Ciarán Cotter (@monkehack) header
Ciarán Cotter (@monkehack) profile picture

• Irish/Japanese web/AI hacker from Cork, living in Scotland • Founder @StarstrikeAI • BT6 Operator • Newsletter @ https://nitter.cf/t.co/fZXECNnM41

Edinburgh, Scotland
Joined March 2021
Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)Photo by Ciarán Cotter (@monkehack)
Cuck Hacking is diabolical 🤣
U guys getting dopamine from cuck hacking ?
1
21
1,484
A lot of Japan’s infrastructure is built on really old systems, so this doesn’t surprise me. The corporations tend to kick the can down the road and avoid dealing with it until this kind of thing happens
🇯🇵 Japan’s hacking problem has gotten so bad the Prime Minister is stepping in herself. PM Sanae Takaichi is holding an emergency meeting with her ministers tonight, after a bunch of cyberattacks left Japanese companies leaking huge amounts of data. The latest one hit GMO Internet Group, where hackers got into its currency trading service and some customers found trades in their accounts they never made. GMO is now asking the government to help take the attackers down. And the awkward part is that Japan only just brought in new laws less than a month ago, letting it hunt down hackers before they strike. Turns out the hackers weren’t too worried about them. Source: Bloomberg / Writer: Daniyal
2
18
1,377
I won Best Chrome VRP Researcher at Bugswat Singapore! I also shared Best Meme with @inspector_amb. I’ll be talking (in abstract) about some of my exfiltration and guardrail bypassing techniques at NahamCon in California next month!
14
6
214
3,847
Ciarán Cotter retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
93
998
346
5,162
4,720,870
I’m liking this recent trend of people outside the bug bounty community calling out the low max bounties of some very large companies.
4
4
74
3,699
As someone who got an N/A yesterday because the company decided that my 0-day wasn’t their responsibility, limiting based on N/As is definitely not the right way.
Replying to @Bugcrowd
@Bugcrowd is becoming the anti-platform. Using N/A to calculate accuracy and limit reports is terrible. Soon, many researchers may not be able to submit reports. How they use N/A: • Took 20 days + fixed → N/A • No time to understand → N/A • Don’t understand scope → N/A
3
2
58
4,165
Ciarán Cotter retweeted
Introducing Gemini 4 Argon, our new frontier model, rolling out to cyber defenders starting today, and more widely as soon as possible. I am really excited by the progress we have made here. Argon is priced at $2 in and $10 out during introductory pricing!
1,032
1,047
744
14,798
1,643,004
🐵 MonkeHacks #101 Cork LHE, Moving, Prompt2Pwn monke.ie/p/monkehacks-101 #bugbountytips #hacktheplanet #BugBounty
2
2
47
2,062
Bug bounty these days is like: "We regret to inform you that BigStinkyCompany is pausing all submissions until further notice. We're excited to add "subdomain.stinky.com" to our assets after this break, but we're lowering our Medium and Low payouts in line with industry standards"
5
1
72
3,664
I wish more tokens were spent on making existing software more efficient instead of generating new slop code
3
4
31
1,770
Protonmail outage ☹️
1
7
1,302
I’ve been strongly considering creating a YouTube channel for MonkeHacks in parallel with the newsletters. I don’t make money on it, so it’s just for fun. And I think it would be nice to have some more resources out there on hacking AI and navigating the bug bounty landscape rn.
12
82
2,440
Are you feeling lost in the age of AI in bug bounty?
45%Yes
31%No
24%Show results
344 votes • Final results
3
14
2,355
This tree analogy is good
Here's an example from nature that I find fits well. A tree that is 10% taller than its neighbor doesn't just get 10% more light; it secures a multiplier that allows it to grow exponentially faster. So thhe taller tree expands its leaves, captures a disproportionate share of light, and casts a shadow below. The slightly shorter tree receives a fraction of the multiplier (less light), stunts further, and eventually dies from light starvation.
1
5
1,387
One of the problems with bug bounty is that you can report the most severe bug that the company may ever see in its lifetime and it'll sit in platform triage queues for a few days before the team even sees it
13
2
113
5,409