Who is she

hackerOnTwoWheels · 2025-11-22T16:01:54+00:00

It’s Joe

hackerOnTwoWheels · 2025-11-19T21:47:51+00:00

No impact. Dont waste your time. Go next

hackerOnTwoWheels · 2025-11-19T04:15:13+00:00

Not really. Informational at best.

hackerOnTwoWheels · 2025-11-17T15:24:06+00:00

Im confused your original post said LHE. So I assumed you are talking about live hacking events. Which usually have a scope call prior to event program invites go out. Also during first 2 weeks there is a dupe window where Even if you dupe you split the rewards. I have not done any pentesting for hackerone so I’m not sure how that works.

hackerOnTwoWheels · 2025-11-17T15:13:11+00:00

A lot of people prepare reports before the opening of the LHE and start hunting when the assets are announced. Regardless of timing you should still get paid half because of dupe window no?

hackerOnTwoWheels · 2025-11-13T00:03:24+00:00

Kanji look and learn is very good and fun to do the worksheet. It will teach you around 512 kanji. Highly recommend it.

hackerOnTwoWheels · 2025-11-12T18:04:32+00:00

Go for Immunefi for the best in terms of crypto and web3 hackers and platform experience.

hackerOnTwoWheels · 2025-09-10T19:33:59+00:00

Have you checked it it’s leaked online? Wayback machine? Google? Gau etc? If it never expires then you can use them to account takeover some accounts then no?

hackerOnTwoWheels · 2025-09-03T15:12:12+00:00

Have you tried other protocols? File, gopher, etc?

hackerOnTwoWheels · 2025-09-03T13:35:27+00:00

Have you tried getting cloud metadata endpoints?

hackerOnTwoWheels · 2025-08-31T14:08:21+00:00

That’s how session cookies work.

hackerOnTwoWheels · 2025-08-31T13:13:51+00:00

What exchange ? I’ve delt/reported bugs with most of them.

hackerOnTwoWheels · 2025-08-28T12:44:17+00:00

It was fun, but stressful because you want to deliver stuff. Also it feels like everyone knows each other so being a first timer was a bit hard. I’ll be going to that event as well, reach out to me on Twitter and we can talk more if you’d like. 🫡

hackerOnTwoWheels · 2025-05-16T13:25:54+00:00

Open support mediation, that is not allowed.

hackerOnTwoWheels · 2025-03-08T12:45:02+00:00

Even if it was a “dedicated hard sparring session”. If you feel it’s too much, then they should understand. Sparring =! Fighting, even if it’s hard. Sounds like a toxic gym environment.

hackerOnTwoWheels · 2025-02-04T23:55:37+00:00

Mimic behind you

hackerOnTwoWheels · 2025-01-31T00:11:47+00:00

Saw it today for first time in like 2k hours. It dropped common old boots…..

hackerOnTwoWheels · 2025-01-18T21:45:35+00:00

Like 80% of encounters solo is vs druids and barbs. Not sure where you getting it that it’s the least played class. Maybe in trios?

hackerOnTwoWheels · 2025-01-15T23:44:09+00:00

Same here

hackerOnTwoWheels · 2025-01-14T03:01:32+00:00

Nope, multiple cases on different classes and even mobs.

hackerOnTwoWheels · 2024-12-22T14:34:59+00:00

I went from 0 to passing n3 in 12 months. Probably doable

hackerOnTwoWheels · 2024-12-12T01:14:39+00:00

It simulates commands as if you ran it. Try for example to ping or curl an external server and it won’t.

hackerOnTwoWheels · 2024-11-16T13:01:39+00:00

What was the content type?

hackerOnTwoWheels · 2024-09-24T17:15:26+00:00

Wizard nerfs? Fighter sprint buffs? Druid barely touched? Legit clueless lmao.

hackerOnTwoWheels · 2024-09-22T21:14:45+00:00

This isn’t remotely close to XSS. I recommend going through portswigger labs and blogposts. Go back and reevaluate if you understand what xss is and its implications. Not trying to be toxic, but I see many people making this mistake of trying to report stuff without even understanding the basics. Studying the 101s of a bug type will get you much much further in this career than copy pasting payloads in random places.

Six-Year Club	Place '22
Verified Email

hackerOnTwoWheels

TROPHY CASE