AsciiHusky @AsciiHusky

Don't know much but I know how to 'Quit Vim' Neverland Joined January 2023

Tweets

260
Followers

31
Following

365
Likes

4K

Meydi @mehdiparandin

4 months ago

Just found an interesting behavior in Firefox that can be used for XSS: If a response lacks the Content-Type header, Firefox renders it as text/plain. But if the URL ends with an extension like .html, Firefox treats it as that. #bugbounty #bugbountytips

21 56 540 34K 359

Download Image

André Baptista @0xacb

5 months ago

This @bishopfox tool is next level! 🚀 Eyeballer uses AI to analyze screenshots and sorts them into categories based on appearance, including: 👀 Old-looking pages, 👀 Login pages, 👀 404 responses 👀 Web apps 👀 Parked domains Get your eyeballs around this👇

5 109 479 24K 447

Download Video

A L I @Ali_4fg

5 months ago

$2,500 Bounties in GraphQL Hacking! Started learning GraphQL security in Feb and picked a HackerOne program—luckily, it was all GraphQL! Found multiple bugs, including two high-severity ones which I wrote about. Read here: blog.koalasec.co/2500-dollars-i…

9 69 396 26K 298

Download Image

Mayowa omolabi @i_am_mayor_

5 months ago

How SSRF Leads to RCE in a .NET Application medium.com/@0xUN7H1NK4BLE…

1 47 216 13K 124

Mohit Mishra @chessMan786

6 months ago

Introduction to ARM Assembly

0 121 763 25K 499

Download Image

Aadriksh @Aadriksh

5 months ago

Master x86-64 Assembly by Building a GUI from Scratch – The Ultimate Hands-On Learning Experience! (🔗👇)

13 166 1K 122K 2K

Download Image

HAHWUL @hahwul

5 months ago

Dalfox v2.10.0 has been released! It uses way less CPU while XSS scanning even faster than before. github.com/hahwul/dalfox #DAST #Security #BugBounty

6 71 327 16K 200

Download Image

zhero; @zhero___

6 months ago

the research paper is out: Next.js and the corrupt middleware: the authorizing artifact result of a collaboration with @inzo____ that led to CVE-2025-29927 (9.1-critical) zhero-web-sec.github.io/research-and-t… enjoy the read!

74 449 2K 167K 706

Download Image

zhero; @zhero___

6 months ago

Authorization Bypass in Next.js Middleware - CVE-2025-29927 research paper soon!

pilcrow @pilcrowonpaper

6 months ago

Authorization Bypass in Next.js Middleware - CVE-2025-29927 research paper soon! https://t.co/N04JdAL7ER

55 260 3K 927K 928

Download Image

27 118 1K 104K 399

Download Image

Dimitar Tsvetanov @cvetanovv0

6 months ago

Want to improve your security skills? One Bug Per Day by @GalloDaSballo helps you learn a new vulnerability every day. A must-have resource for security researchers and developers 👇 onebugperday.com

2 22 122 5K 110

Brut 🇮🇳 @wtf_brut

6 months ago

⚡️Mindmap for BugBounty & Pentesting ⚠️ Join Telegram - t.me/brutsecurity #hacking #ComputerScience #OWASP #social #Technology #Threat #Technology #informationsecurity #datasecurity #bugbounty #androidphone #hacked #cybersecurity #infosec #onlinecourse #onlinetraining

0 16 45 3K 40

Download Image

VAIDIK PANDYA @h4x0r_fr34k

7 months ago

RCE ? Here are few blogs to learn more about it! 1. medium.com/@HX007/a-journ… 2. medium.com/@akashoffsec/h… 3. medium.com/@0xold/15k-rce… 4. medium.com/@gokulsspace/h… 5. medium.com/@yousefmoh15/h… 6. medium.com/@sahul1996l/ho… 7. medium.com/@jeetpal2007/e… 8. fdzdev.medium.com/lfi-to-rce-bug… 9.…

2 79 340 18K 321

AmirMohammad Safari @AmirMSafari

7 months ago

@omidxrz and I spent last month full-time hunting and successfully reported several high/crit vulnerabilities, including two RCEs. Spending a long time on a program helped us spot new features early. Thinking of writing a detailed write-up! ✌️

70 32 845 58K 145

Download Image

Brut 🇮🇳 @wtf_brut

7 months ago

javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run urls = [] $$('*').forEach(element => { urls.push(element.src) urls.push(element.href) urls.push(element.url) }); console.log(...new Set(urls)) #infosec #cybersec…

1 77 365 18K 292

Download Image

Arsen @arsen_bt

7 months ago

Everyone can earn min. $50.000 per year in a Web3 Security. Sadly, most people are lost before they even begin. Here’s the guide how to earn your first 50k$ as an auditor.

7 69 511 38K 663

Download Image

Intigriti @intigriti

8 months ago

Do you want to master file upload vulnerabilities? 🤑 Open this thread! 🧵👇

4 73 409 34K 392

Download Image

Intigriti @intigriti

8 months ago

Blind XSS vulnerabilities can be everywhere! But the delayed execution and invisible injection point make them easily overlooked by bug bounty hunters! 🧐 In our latest article, we've detailed our entire guide and methodology for finding and exploiting blind XSS vulnerabilities,…

3 51 282 17K 204

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

11 months ago

X-Rewrite-Url Header is Can be used to bypass WordPress 403 pages. POST /xmlrpc HTTP/1.1 Host: target.com X-Rewrite-Url: xmlrpc.php X-Rewrite-Url: wp-json/v2/users X-Rewrite-Url: wp-login.php #infosec #cybersec #bugbountytips

1 55 201 8K 115

Muqsit 𝕏 @mqst_

9 months ago

Secure Code Review Complete Series for Beginners. Find this playlist directly on YouTube so that the channel gets a little boost from the algorithm.

5 84 534 28K 542

Download Image

Brut 🇮🇳 @wtf_brut

9 months ago

🎯𝟮𝗙𝗔 𝗧𝗲𝘀𝘁𝗶𝗻𝗴 𝗧𝗶𝗽𝘀 𝗳𝗼𝗿 𝗕𝘂𝗴 𝗕𝗼𝘂𝗻𝘁𝘆 𝗛𝘂𝗻𝘁𝗲𝗿𝘀 1. Status Code Changes Check if altering response or status codes (e.g., 200, 403) during 2FA verification allows bypass. 2. Brute-Force OTP Test if the application allows repeated attempts to…