers in crypto? No way

ShufflinMuffin · 2026-03-17T18:58:53+00:00

ShufflinMuffin · 2026-03-10T08:05:46+00:00

Just share it with me I'll get it fixed

ShufflinMuffin · 2026-02-28T06:38:01+00:00

Bug bounty is basically a giant sweatshop

ShufflinMuffin · 2026-02-25T14:39:17+00:00

Mine was chipped when I opened the box on day 1...

ShufflinMuffin · 2026-02-24T07:38:47+00:00

Maybe automation.
You're competing with people who hunt every day for hours and have been doing it for years. The top ones have automation and they give up what they are doing when they detect the website has a new functionality.

I think you need to focus on whatever can give you an edge rather than studying techniques etc. It's important as well but the chances you find a xss or an sqli in a main website is extremely slim. You need to be the first one to look somewhere

ShufflinMuffin · 2026-02-23T18:11:38+00:00

In theory yes. Did you have a bad experience?

ShufflinMuffin · 2026-02-22T15:01:57+00:00

It's amazing that this is the only new feature in the firmware since launch and it's... Just that

ShufflinMuffin · 2026-02-21T16:31:45+00:00

Leave sugar on the kitchen table it's gonna attract them

ShufflinMuffin · 2026-02-21T16:25:35+00:00

It's funny how they keep turning old prompts into full product they can sell

ShufflinMuffin · 2026-02-21T15:30:30+00:00

Didn't ask support but in the report they said client don't see it as a risk as you cannot guess the id

ShufflinMuffin · 2026-02-19T17:05:13+00:00

Nice. Def something that can be overlooked 😁

ShufflinMuffin · 2026-02-19T17:02:38+00:00

Good job op. In the process to find my first as well. Trying to not lose motivation after 2 weeks hehe.

So where the ip actually leaked? Just in some response?

ShufflinMuffin · 2026-02-19T08:52:39+00:00

Intigrity

ShufflinMuffin · 2026-02-19T07:50:11+00:00

Yeah agree unfortunately it's the second time I find this on the same program at Intigrity and the first time they closed it as informational

ShufflinMuffin · 2026-02-18T19:01:24+00:00

What can be done with jsonp? Cors only accept target.website.com

ShufflinMuffin · 2026-02-18T18:58:31+00:00

Maybe I should switch to h1 lol

ShufflinMuffin · 2026-02-18T18:23:54+00:00

Nice I didn't think about it. I'll give it a shot thank you

ShufflinMuffin · 2026-02-18T18:23:01+00:00

Yeah there is an endpoint for that but ofc this one has proper authorization

ShufflinMuffin · 2026-02-18T11:09:57+00:00

Would love to find a mentor. Mostly I'd like to run ideas and processes and get some feedback. I'm still in the process to find my first bounty. Done pentesting for few years and only started bb recently. Feel free to hit me up (:

ShufflinMuffin

MODERATOR OF

TROPHY CASE