iiinova — where your digital self keeps evolving

Geluchat

@gelu.chat

802 followers 125 following 3 posts

Baptiste Devigne | Bug Bounty Hunter | Most Impactful Team H1-0131 (AWS) | Eradicator H1-6102 (Salesforce) 🔗My blog gelu.chat

Posts Replies Media

Reposted by Geluchat

Kévin Gervot (Mizu) @mizu.re · 24/07/2025

I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥 The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇 gmsgadget.com 1/4

12313

Geluchat @gelu.chat · 04/07/2025

Today was my last day as a pentester at Bsecure. After a three-year journey of hunting on the side, I’m ready to go all-in as a full-time bug bounty hunter. You can read about my journey from pentester to full-time hunter here: gelu.chat/posts/from-p...

gelu.chat

Finding Freedom, One Bug at a Time: My Journey from Pentester to Full-Time Hunter

After seven years in pentesting, I transitioned full-time into bug bounty hunting, leveraging deep experience and continuous learning. This article shares key moments and insights from that journey.

3247

Reposted by Geluchat

Kévin Gervot (Mizu) @mizu.re · 28/02/2025

With @gelu.chat, we created a challenge for the @pwnmectf inspired by a bug he found in bug bounty a year ago! 🚀 If you have some time this weekend, give it a try! 👀 👉 pwnme.phreaks.fr

0144

Reposted by Geluchat

Jorian @jorianwoltjer.com · 05/12/2024

Apparently, navigating to a javascript: URL returning a string will write it as HTML to the DOM. This allows for an interesting XSS payload: x.com/icesfont2/st...

0122

Reposted by Geluchat

Jorian @jorianwoltjer.com · 27/11/2024

Check out the blog post for a full writeup and some other cool stuff :) bsky.app/profile/jori...

011

Reposted by Geluchat

Jorian @jorianwoltjer.com · 27/11/2024

My challenge has been out for about a week with only one half-intended solution, so here's my solution!

111

Reposted by Geluchat

Luke Jahnke @nastystereo.com · 27/11/2024

My latest blog post is live! nastystereo.com/security/cro... Read how to send a cross-site POST without including a Content-Type header (without CORS). It even works with navigator.sendBeacon

37829

Reposted by Geluchat

Nicolas Grégoire @agarri.fr · 24/11/2024

I’ve to say that I’m impressed by how @xbow.com managed to identify this SSRF vulnerability (and bypass a MIME filter on its way) 🤖

xbow.com

XBOW – SSRF & URI validation bypass in 2FAuth

XBOW discovered a Server-Side Request Forgery (SSRF) vulnerability in the OTP preview feature of the open-source project, 2FAuth.

21713

Reposted by Geluchat

shubs @shubs.io · 22/11/2024

Earlier this year, Assetnote's Security Research team discovered a vulnerability in Sitecore XP (CVE-2024-46938) that can lead to pre-authentication RCE. Order of operations bugs are one of my favorite types of bugs :) Write up and exploit script here: assetnote.io/resources/re...

15023

Reposted by Geluchat

Laluka @laluka.bsky.social · 22/11/2024

P1/3 : DomPurify & Bootstrap n-days + Frontend tricks Ft. @geluchat.bsky.social @mizu.re 😘 www.youtube.com/watch?v=fnYS...

youtube.com

EP 163 | DomPurify & Bootstrap n-days + Frontend tricks Ft. @Geluchat, @kevin_mizu

YouTube video by Laluka

021

Reposted by Geluchat

James Kettle @jameskettle.com · 09/08/2023

I've just published 'Smashing the state machine: the true potential of web race conditions'! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class: portswigger.net/research/smashing-t…

166

Geluchat @gelu.chat · 05/08/2023

Hello World \o/

070