CryptoCat @_CryptoCat

Security Researcher 😈 Hacking Content @ https://t.co/U7jVhNr9sC 💜 cryptocat.me Not Here Joined May 2016

Tweets

8K
Followers

8K
Following

200
Likes

70K

Alex Plaskett @alexjplaskett

a day ago

Unleashing the Hound: How AI Agents Find Deep Logic Bugs in Any Codebase by @muellerberndt muellerberndt.medium.com/unleashing-the…

0 28 82 7K 64

Download Image

CryptoCat @_CryptoCat

2 days ago

One week until @bsidesbelfast, Who's going? 👀 As always, I've got stickers - come say hi! 👋

3 1 27 1K 1

Download Image

d4d @zakfedotkin

3 days ago

We've just published a novel technique to bypass the __Host and __Secure cookie flags, to achieve maximum impact for your cookie injection findings: portswigger.net/research/cooki…

3 63 206 15K 145

I Researched Ruby class pollutions and discovered a new exploitation method, Rotate Chains, achieving 100% exploit success rate; also created a bi0s CTF 2025 challenge based on the technique which had 0 solves. Read the research/writeup: winters0x64.xyz/posts/post-2

1 34 113 6K 58

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

a week ago

Episode 137 is out! - youtu.be/sTG-OX5BbBc In this episode, @Rhynorater and @rez0__ talk about AI Hacking Assistants, CSPT and cache deception, and a bunch of tools like ch . at, Slice, Ebka, and more!

2 3 32 9K 14

Jorian @J0R1AN

a week ago

The last Intigriti challenge by @0xblackbird was a fun combination of SSRF to RCE using a surprisingly exploitable pitfall in NextJS middleware. Check out my writeup below: jorianwoltjer.com/blog/p/ctf/int…

4 14 66 3K 33

CryptoCat @_CryptoCat

a week ago

What's on the cards for today? #bugbounty

1 0 7 617 0

Download Image

pwnii @pwnwithlove

2 weeks ago

just dropped a new article about my current way of setting up an android bug bounty lab ヾ(˶ᵔ ᗜ ᵔ˶) it’s the setup I use myself, and I’ve found nice web bugs on android apps with nothing more than a rooted pixel, frida, and some traffic interception yeswehack.com/learn-bug-boun…

5 39 162 8K 114

CryptoCat @_CryptoCat

a year ago

Waiting patiently for @defcon videos 🥺

1 5 39 2K 0

Download Gif

ryuku @malekmesdour

2 weeks ago

Just published my first blog post "Hunting for postMessage Vulnerabilities" blog.ryukudz.com/posts/postmess… It covers 11 postMessage vulnerabilities I discovered on bug bounty targets. enjoy ☕️ #BugBounty #BugBountytips #websecurity

8 67 326 17K 278

manuel valdez⛩️ @saur1n

2 weeks ago

Stoked to share my first ever writeup of how I found a blind XXE just by playing with a PDF upload feature and spotting an old, vulnerable iText library. Hope you like it! saurinn.github.io/blog/xxe-oob-v… #bugbountytips

2 27 160 6K 101

CryptoCat @_CryptoCat

2 weeks ago

Signed up for the @hackthebox_eu x @Hacker0x01 AI red teaming CTF next month 🔥 ctf.hackthebox.com/event/details/… #hackthebox #htb #ctf

1 3 14 913 3

CryptoCat @_CryptoCat

2 weeks ago

2 things that make me hesitant to switch to caido are the single packet attack and graphql support in burp

2 0 4 848 1

CryptoCat @_CryptoCat

2 weeks ago

😼

André Baptista @0xacb

2 weeks ago

😼 https://t.co/aWVZA0UQyv

2 5 41 4K 21

Download Image

0 0 4 486 0

Download Image

James Kettle @albinowax

2 weeks ago

When I condense nine months of research discoveries into a 40-min talk, it can make it seem easy. For a taster of the true experience, watch my battle to solve the 0-CL @WebSecAcademy lab! Research is persistence. youtube.com/live/B7p8dIB7b…

4 44 289 22K 158

CryptoCat @_CryptoCat

2 weeks ago

My writeup for the July Dojo challenge on @yeswehack - CCTV Manager 🎥 1️⃣ Predict the correct token to access the CCTV manager (insecure time-based PRNG) 2️⃣ Exploit the yaml.load() function to achieve RCE Read the full writeup and PoC script ➡️ book.cryptocat.me/ctf-writeups/m…

2 7 50 3K 16

Download Image

Orange Tsai 🍊 @orange_8361

2 weeks ago

Turns out my #PHRACK article is live! 🔥 > The Art of PHP — My CTF Journey and Untold Stories! Kinda a love letter to those CTF players & PHP nerds! Hope all the credit goes to the right ppl. Also huge thanks to @0xdea for not forgetting me, @guitmz for the edits, and the…

20 216 873 50K 266

Download Image

zere @j_zere

3 weeks ago

Just published my first blog post "Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover" You can read the full write-up here: zere.es/posts/cache-de…

26 117 492 29K 367

Biscuit @OreoB1scuit

3 weeks ago

I published a new writeup on Medium where I explain how I found and exploited 3 unique race condition bugs that allowed bypassing free user limit, gaining unlimited followers, and manipulating leaderboard ranking. Read here: medium.com/@RaunakGupta19… #bugbounty #bugbountytips

1 35 257 12K 200

Download Image

3NVZ @YourFinalSin

3 weeks ago

Here is the full writeup on my full Bug Bounty Challenge, I documented. I hope this will answer all questions I keep receiving: medium.com/@YourFinalSin/…