~ Your friendly neighbourhood hacker ¯\_(ツ)_/¯
Joined December 2011
- Tweets1.5K
- Following891
- Followers3.2K
- Likes4.5K
In October, I didn't submit any vulnerabilities and won't be able to submit for the next 5 months, but then I will! #TogetherWeHitHarder hackerone.com/last-month
Aditya Soni retweeted
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
Aditya Soni retweeted
Triaging experience at @Bugcrowd is extremely bad, even the valid demonstrated findings with POC and high - critical impacts are being marked N/A with templated comments.
Aditya Soni retweeted
Wild times
grok.com/share/bGVnYWN5_caa3…
Aditya Soni retweeted
I think we've discovered another critical vulnerability:
CVE-2026-BURNOUT: AppSec Professional Exhaustion
Severity: Critical (CVSS 10.0)
Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures.
Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends.
Attack vector: Reading security advisories.
Affected versions: All AppSec professionals, regardless of experience.
Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
Just got a reward for a critical vulnerability submitted on @yeswehack -- SQL Injection (CWE-89). #YesWeRHackers
Almost five years ago, I went from waiting for a triager’s response to being the person writing it.
October first week was my final week as a Triager at HackerOne, and it feels a little strange putting that into words.
I’m leaving grateful for the opportunity, the friendships, and everything these almost five years have taught me.
Signing off as a HackerOne triager, but still your friendly neighborhood hacker. ✌️
#HackerOne #BugBounty #InfoSec
To the hackers whose reports landed in my queue: thank you for the creativity, persistence, and discussions that kept me learning. Having been on your side, I know the work that happens before anyone clicks “Submit report.” I never wanted to lose sight of that.
To my teammates, mentors, and everyone I worked with: thank you for sharing your knowledge, having my back, and making room for a laugh along the way. It’s the people and the everyday conversations I’ll miss most.
From reports that made me think, “How did someone even find this?” to conversations that completely changed how I approached a problem. Being a triager challenged me to ask better questions, question my own assumptions, and see things from more than one perspective.
Coming in as a bug bounty hunter made this experience special. I got to work on the other side of the screen, alongside a community I was already proud to be part of, and discover just how much there was still to learn.
And learn I did.
Aditya Soni retweeted
Attacking triagers is NOT OK.
People who haven't done the job think it's easy, and they could do better.
Hackers always think their submissions are perfect, are always first, should never dupe, and it's the triagers fault if not.
You could not be more wrong!
This quoted post is unavailable.
I earned $1,500 for my submission on @bugcrowd bugcrowd.com/h/{id: "hetroublehacker"} #ItTakesACrowd
