Took ARTE (AWS Red Team cert) earlier this year and it paid off on HackerOne against a Fortune 500 company. Their Cognito let any user rewrite their own attributes, which meant taking over any member's account and getting admin.
Now eyeing @hacktricks_live's new KRTE cert 👀

My malware passed code review on a Git platform with 390M+ Docker pulls, and CI ran it 👇

Thanks @GiteA for the quick fix 🙏

Full write-up (CVE-2026-95106):

izzysec.github.io/gitea-duplicat…

I earned $1,500 for my submission on @Bugcrowd bugcrowd.com/izzy0101010101 #ItTakesACrowd