b0n0b0 @b0n0b0__ X Profile

b0n0b0

@b0n0b0__

Followers

86

Following

316

Media

6

Statuses

84

CTF player @fibonhack Security Analyst and Researcher @CodeanIO

Joined September 2022

Don't wanna be here? Send us removal request.

b0n0b0

@b0n0b0__

22 days

RT @CodeanIO: Two of our Codean Labs colleagues evaluated OpenPGP.js and identified a signature spoofing vulnerability. Writeup includes a….

0

3

0

b0n0b0

@b0n0b0__

24 days

RT @thomasrinsma: Here's the write-up for the OpenPGP.js signature spoofing bug which @b0n0b0__ and I found. The PoC is included at the end….

0

34

0

b0n0b0

@b0n0b0__

1 month

RT @mailvelope: 🚨 Security Alert: A critical vulnerability (CVE-2025-47934) in OpenPGP.js (the crypto library Mailvelope is using) allows s….

0

3

0

b0n0b0

@b0n0b0__

1 month

RT @yeswehack: InfoSec media has jumped on the story of a vulnerability found via the OpenPGP.js Bug Bounty program on @yeswehack that allo….

0

8

0

b0n0b0

@b0n0b0__

1 month

RT @CodeanIO: At Codean Labs, our mission is to make the world more secure — and what better way than to secure fundamental open source pro….

0

3

0

b0n0b0

@b0n0b0__

1 month

RT @thomasrinsma: @b0n0b0__ and I found a bug in OpenPGP.js that allowed an attacker to modify a valid signature's text, without access to….

0

4

0

b0n0b0

@b0n0b0__

2 months

RT @CodeanIO: Codean Labs' @b0n0b0__ and @Doyensec's @drw0if discovered CVE-2025-32464, a heap-buffer overflow in HAProxy. Read our write-u….

0

6

0

b0n0b0

@b0n0b0__

2 months

Always great to work with you mate. We also published a small write-up about this vulnerability, check it out!.

Aleandro

@drw0if

2 months

me 🤜🤛 @b0n0b0__.

0

6

b0n0b0

@b0n0b0__

2 months

RT @Doyensec: We'd also like to recognize @b0n0b0__ 's cooperation on this advisory! 🙏.

0

3

0

b0n0b0

@b0n0b0__

2 months

RT @MaitaiThe: Shotout to my teammates @drw0if and @b0n0b0__ for pwning proxies.

0

1

0

b0n0b0

@b0n0b0__

2 months

RT @zi0Black: My team is hiring a talented Application Security Engineer, position is open to remote candidates worldwide🌎 Proven experien….

0

9

0

b0n0b0

@b0n0b0__

2 months

RT @smaury92: Romhack is coming up and the CfP is still open!.Got novel research you’d love to present in front of an eager audience, with….

0

2

0

b0n0b0

@b0n0b0__

3 months

RT @MaitaiThe: me, @lokiuox, beers and bugs.

0

1

0

b0n0b0

@b0n0b0__

5 months

RT @thomasrinsma: Just published the write-up of two bugs I found in LibreOffice, allowing remote exfiltration of file/env data and a semi-….

0

17

0

b0n0b0

@b0n0b0__

6 months

RT @thomasrinsma: Here's a working game of Tetris inside a PDF. Even has keyboard controls (by typing WASD in an input box). Plus, upon gam….

0

324

0

b0n0b0

@b0n0b0__

7 months

I attended @DefCampRO and it was a blast! Hope to come back in Romania soon

0

1

7

b0n0b0

@b0n0b0__

8 months

RT @thomasrinsma: Credits to @b0n0b0__ and @g_dellimmagine for helping find and PoC these buffer overflows :).

0

4

0

b0n0b0

@b0n0b0__

9 months

RT @fibonhack: Checklist before going to @nohatcon 2024:.- Leave the luggage empty, need space to bring back swag and Polenta Taragna from….

0

4

0

b0n0b0

@b0n0b0__

9 months

Does a router sing "don't loopback in anger"?

0

1

2

b0n0b0

@b0n0b0__

9 months

We cross sited the leak and managed to thanks to the romhack vibesss.See you there!.

fibonhack

@fibonhack

9 months

Fibonhack team member in the average weekend where we plan to play a CTF seriously: Our team when Mr. Fibonhacko randomly posts some CTF credentials on our discord: (attached video). Seems like we qualified for DefCamp CTF finals, see you in Bucharest!

0

7