Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 318,095 coordinated disclosures
186,538 fixed vulnerabilities
374 bug bounties with 812 websites
8,825 researchers, 316 honor badges

Geek_Pwn | Security Researcher Profile


Security researcher Geek_Pwn has already helped fix 162 vulnerabilities.



Researcher reputation:  270

Real name:
Aldo Moreno

About me:
Cybersecurity enthusiast.
Newbie bug bounty hunter.

How to contact me:
English or Spanish communication.

[email protected]

Alternative Contacts:
[email protected]

Experience in Application Security
1-3 years

Award / Bug Bounty I prefer:
Feel free to provide bug bounty.
Paypal, Amazon gift card, BTC, t-shirt, gin, stickers or any kind of swag.

Paypal: [email protected]
BTC: 33x6BpPjBiR7g5UeefGQQuZLW2BVAd3aQV

Follow me on:
Twitter

Recommendations and Acknowledgements

    17 February, 2019
     JimM97459222 Jim from GH:
Thank you for pointing out the XSS vulnerability in our site. We appreciate your work and quick response. Thank you!!
    19 December, 2018
     HIGHFLYERS_WA Tom from WADC:
Thanks a lot for making our webserver more secure! Thums up!
    10 July, 2018
     nietofarias Ignacio Nieto from Despegar:
Thanks Aldo for reporting us some XSS vulnerabilities! It was very helpful!
    25 June, 2018
     TucWebmaster Frank Richter from TU Chemnitz:
Geek_Pwn discovered XSS bugs in my site. Thanks for reporting them to us and checking our fixes, your work is appreciated!
    7 June, 2018
     uriblackman Uri from GIDEON:
Thanks Geek_Pwn for finding and alerting us to the XSS bug.
    4 June, 2018
     pejadesign Gabriele from Peja Design:
Geek_Pwn helped me discover an fix an XSS bug. Many Thanks
    2 June, 2018
     digisolid Martin de Vries from Klik-info.nl:
Geek_Pwn found an XSS bug on our website. Thanks!
    27 May, 2018
     ClementBourgoin Clément from Biblys:
Researcher helped me discover an XSS bug. Thanks!
    25 May, 2018
     aartvdwerf Aart from OI:
Thank you for finding and reporting this XSS vulnerability.
    23 May, 2018
     iboulard Isabelle Boulard from CarpoolWorld:
Thank you for finding and reporting this XSS vulnerability.

Shows the first 10 recommendations. See all.

Please login via Twitter to add a recommendation

Awards and Achievements


Number of Secured Websites

10+ Websites
50+ Websites
500+ Websites
WEB SECURITY VETERAN
1000+ Websites

Advanced Security Research

WAF Bypasser
CSRF Master
30+ Reports
AppSec Logic Master
30+ Reports
Fastest Fix
Fix in 24 hours

Outstanding Achievements

Secured OBB
OBB Advocate
Improved OBB

Commitment to Remediate and Patch

Patch Master
55% Patched
Patch Guru
65% Patched
Patch Lord
75% Patched

Recommendations and Recognition

REPUTABLE
10+ Recommends
FAMOUS
25+ Recommends
GLOBALLY TRUSTED
50+ Recommends

Research Statistics



Total reports:330
Total reports on VIP sites:35
Total patched vulnerabilities:162
Total vulnerabilities on Hold (Open Bug Bounty):21
Recommendations received:11
Active since:20.09.2017

Open Bug Bounty Certificate





No posts in blog yet


Reported Vulnerabilities

All Submissions VIP SubmissionsFeatured Submissions

Domain Reported Status Type
13.01.2019
patched
Cross Site Scripting
12.10.2018
unpatched
Cross Site Scripting
23.09.2018
unpatched
Cross Site Scripting
19.09.2018
unpatched
Cross Site Scripting
27.06.2018
patched
Cross Site Scripting
25.06.2018
unpatched
Improper Access Control 
23.06.2018
patched
Improper Access Control 
22.06.2018
patched
Cross Site Scripting
13.06.2018
unpatched
Cross Site Scripting
09.06.2018
patched
Cross Site Scripting
09.06.2018
patched
Cross Site Scripting
02.06.2018
patched
Cross Site Scripting
02.06.2018
patched
Cross Site Scripting
01.06.2018
patched
Cross Site Scripting
30.05.2018
patched
Cross Site Scripting
24.05.2018
unpatched
Cross Site Scripting
14.05.2018
patched
Cross Site Scripting
04.05.2018
unpatched
Cross Site Scripting
08.02.2018
unpatched
Cross Site Scripting
07.02.2018
patched
Cross Site Scripting

  Latest Patched

 20.02.2019 ioffer.com
 20.02.2019 ucanr.edu
 20.02.2019 lbc.co.uk
 20.02.2019 forever21.com
 20.02.2019 twistys.com
 20.02.2019 trackwrestling.com
 20.02.2019 20minutos.es
 19.02.2019 skyeng.ru
 19.02.2019 ubisoft.com
 19.02.2019 nehandaradio.com

  Latest Blog Posts

20.02.2019 by drok3r
ModSecurity - ByPass XSS
15.02.2019 by ismailtsdln
Adobe Israel Website XSS Vulnerability
07.02.2019 by aye_robot
Reporting CSRF via Openbugbounty
06.02.2019 by Open Bug Bounty
Launching Open Bug Bounty Blog and new platform features

  Recent Recommendations

    20 February, 2019
     JimM97459222:
Thank you for pointing out the XSS vulnerability in our site. We appreciate your assistance. Thank you!
    20 February, 2019
     michael_eckel:
Thank you very much for helping me discover and fix several XSS vulnerabilities.
    20 February, 2019
     JanetInfoSec:
Thank you for helping improve security at Jisc by reporting a vulnerability to us according to our vulnerability disclosure policy.
    20 February, 2019
     PHPDev8:
Quick and accurate communication. Wonderful to work with.
    18 February, 2019
     cyberday_gmbh:
thanks for reporting again