Embed Notice

this was... basically my experience with hackerone, the one time i used them.

the first 'hack the pentagon' bug bounty. where I found two bluecoat proxies that were misconfigured and permit traffic natted into their lan from the wan.

so i used proxychains, specified the wan addressess as http proxies, and contorted nmap to scan through it, and was getting tcp open/close hits from a 172 network inside what i was told later was "a training environment".

zero payout, no credit
but i got a coin?