this was... basically my experience with hackerone, the one time i used them.
the first 'hack the pentagon' bug bounty. where I found two bluecoat proxies that were misconfigured and permit traffic natted into their lan from the wan.
so i used proxychains, specified the wan addressess as http proxies, and contorted nmap to scan through it, and was getting tcp open/close hits from a 172 network inside what i was told later was "a training environment".
zero payout, no credit
but i got a coin?
Viss
npub12a…xyvvc
2025-04-24 21:53:09 CEST
in reply to nevent1q…le5s
Author Public Key
npub12aszc2xqlhhlug489ldgzdgd3cap6ndjf2y43lw2dmm5qc7szveq3xyvvcSeen on
wss://relay.momostr.pinkPublished at
2025-04-24 21:53:09 CESTEvent JSON
{
"id": "6e1c0d6fca9d99933241fc085660ea69362b2cea8b23373d8a2576d11ee78fc9",
"pubkey": "57602c28c0fdeffe22a72fda81350d8e3a1d4db24a8958fdca6ef74063d01332",
"created_at": 1745524389,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/@Viss/114394686390017436",
"web"
],
[
"p",
"57602c28c0fdeffe22a72fda81350d8e3a1d4db24a8958fdca6ef74063d01332"
],
[
"e",
"bd5bed7e8c106ddbd651dc2744f0c845e74f1447a3bd509aec7ce85e5af58aab",
"",
"root",
"57602c28c0fdeffe22a72fda81350d8e3a1d4db24a8958fdca6ef74063d01332"
],
[
"proxy",
"https://mastodon.social/users/Viss/statuses/114394686390017436",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/Viss/statuses/114394686390017436",
"pink.momostr"
],
[
"-"
]
],
"content": "this was... basically my experience with hackerone, the one time i used them.\n\nthe first 'hack the pentagon' bug bounty. where I found two bluecoat proxies that were misconfigured and permit traffic natted into their lan from the wan. \n\nso i used proxychains, specified the wan addressess as http proxies, and contorted nmap to scan through it, and was getting tcp open/close hits from a 172 network inside what i was told later was \"a training environment\".\n\nzero payout, no credit\nbut i got a coin?",
"sig": "a15755405d2d02910770e258fcee151098df6d2201cf110c903abd56675215b3d659a24b4ffce40875d66e4611da575e5c3c881c07a9b26b08545ce4e63c4bda"
}