helloworld @0xhelloworld_

for the love of hacking | oswe Joined July 2018

Tweets

4K
Followers

799
Following

614
Likes

1K

Eric Ciarla (hiring) @ericciarla

4 days ago

Web scraping will never be the same! Firecrawl is an open-source framework that takes a URL, crawls it, and converts it into a clean markdown or structured format for LLMs. 100% Open Source with a powerful cloud API 🔥

3 6 142 26K 181

Joseph Thacker @rez0__

3 hours ago

the latest @Jhaddix newsletter is a full guide on how to actually engineer a good hackbot. and it's dope. you should check it out

4 10 72 3K 26

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

a day ago

Using AI for whitebox code review can cut 4-5 hours of codebase review down to 30-60 minutes. Here's how you can do it.

2 19 102 8K 84

Download Image

🇷🇴 cristi @CristiVlad25

23 hours ago

in pentesting, codex cli is hands down the best AI sidekick. if you have a well written AGENTS md, that only squeezes the juice out of it even further. gemini and claude can't compare. the biggest bang for the buck, use it with the ChatGPT subscription. I only wish that the…

0 1 8 799 4

Fabio @degrigis

2 days ago

You are probably gonna hate me for the title of this blogpost, but, here is a quick peek into one of the most surprising components of our @DARPA AIxCC CRS: DiscoveryGuy. support.shellphish.net/blog/2025/09/0… (Planning to publish a few more of these "quick peek" into the system 👀)

3 27 67 7K 38

Neil Bergman @neilbergman

2 days ago

semgrep.dev/blog/2025/find… - "LLMs are not a silver bullet that will replace human security engineers tomorrow, in fact they are pretty weak on finding high-severity injection-style vulnerabilities end to end. However, they are an incredibly powerful tool."

0 1 1 119 1

Bug Bounty Village @BugBountyDEFCON

2 days ago

It's out!! You can now watch @djurado's and @niemand_sec talk: "Prompt. Scan. Exploit - Ai's Journey Through Zero-Days, and a Thousand Bugs". Learn more about @Xbow and autonomous hacking. You can watch it in our Youtube channel exclusively: youtu.be/y_aQQmDMaY4. Enjoy!

4 17 42 14K 21

Stephen Sims @Steph3nSims

7 days ago

Please join me on the next @offby1security stream with guest Eugene Lim (@spaceraccoonsec ) on 4-Sept at 6PM PT for a session on "0-day Hunting Strategy!" This will be a great session for those interested in vulnerability research! Note the time at 6PM PT youtube.com/watch?v=dMt2qy…

5 67 282 22K 126

Download Image

drop @dropn0w

2 days ago

Great talk, and I really appreciate the transparency about the challenges @Xbow faced with scalability. It also confirmed some assumptions I already had: while it’s super cool to see what AI can achieve and what Xbow managed to pull off, keeping it running and make it…

Bug Bounty Village @BugBountyDEFCON

2 days ago

3 16 71 8K 33

Download Image

0 2 11 3K 6

Nathan Jones @njcve_

2 days ago

Holy smokes - Such a good bug.

Max Yaremchuk @0xw2w

2 days ago

Holy smokes - Such a good bug.

1 41 181 18K 87

0 1 5 464 0

Swissky @pentest_swissky

3 days ago

How to find bugs on a hardened target using gadgets - @aituglo bugcrowd.com/blog/how-to-fi…

0 12 60 4K 45

Faav @efaav

4 days ago

@bhaveshdewasii Do a lot of fuzzing, of course try stuff that would be in a URL like #, ?, /, \, and you can bypass stuff by fuzzing for /.FUZZ./ like putting a tab in between. You can also do url encoding or double or even triple encoding. In most cases you can just do the basics though.

2 4 16 886 10

Faav @efaav

4 days ago

I LOVE SECONDARY CONTEXT VULNS

4 2 42 4K 16

モジタバ @MiniMjStar

a week ago

blog.devsecopsguides.com/p/payment-vuln…

0 8 40 2K 34

Meydi @mehdiparandin

7 days ago

A few weeks ago I found a client-side bug at a big company: if a victim just held Enter for 1 second on the attacker’s website, their account got taken over. Super simple. Fully Explained here: evil.blog/2024/02/cross-… Program marked it as “info/social engineering”😭

7 21 169 9K 121

Nagli @galnagli

5 years ago

Finding postMessage vulnerabilities has never been easier, take a look at our first open-source tool from @enso_security which provides GUI and Cross Origin traffic inspector in ease. github.com/benso-io/posta Looking forward to see your findings using posta! #bugbountytips

enso.security @enso_security

5 years ago

0 22 52 0 10

11 144 378 0 157

Download Image

Rekt News @RektHQ

a week ago

And we won’t be alone. @thebensams, Engineering Director at @trailofbits the team behind critical bugs, emergency forks, and billion-dollar post-mortems, joins us for the opening cut. x.com/i/spaces/1vAxR…

Rekt News @RektHQ

a week ago

6 8 109 24K 5

Download Image

11 5 60 16K 4

Debangshu 🇮🇳🥷 @ThisIsDK999

a week ago

drive.google.com/file/d/1T1bcgc… Can't find research like these nowadays, everyone too busy to chase AI hype, no one really diving into libraries for cool bugs :/ AI-will-find-all-bugs is such a boring take.