Some time ago, many months ago to be accurate, during an engagement I found a way to gain root privileges in a RSA Authentication Manager server. It started from a non-authenticated point-of-view, by exploiting a Weblogic RCE vulnerability (CVE-2019-2725) which at the time, the

This will be a short blog post and the first writing about Bug Bounties, I'm trying to get more involved into this matter and I'm  hunting on my spare time and 90% of the time on Synack. Early this month I got invited to