@samm0uda Profile picture

Youssef Sammouda (sam0)

@samm0uda

Hacker, bug bounty hunter, guy behind https://t.co/TBAtP71Cop. 1st in Meta bug bounty program for the last 5 years. YES Team Member

Similar User
publiclyDisclosed photo

@disclosedh1

PortSwigger Research photo

@PortSwiggerRes

Bug Bounty Reports Explained photo

@gregxsunday

Frans Rosén photo

@fransrosen

TomNomNom photo

@TomNomNom

dawgyg - WoH photo

@thedawgyg

Hussein Daher photo

@HusseiN98D

James Kettle photo

@albinowax

Julien | MrTuxracer 🇪🇺 photo

@MrTuxracer

Nagli photo

@galnagli

Ahsan Khan photo

@hunter0x7

Somdev Sangwan photo

@s0md3v

shubs photo

@infosec_au

Farah Hawa photo

@Farah_Hawaa

todayisnew photo

@codecancare

Pinned

Multiple bugs chained to takeover Facebook Accounts which uses Gmail. ( $42k ) ysamm.com/?p=763

Tweet Image 1

It was a great interview! Thank you for having me @ctbbpodcast

New @ctbbpodcast with @samm0uda, should be a good one! 🤩 youtube.com/watch?v=U8lZKl…



Youssef Sammouda (sam0) Reposted

New @ctbbpodcast with @samm0uda, should be a good one! 🤩 youtube.com/watch?v=U8lZKl…


In 2023: - I met in two occasions my hacker friends and also made new ones. - Reported 14 bugs - Made $450,000 My goals for 2024 are to grow and learn new things and share more writeups.


I got $66000 once for an XSS. The impact to the business and its users is the important thing in a report and not the bug itself.

just an XSS, a 10k XSS .. xd

Tweet Image 1


if you hate light bursts from you srceen at night, enable this "chrome://flags/#enable-force-dark"


To all triagers out there, stop trying to reproduce client-side pocs from a local html file.


Yay, I was awarded a $30,000 bounty on @Hacker0x01 ! hackerone.com/sam0 #TogetherWeHitHarder Should have been another $50,000, however no consistently in payouts, going back to Meta.


Youssef Sammouda (sam0) Reposted

Hyped! On the 28th of September i will be hosting the annual Truesec Cybersecurity Summit & present the talk I performed at Blackhat, Defcon and soon Sec-t! Get your tickets at: securitysummit.truesec.com/?utm_campaign=…

Tweet Image 1

Youssef Sammouda (sam0) Reposted

Latest @ctbbpodcast episode with @securinti has dropped 🔥 youtube.com/watch?v=MSXf2f…


Youssef Sammouda (sam0) Reposted

Bug write-up for Google Extensions thanks @ThomasOrlita and others for the help :) ndevtk.github.io/writeups/2023/… this writeup does include some free XSSs I got board of waiting.


This year's Defcon was really nice, i met a lot of people who i always admired for their work but now i like them more because in real life they were super cool. Special thanks to Meta, Microsoft, Intigriti, Hackerone teams, all my Brazilian friends and all the hackers i met.


I'm in Vegas! Happy to meet and talk sec.


Youssef Sammouda (sam0) Reposted

. @assetnote is legendary for its bug bounty roots and recon capabilities. In this latest episode, we sit down LIVE from London with @seanyeoh (head of engineering at Assetnote) and get all the tips on how to build a performant, scaling recon system! buff.ly/453j713


Youssef Sammouda (sam0) Reposted

Last days I've spent on Meta's BountyCon event hosted in Seoul, Korea. Together with my teammates(@phwd_, @samm0uda and @JosipFranjkovic ) we took 1-2 places and won 5/7 nominations. Also special thanks from me for event collaboration with @_bagipro & @OversecuredInc scanner.

Tweet Image 1
Tweet Image 2

Youssef Sammouda (sam0) Reposted

The best time to start bug bounty was 10 years ago. The second best time is now.


Loading...

Something went wrong.


Something went wrong.