Person

Tommy DeVoss

person:tommy_devoss Also: dawgyg

Guest hacker who describes his criminal hacking history, imprisonment, and later bug-bounty work.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing MEMBER_OF TDK Explicit 60
outgoing USES DDoS Explicit 60
outgoing MEMBER_OF World of Hell Explicit 60
outgoing USES AltaVista Explicit 60
outgoing MENTIONS Computer Fraud and Abuse Act Explicit 60
outgoing USES HackerOne Explicit 60
outgoing ASSOCIATED_WITH HackerOne Attributed 60
outgoing EXPLOITS ImageMagick remote code execution vulnerability Explicit 60
outgoing USES remote code execution Explicit 60
outgoing USES blacklist bypass Explicit 60
outgoing USES SSRF Explicit 60
outgoing MENTIONS Edward Snowden Explicit 60
incoming INVOLVES H1-415 Explicit 60

Claims

Tommy DeVoss MEMBER_OF TDK

Tommy says he eventually joined the IRC hacker crew TDK, short for Those Damn Kids.

Explicit Confidence 99% · Jack Rhysider EP 60 Details

“he eventually joined an IRC hacker crew called TDK”

Jack Rhysider · offsets 4337–4387

Tommy DeVoss USES DDoS

Tommy says he DDoSed his school’s IP address to take down its internet connection.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I would actually DDoS my school’s IP address to take our internet down”

Tommy DeVoss · offsets 5837–5907

Tommy DeVoss MEMBER_OF World of Hell

Tommy says he started hacking with World of Hell and later describes defacing a website as part of that group.

Explicit Confidence 98% · Jack Rhysider EP 60 Details

“so he started hacking with World of Hell”

Jack Rhysider · offsets 8718–8758

“I defaced my first website as part of World of Hell”

Tommy DeVoss · offsets 8789–8840

Tommy DeVoss USES AltaVista

Tommy says Dznutz instructed him to use Yahoo AltaVista to read material about hacking.

Explicit Confidence 96% · Tommy DeVoss EP 60 Details

“The first thing that he told me was go to Yahoo AltaVista. He was like, read everything that you can find about hacking.”

Tommy DeVoss · offsets 3514–3635

Tommy DeVoss MENTIONS Computer Fraud and Abuse Act

Tommy says he was charged with violating the Computer Fraud and Abuse Act after using the internet to make the bomb threat.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I was actually charged with violating The Computer Fraud and Abuse Act”

Tommy DeVoss · offsets 7750–7820

Tommy DeVoss USES HackerOne

Tommy used HackerOne’s bug-bounty platform to report vulnerabilities and receive rewards.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I reported my first bug on HackerOne to Yahoo in March of 2016”

Tommy DeVoss · offsets 22435–22497

Tommy DeVoss EXPLOITS ImageMagick remote code execution vulnerability

Tommy says he used the public ImageMagick remote code execution vulnerability to obtain remote code execution on two Yahoo servers.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I actually got remote code execution on two of Yahoo’s servers using that”

Tommy DeVoss · offsets 23538–23611

Tommy DeVoss USES remote code execution

Tommy obtained remote code execution on Yahoo servers through the ImageMagick vulnerability.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I actually got remote code execution on two of Yahoo’s servers”

Tommy DeVoss · offsets 23538–23600

Tommy DeVoss USES blacklist bypass

Tommy found a way to bypass Nexus RF’s blacklist.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I found a bypass for their blacklist that they had used”

Tommy DeVoss · offsets 26321–26376

Tommy DeVoss USES SSRF

Tommy used the blacklist bypass across multiple endpoints for SSRF testing.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“I ended up being able to bypass the blacklist in a total of fifteen or sixteen different end points for SSRF”

Tommy DeVoss · offsets 26381–26489

H1-415 INVOLVES Tommy DeVoss

Tommy attended H1-415 and earned $101,000 during the event, receiving the Most Valuable Hacker distinction.

Explicit Confidence 99% · Jack Rhysider EP 60 Details

“Tommy went and he was finding bug after bug and reporting them”

Jack Rhysider · offsets 34669–34731

“he earned $101,000 which gave him the coveted MVH, Most Valuable Hacker”

Jack Rhysider · offsets 34777–34848

Tommy DeVoss ASSOCIATED_WITH HackerOne

HackerOne announced that Tommy was the sixth hacker on its site to make one million dollars; Jack says he confirmed this with HackerOne’s announcement.

Attributed Confidence 99% · Jack Rhysider EP 60 Details

“HackerOne themselves has announced that Tommy was the sixth hacker on their site to make one million dollars”

Jack Rhysider · offsets 27653–27761

Tommy DeVoss MENTIONS Edward Snowden

Tommy cites Edward Snowden’s 2013 leaks when arguing that online activity is monitored by the US government.

Explicit Confidence 99% · Tommy DeVoss EP 60 Details

“Thanks to Edward Snowden’s leaks back in 2013”