What age did you start hacking? Do you have a favourite type of bug or vulnerability to hack?
Samuel: I started learning about hacking in my university years around the age of 23. I love serverside vulnerabilities such as Server-Side Request Forgery (SSRF), Server-Side Template Injection (SSTI) or code injection bugs.
How do you keep up to date on the latest hacking techniques, tools and vulnerability types?
Samuel: I did take a lot of certifications such as Offensive Security Certified Professional (OSCP) and Offensive Security Certified Expert (OSCE) for example, and I read a lot of blogs, including Chinese, South Korean and Russian security blogs (I do not want to miss any information).
Do you remember when you found your first bug? What was the type of bug? How did it feel to find it?
Samuel: My first bounty in HackerOne was from Zomato. It was a SQL injection (SQLi) in a cookie. On Saturdays, I usually spend my time doing physical activities, but on that particular day, I was sick with the flu. Since I am a person that cannot sit still, I decided to start hacking (not advisable!). I decided to try weird stuff and start fuzzing weirdly named cookies. I was shocked that it actually worked. The moral of the story is that if you never try, you will never know!
This story is from the June 2020 edition of HWM Singapore.
Start your 7-day Magzter GOLD free trial to access thousands of curated premium stories, and 9,000+ magazines and newspapers.
Already a subscriber ? Sign In
This story is from the June 2020 edition of HWM Singapore.
Start your 7-day Magzter GOLD free trial to access thousands of curated premium stories, and 9,000+ magazines and newspapers.
Already a subscriber? Sign In
How To Secure Your Smartphone
WE COVERED THE IMPORTANCE OF A STRONG password earlier. And this also applies to your smartphone too. While using your birthdate can seem convenient, if you wouldn't use that on your PC, then you shouldn't use it on your phone either.
Ryzen AI Enters The Fray
This review covers the flagship processor in the lineup, the Ryzen AI 9 HX 370, which features a powerful 12-core, 24-thread configuration, 36MB of cache, and Radeon 890M graphics.
IT'S UPGRADE TIME
As the tenth anniversary of the Apple Watch approached, rumours about a revolutionary device with a dramatic design change swirled-the Apple Watch X. But as it turns out, we got the Apple Watch Series 10 instead.
Intel Core Ultra 2 Shines
With a week of hands-on experience with the ASUS Zenbook S 14 powered by Intel's Core Ultra 7 258V, it's clear that Intel has created a chip that's a serious contender in the ultraportable space.
Smaller, Lighter, Smarter
When it comes to second-generation products, you expect improvements, and the Google Pixel Buds Pro 2 certainly delivers.
AN ATMOSPHERIC ATTEMPT
Taking on a remake of Konami's classic Silent Hill 2 was always going to be a daunting task. Enter Bloober Team, the studio behind other psychological horror titles like The Medium and Blair Witch. While those were solid efforts in their own right, Silent Hill holds a special place in the hearts of horror fans, and any attempt to update it was bound to be scrutinized.
BASIC, BUT COMPETENT
Following the success of the Nothing Phone (2) and Nothing Phone (2a), the company launched its sub-brand, CMF by Nothing, aimed squarely at the budget-conscious.
LENOVO YOGA SLIM 7X
The Lenovo Yoga Slim 7x stands out in terms of build quality and design. With a thickness of just 12.9mm and weighing a mere 1.28kg, this laptop is incredibly portable.
COMFY, SECURE, AND OPEN
With the Nothing Ear (Open), the company has focused on elevating the open-fit experience with a stylish design, secure fit, and surprisingly solid audio quality.
The Emperor Of Mankind Approves
Warhammer 40,000: Space Marine 2 puts you right in the middle of the Imperium's most brutal battles, and it does so with an unapologetic embrace of its own absurdity.
