u/Horror_Business1862

I passed oscp back in 2016 and was trying oscp+ to get CRT and failed miserably. I really hate how much time you have to spend on stupid enumeration where you practically learn nothing out of it. Like I wasted 10 hours to find out the exploitation required a different tool and I was doubting my enumeration skills. What really I learned from this? Nothing!!

I was so confident I would easily get all 3 standalone and a shell on AD to pass but oh boy I was wrong. I got full AD, 1 standalone. Had write on 2nd standalone, read on 3rd but couldn’t convert it into shell.

I have heard the 1st attempt is always difficult so fingers crossed for the 2nd one now 🤞

The contract is a side gig, on my name and I also have FTE in 40% tax bracket. I outsource 100% of work outside UK paying 30% so 70% is net profit + some minor expenses.

I am not working at all in that contract and just forwarding the work to freelancer abroad. If I withdraw profits as dividends, my tax bracket will be 40% but if my wife does her bracket will be 20%.

Can I transfer all dividends to wife and if that is legal as well?

I am not even talking about low effort or unexploitable bugs. Here are the issues with working PoCs I found in a private program in last 2 days:

- PII including name and email disclosure of any user (UUID was also enumerable making it 100% exploitable)
- Stored XSS in footer (affecting site wide) with no HTTPOnly flag exfiltrating all cookies
- Another adjacent stored XSS affecting site wide
- Payment bypass to publish whatever you want.

Each and every issue marked as duplicate of issues reported since 2024 and still under triaged.

My issue is with HackerOne if client believes these issues are informative or accepted risk then why they can’t update out of scope section mentioning not to report them so we don’t put effort in there?

Why programs like these list huge bounties when practically they pay and fix nothing?

Glad I don't report him but he always act like he's carrying entire company on his shoulders. I have worked with other directors directly who are a lot more seniors to him and none of them ever canceled meetings last minute.

I have 1on1 with him every 2 weeks and he schedules for 9AM. I am in a different country and I have arrangement with my manager that I start working from 10AM to 6PM. I have to start working early that day because of that manager only to find he canceled at 8:58AM and rescheduled to 11AM and then canceled again.

Its not one instance but happening almost every time. He canceled weekly meeting including 20 people again today only 5 minutes before. My wife had to move her shift so she will pick our child from school but this guy messing schedules every single time. I have no issues with rescheduling as long as he doesn't change last minute. Why is he even doing it and how should I handle this?

Why? Not that I murdered or hurt anyone. Not even that I stole from him or someone nor I did any crime. Only because I decided not to talk to him anymore. Yeah that’s my only crime.

In his last voice texts to me before I blocked him, he tried his best to manipulate me one last time “i am going to die soon and I don’t want to talk to you anymore”. Irony of him not talking to me while simultaneously calling me 20 times and flooding me with voice texts 🤣

Oh and also “I have told my neighbors that when I die just bury me instantly and no need to wait for my sons to come on funeral” 🤣

“You don’t need to send me any money, I have asked neighbors to feed me in case I am broke” 🤣

Yeah ladies and gentlemen he’s a parent who is now bitching to entire neighborhood and distant family that his son is the worst person on earth who’s only crime is not responding to him anymore. He’s agonizing like a true parasite who he actually is.

I wish I should have done it a decade ago when he was financially draining me. Tried his best to stop my wife from moving abroad with me. Why? Coz my wife being with me will increase my expenses and I will be sending less money home. I did take my wife with me anyways but the relationship with dad was on and off but not anymore. He could die the next moment and I would care less.

I went complete no contact with parents and they have gone full crazy. My dad sent me 20 voicemails basically saying that he has nothing to do with me anymore 🤣
Yeah bitch you don’t have to announce the departure.

The issue is they now believe somehow my wife is manipulating me and I am not talking to them coz she did some black magic on me 🤣. I encouraged my brother to go no contact with parents too and my flying monkey sisters have blocked our wives from everywhere but not me. Like cmon guys I am the black sheep and root of all evils in your family so block me please.

When I graduated in 2012 I was struggling like any other fresh graduate to get a job. I remember my dad used to compare me with other neighbors kids who were seniors to me and had job. Will never forget when he told me “you are a failure and will never achieve anything in life. I can write this on a paper and sign it”.

Soon after I started freelancing and started making 10x the salaries of those kids he used to compare me with. For more than a decade I gave all money to parents and didn’t save anything for myself. Moved abroad and same cycle continued. I am very successful today if compared to all my far relatives and entire neighborhood. I am living in the UK with 6 figures salary and a side business.

My frontal lobe finally developed and I decided to send home enough money so they can pay bills and not for luxuries. This is where the problem started. Now my dad believes because he cannot manipulate me anymore so my inlaws are manipulating and taking all my money. He has beef with my wife for idk what reasons. Probably believes she did some black magic on me like why is she talking to her family and I am not talking to him?

I have gone complete no contact with him for my mental peace. This is now driving him crazy. The same dad who didn’t stand by me at my worst now thinks he owns me at my best. Even when I am complete no contact with him, I still send bills money to brother so he can forward to dad.

He is now acting victim. Has called me 20 times in a day and I didn’t pickup. He sent me voice messages (which I read 2 days later) saying “you are not my son anymore and I am dead to you. Don’t ever come to my funeral when I die. I have strictly told my neighbors to bury me when I die and never wait for anyone. I don’t need any of your money and if I need any I will loan from neighbors”.

Basically he is creating scene now and telling entire neighborhood his side of story to gain their sympathies. He thinks this will somehow melt me and I will come to stop him? Now he can fuck off and act all he wants. I am done with him.

He tried his best to keep my wife and child away from me when I moved abroad. He didn’t want my wife to get passport so she may join me. Why? Because why should she have a happy life when her daughters are suffering? Her 2 daughters are suffering only because of him since he forced them into arrange marriage to jobless fucks. Again, not my problem.

I got my 1st contract recently with an overseas company and I was super scared of IR35 implications so I got insurance for peace of mind. My IR35 assessment was borderline outside. After joining I met few other UK based contractors working with the same client through their Ltd companies (outside IR35) for years and had no idea about IR35 at all. None of them even had insurance.

One dude even withdraws 90% of his income into partner’s account for smaller tax bracket and he has been doing this for years.

Just makes me wonder how many contractors are working via their Ltd companies without any clue of IR35 and insurance. All of them are sitting ducks for HMRC.

I am asking on behalf of someone so please keep judgements away.

The person is in UAE jail and needs money for survival. His family can afford but have no means to send since they are in Pakistan. They had someone in the UAE used an app that only works there and requires a valid Iqama to send it. That person is in Pakistan and can’t send anymore.

Has anyone idea how to send it from Pakistan or anywhere outside UAE?

The insurance companies only provide insurance if your contract or working practices fall outside IR35. This totally makes sense from insurance’s perspective however, we are contractors and not legal experts. In case of HMRC investigation, can the insurance refuse claim because you unintentionally provided wrong information in working practices assessment?

The only reason they think my assessment is Inside is because of lack of substitution clause but do not want to consider my working practices. For example, I need to buy my own laptop, specific tools (which cost up to £500 per year), monthly subscriptions and mobile phones for testing. My client is US based with no UK presence and has clearly stated they will not provide any of these since I am a contractor.

I used to have all those tools provided by employer when I was working as employee. I have already spent half of income from first 2 projects in purchasing those tools and subscriptions.

I was thinking to get IR35 insurance for peace of mind but since Qdos has assessed my contract to be inside, I can’t get insurance. I however have run CEST tool with absolute honesty and the result is Outside IR35. I am now forever scared moving forward like what if HMRC determines the contract to be inside IR35 a couple years late? I wont even have insurance to defend myself.