Push Rockzz @RoxyhunkPush

Bug Bounty Hunter (Sp1d3r8) Joined April 2013

Tweets

5K
Followers

274
Following

2K
Likes

10K

Who Am I ? 🇪🇬 🇵🇸 @19whoami19

6 days ago

I used to skip Intercom in bug hunting. It seemed harmless. Then I dug deeper… and found 3 HIGH-impact misconfigs that expose sensitive user chats 👇 🚨 Intercom misconfig #1: Identity Verification disabled 👉 Attackers can impersonate any user just by booting the widget with…

2 9 85 4K 59

Download Image

Kirill Firsov @k_firsov

6 days ago

How to access servers behind Cloudflare by bypassing the firewall? @FearsOff #bugbountytips #cloudflare #firewall #bypass 1) Found a sweet hostname but Cloudflare Firewall blocks you? There's a neat trick attackers can use if the origin is misconfigured.

9 156 971 101K 1K

Download Image

Justin Gardner @Rhynorater

2 years ago

I've made over 100k on SSRF vulnerabilities. They aren't always as simple as pointing it at localhost or AWS Metadata service. Here are some tricks I've picked up over the past 5 years of web app testing:

45 934 3K 439K 3K

Download Image

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

84 1K 4K 429K 5K

Download Image

MRD7 @_mrd7_

2 weeks ago

Hello everyone, my blogs were not updated for quite some time. So, I'm sharing my notes which I took while learning about web cache deception. PS: These are not original notes. Many parts of this blogs are taken from other resources. So credit to them. medium.com/@mrd17x/web-ca…

0 17 96 5K 92

Joseph Thacker @rez0__

3 weeks ago

i get asked all the time how to be an ai hacker. go read my "how to hack ai apps" post then just read and understand every post on embracethered[.]com by @wunderwuzzi23 and you will be an expert AI hacker. im not joking. it's that simple. links below.

11 52 347 29K 429

harisec @har1sec

2 months ago

Here are the slides from my @TumpiConIT talk: Teaching LLMs how to XSS - An introduction to fine-tuning and reinforcement learning (using your own GPU) docs.google.com/presentation/d…

5 84 296 25K 268

payloadartist @payloadartist

2 months ago

This is 🔥 👇 Open source vulnerable banking application that teaches you not 1 but 4 different types of skills! - Mobile security (mobile app) github.com/Commando-X/vul… - Web security (website) vulnbank.org - API Security (API integration) vulnbank.org/api/docs/…

1 28 81 6K 75

Download Image

HackingHub @hackinghub_io

a month ago

Beginner bug bounty hunters fail because they chase quick wins. Skipping foundational steps keeps most from hitting real payouts. Here are 8 tips for landing your first $1,000 bounty in 2025👇

2 16 100 6K 83

Download Image

Push Rockzz @RoxyhunkPush

a month ago

Jadeja deserved Player of the Series in my view.

Abhishek @be_mewadi

a month ago

Jadeja deserved Player of the Series in my view.

129 3K 42K 479K 738

Download Video

0 0 0 26 0

7h3h4ckv157 @7h3h4ckv157

6 months ago

Using CVEmap you can get a list of CVEs with public proofs of concept, that have been marked as exploitable by CISA, are remotely exploitable AND don't have a Nuclei template (yet)! Flags: -k / -kev: Marked as exploitable vulnerabilities by CISA -t=false / -template=false: Has…

2 111 562 27K 401

Download Image

André Baptista @0xacb

a month ago

If you're learning about vibe hacking, here's a cool article demonstrating how @mattrkeeley used AI to create a working exploit for CVE-2025-32433 before any public PoCs existed! Worth a read 👇 platformsecurity.com/blog/CVE-2025-…

3 81 339 22K 298

Download Image

Luke Leisher @luke_leisher_

a month ago

You are terminally retarded if you think people who can read books are even close to the intelligence of people who can do this:

୨ৎ @ppyowna

a month ago

You are terminally retarded if you think people who can read books are even close to the intelligence of people who can do this: https://t.co/QARa4GLs7b

8K 32K 400K 39.2M 21K

3K 13K 211K 21.4M 13K

Download Video

Gospel @4osp3l

a month ago

"You can use this to instantly generate an obfuscated reverse shell in powershell that i have personally used to beat EVERY single EDR out there right now." ~ @I_Am_Jakoby :D is next-level 🤯

3 13 119 5K 62

Download Image

Push Rockzz @RoxyhunkPush

a month ago

Collaboration with Grok Voice mode is such a vibe. Chat on features & recon, she fires back sharp ideas. Soon you’re locked in hunt Just remember your scope’s a web app. So Eyes on Proxy History.. not on that voice making you smile 😉 #bugbountytips #burnout #MentalHealthSupport

0 0 0 41 0

Dawid Makowski @makowskid

2 months ago

@aaditsh He's 100% right, it's also called a "wheelbarrow effect". Ajahn Brahm’s teacher nailed it with: “Pushing the wheelbarrow is easy; thinking about it, that’s the hard part.” dawidmakowski.com/en/2024/07/jus…

0 3 24 5K 19

X @TheMsterDoctor1

2 months ago

🦅 20 RECON COMMANDS FROM THE FUTURE 1. 🚀 GPT-Aided Wildcard Scope Expansion + Org Correlation echo "uber.com" | httpx -silent | gptcli -p "Find all owned subsidiaries, forgotten domains, infrastructure, GitHub orgs, SaaS integrations, and analytics IDs tied to…

0 22 53 4K 73

Pop Base @PopBase

2 months ago

Twitter was launched 19 years ago. What is your favorite tweet ever?

2K 2K 33K 125.6M 10K

Download Image

Siddhesh Parab @sidxparab

4 years ago

Check out my new article 🔥 Comprehensive Subdomain Enumeration Guide 2021 📖 You will definitely love it !❤️ sidxparab.gitbook.io/subdomain-enum…

16 121 313 0 83

Download Image

Patrik Fehrenbach @ITSecurityguard

2 years ago

@Maakthon @securitytrails @GodfatherOrwa my dude, the /domain/subdomains API endpoint only retrieves a max of 2k results, for anything above that you need to use the scrolling API see (github.com/PatrikFehrenba…)