hello-testers @HelloTeste16541
Joined July 2024-
Tweets41
-
Followers1
-
Following205
-
Likes326
Testing for file upload vulnerabilities? 🧐 Check out Malicious PDF Generator, an open-source toolkit to help you generate tens of malicious PDF files designed to exploit various vulnerabilities and insecure features found in PDF readers! 🤠 🔗 github.com/jonaslejon/mal…
Did you know? This website allows you to identify the technologies behind web applications based on 404 errors 👇🔗 #BugBounty #enumeration #recon #recontips #pentest
🔎Most critical iDOR paths: /api/user/123 /api/v1/user?id=123 /api/v1/file?id=123 /api/files/123/download /api/issues/123 /api/v2/statement/123 /download?file=123.pdf 🔎Parameters: id, uid, profile, file, doc_id, order, ticket, case Read the full method t.me/ShellSec/177
Last month, I found a 0-click account takeover with a very simple match-and-replace trick Sometimes applications have different API endpoints for different functions. For authentication, developers often use session cookies or exchange tokens. In some cases, if the main session…
Stop using basic XSS payloads. @RenwaX23 compiled the nastiest collection of parentheses-free XSS eval.apply${[alert\\x2823\\x29]} `Reflect.apply.call`${alert}${undefined}${}`[11] `throw onerror=eval,SyntaxError`alert\\x2823\\x29 Check it out: github.com/RenwaX23/XSS-P…
I wrote a detailed article on WordPress Bug Hunting from basics to advanced techniques. Check it out here 👉 infosecwriteups.com/mastering-word…
~Password reset payload list Don't forget to check out the new video! youtu.be/T4ZE48WhdYk #BugBounty
📖Master techniques related to root detection on Android devices and methods to bypass it - 8ksec.io/advanced-root-…. #MobileSecurity #AndroidSecurity #Jailbreak #Magisk
WordPress Custom Login And Signup Widget Plugin <= 1.0 - Arbitrary Code Execution (RCE) CVE-2025-49029 🔥 Base Score: 9.1 (CRITICAL) PoC: github.com/Nxploited/CVE-… #Cybersécurité #CybersecurityTraining #wordpress #hackers
🚨 CVE-2025-6970: Events Manager plugin for WordPress has an unauthenticated SQL injection via the orderby parameter. Update to 7.0.4 or 6.6.5 ASAP! Full advisory ➡️ volerion.com/vulnerabilitie… #WordPress #infosec #AppSec
More testcases can be found here: speakerdeck.com/anugrahsr/pent…
My first Auth Bypass to admin account takeover -- a chain of multiple vulns, reverse engineering an old CVE in a controlled environment obviously (for learning) with a complete blind approach so far. Hoping to see this helping me in real world too.
~invite functionality checklist... New video out youtu.be/LvZLC0wXmYM #bugbounty
CVE-2025-25257 - FortiWeb Unauthenticated SQLi to RCE 💣 🔴 TIPO: SQLI + RCE 🔍 DORK (Zoomeye): app="FortiWeb WAF" 💣 EXPLOIT: github.com/watchtowrlabs/… #rce #github #exploit #sqli
Web Cache Deception ghostlulz.com/blog/web-cache… Dependency Confusion ghostlulz.com/blog/dependenc… Exploiting PDF Generators ghostlulz.com/blog/exploitin… Pre Account Takeover ghostlulz.com/blog/pre-accou… API Hacking - Cracking JWT Tokens ghostlulz.com/blog/api-hacki… #bugbountytips #infosec #redteam…
Finding SSTIs on easy mode! 😎 1. Fetch all endpoints and parameters with GAU (GetAllUrls) 2. Run Tplmap Example 👇
💣 I SLOWED DOWN A WEBSITE USING PING 😈⏳ Exploited blind OS command injection by making the server sleep with ping -c 10 127.0.0.1 😮💨 No output, just vibes and delay 🥷💻 Walkthrough 👉 medium.com/p/i-slowed-dow… #BugBounty #EthicalHacking #OSInjection
My OS Command Injection { Notion's Notes } aacle.notion.site/OS-Command-Inj…
You can inject header too with SQLi POC: sqlmap -u "redacted.com" --header="X-Forwarded-For: 1*" --dbs --batch --random-agent --threads=10 Injection marker: * #bugbounty #bugbountytips
🚨 New Writeup Alert! 🚨 " OS Command Injection — When Your Server Obeys My Commands Like a Soldier" by phoenixcatalan is now live on IW! Check it out here: infosecwriteups.com/ecbe2fe6ec3d #ethicalhacking #development #infosec #hacking #bugbounty
h0rus3c @h0rus3c
2K Followers 303 Following Bug Bounty Hunter | https://t.co/S37ltY49Je | https://t.co/ZLNFNYJPYa | https://t.co/ONCmVgCTEa
VIEH Group @viehgroup
4K Followers 468 Following An Innovative Cyber Security Company | Think Secure, Think V.I.E.H
A.Mugh33ra🇵🇰❤... @mugh33ra
1K Followers 141 Following Junior Bug 🐛Hunter | https://t.co/M21YDyxjK3 | LinkedIn:https://t.co/zR5347b1zi
Rikesh Baniya @rikeshbaniya
5K Followers 437 Following i love graphql | 🇳🇵| blogs : https://t.co/B9UAv5l2cu
Assetnote @assetnote
10K Followers 0 Following Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure.
Shakti Ranjan Mohanty... @3ncryptSaan
6K Followers 173 Following Product Security Analyst- Triager @Hacker0x01 || Hackerone Brand Ambassador || Ethical Hacker || Penetration Tester || Bug hunter || H1 verified Clear Hacker
DirectoryRanger @DirectoryRanger
35K Followers 96 Following This account assembles and disseminates information related to Active Directory and Windows security.
Fat @fattselimi
16K Followers 9K Following Chasing Positive vibes only & Ethical Hacking for fun and profit🧑🍳
Neh Patel 🇮🇳 @thecyberneh
4K Followers 399 Following Microsoft's Top Security Researcher Globally (Rank 23) | Apple Hall of Fame | Google Hall of Fame | Microsoft Hall of Fame | Microsoft MSRC MVR (Rank 82) Global
Iman Gurung @ImanGurung13
8K Followers 441 Following Computer Engineer, Ethical Hacker, Tatoo Lover, Blind xss king
Mohamed Elkhayat @Mohamed87Khayat
12K Followers 275 Following Communication Engineer Senior Cyber Security - security researcher & BugBounty Hunter
Moblig @moblig_
8K Followers 206 Following #1 Hacker at BugCon LHE Mexico 2021 & 2022 | Top Ranked in H1 Mexico Leaderboard 2021, 2022, 2023, 2024 | Offensive Security Engineer | Tweets are my own
Julien | MrTuxracer �... @MrTuxracer
37K Followers 443 Following Freelancer | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | ❤️ Reversing | Mobile Hacker | https://t.co/pcWduPOt0n
Bug Bounty Reports Ex... @gregxsunday
52K Followers 616 Following Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.
STÖK ✌️ @stokfredrik
135K Followers 1K Following Hi.. im that hacker / creative that your friends told you about., 💫🔮
Youssef Sammouda (sam... @samm0uda
37K Followers 496 Following Hacker, bug bounty hunter, guy behind https://t.co/TBAtP71Cop. 1st in Meta bug bounty program for the last 6 years. YES Team Member
zseano @zseano
79K Followers 702 Following #1 Amazon Security Researcher. full time hacking team with @jonathanbouman @fransrosen @avlidienbrunn
Deepak Dhiman🇮🇳 @Virdoex_hunter
8K Followers 324 Following bbhunter-virdoexhunter^ | Top 10 on hackenproof | Top 5 as Indian | X-Bounty Hunter Inspiration:Stok,Aditya![[Hacker + lover of bash] I Don't know how to hack but i know how to pwnd!](https://pbs.twimg.com/profile_images/1176789748322643968/bEReriMR.jpg)
Ahsan Khan @hunter0x7
34K Followers 1K Following [Hacker + lover of bash] I Don't know how to hack but i know how to pwnd!
Lu3ky13 ⚡️⚡️ @lu3ky13
14K Followers 783 Following Co-Founder @suly_con @CyberShield01 | EWPT | ECCPT | CCNA | CCSP-AWS | CAPen | CNPen | CAPenX | CRTO |All HTB PRO | PT1 | CRTeamer | B.S. in Accounting
root@AkashHamal0x01:~... @AkashHamal0x01
9K Followers 713 Following Solo | https://t.co/I6KH8WN8nm | Community Helper 🤝| WebApp Security 🐞 | Avid Learner 📖 | Male | Father of One | Married 💍 Asia❤️ . wiener/peter
Sheikh Rishad @sheikhrishad0
11K Followers 928 Following 21 Years Old, Hacker, Re-searcher, Self-Developer
shubs @infosec_au
56K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Anjali Prakash (She/H... @hsakarp_ilajna
2K Followers 1K Following CEHv12 (Practical) Certified || Bug Hunter || Post Graduate || Information Technology Engineer Graduate ||CyberSecurity Enthusiast|| Delhi University||
👑 King Of Tips �... @KingOfBugbounty
6K Followers 23 Following 👑 OneLineTips project 👑 Github: https://t.co/o8SCytw7Fr Twitter owner: @OFJAAAH
Parisa Tabriz @laparisa
56K Followers 4K Following Browser Boss @googlechrome; Security Princess @google; former @usds; skilled at baking, eating, and hijacking cookies.
Bhavuk Jain @bhavukjain1
14K Followers 618 Following Trying to make internet a safer place for everyone. Pentest Lead @Hacker0x01. Providing penetration testing services @ https://t.co/eTR0t81zbu
Shreya Pohekar @shreyapohekar
3K Followers 636 Following Security @microsoft | Ex-hackerone | Contributor @codevigilant | 49 CVEs | Building CTFs at @Winja_CTF | blogger
HICA @HICA_Community
48 Followers 13 Following HICA Club | Learn Cybersecurity & Tech! Workshops | Hackathons | Expert Sessions Become a Chapter Leader! Apply: [email protected]
Synack Red Team @SynackRedTeam
48K Followers 622 Following The power behind the @Synack platform is an elite team of the world's top cybersecurity researchers. Our best are honored at https://t.co/6bEAyp7HWJ
Rishika Desai @ich_rish99
5K Followers 622 Following Security Analyst @BforeAI | Cyber Threat Researcher | Dancer, Writer, Poet, Freelancer, Blogger, and more to add! ✨ Let's connect and share ideas! ❤
Nagli @galnagli
39K Followers 482 Following Hacker; Head of Threat Exposure at @wiz_io 🧙♂️; Bug Bounty Hunter; Live Hacking Events Winner
Harss25 @Harsh25NN
25 Followers 120 Following @Intigriti Top 10 2025 Q2 | Bug Bounty Hunter | Security Researcher | Building @HICA_Community | Operational Head - BloggersCon Vision
MorningStar @0xMstar
19K Followers 1K Following security researcher , bug bounty hunter ,bugcrowd top 10, co-founder https://t.co/1bT321Ayen, https://t.co/WqLPzN7PyL
Rahul Gairola @pub3g
2K Followers 993 Following
HackingHub @hackinghub_io
9K Followers 12 Following Educating the next generation of ethical hackers.
Jsmon - jsmon.sh @jsmonsh
566 Followers 21 Following 🔥 JavaScript Security Simplified 🕵️♂️ Monitor, Scan & Detect JS Threats 🚀 Trusted by 2K+ Users | 1M+ JS files 🌐 Start Securing: https://t.co/KAxMTnrEmT
Deev Pal @techycodec08
5K Followers 103 Following Security Engineer @ Meta | Ex - SAP | Trying to be a full time Bug Bounty Hunter
DarkShadow @darkshadow2bd
3K Followers 18 Following Ethical Hacker | Penetration Tester | Security Researcher | Bug Hunter | Exploit Developer. 🔥~For more Join my New telegram Channel👉🏼 https://t.co/9p1yvzluA4 ✨
Sayaan Alam @ehsayaan
9K Followers 969 Following Offensive Security Researcher, Pentester, Red Teamer and Bug Bounty Hunter | SRT Hero at @Synack Red Team | Hackerone - sayaanalam
Hunter @HunterMapping
23K Followers 184 Following Internet search engine for security researchers Contact Us: [email protected]
Trends for United States
You might like
