halwkly

Student Security Researcher & Bug Bounty Hunter

Open to opportunities
Start
2025
Total Valid Bug
0
Total Payout
$0
Security Programs
Hostinger Barantum HubSpot 3CX Qdrant
Research Stack
Burp Suite
Burp Suite
Proxy
Responsible Disclosure Activity

Hostinger

PRIVATE DISCLOSURE HackerOne Program Medium
$922

Hostinger (Collab)

PRIVATE DISCLOSURE HackerOne Program Medium (Colab)
$200

Hostinger

PRIVATE DISCLOSURE HackerOne Program Valid
$200

Barantum

PRIVATE DISCLOSURE Self-hosted Program Medium
$56

Barantum

PRIVATE DISCLOSURE Self-hosted Program Low
$28

HubSpot

PRIVATE DISCLOSURE HackerOne Program Low
$50

HubSpot

PRIVATE DISCLOSURE HackerOne Program Low
$50

3CX

PRIVATE DISCLOSURE HackerOne Program Low
$100

Qdrant

PRIVATE DISCLOSURE Self-hosted Program Medium
$450
Research Notes
Illustrative cover image for the indirect prompt injection write-up
WRITE-UP 5 min read

Indirect Prompt Injection Leads to Automatic Inbox Email Removal

A crafted story-style email manipulated an AI mail assistant into creating a malicious rule that automatically removed incoming inbox messages. Reported in collaboration with rdzsp.

Indirect Prompt Injection Mail Rules Collab