_bhamza @_bhamza

bhamza.me Joined July 2018

Tweets

754
Followers

389
Following

300
Likes

1K

Trail of Bits @trailofbits

2 months ago

TOOL RELEASE: Detect plagiarized code even when variable names change and comments disappear. Vendetect uses semantic fingerprinting to catch copied code that traditional tools miss. blog.trailofbits.com/2025/07/21/det…

0 25 82 14K 22

Assetnote @assetnote

2 months ago

Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-secu…

1 79 290 11K 182

soufDev @souf_dev

2 months ago

Get your FREE RankSight Score! With actionable plan Unveil your site's future visibility & get your definitive blueprint for top ranking in AI Search. No more blind spots. #RankSight #AISEO #LLMViz #DigitalMarketing

1 2 3 818 0

Download Video

طه زروقي @linuxscout

3 months ago

إطلاق النسخة التجريبية من منصة آجُرّوم، منصة لإعراب الجمل والنصوص العربية بالذكاء الاصطناعي مع التدقيق النحوي. تطوير هيثم بن حليمة. ajroum.vercel.app

3 9 26 2K 10

MicrosVuln @microsvuln

4 months ago

If you're using chatgpt/AI for solving "every single" security research challenge, then you're not a security researcher anymore, you're a Chatgpt/AI operator. #skipchatgpt

0 1 2 306 1

Eduardo Novella @enovella_

5 months ago

After 2 years from the last release, APKiD v3.0.0 is out !🔥 - "Black Hawk edition" 📃 Changelog: github.com/rednaga/APKiD/… 🐍 Pypi package: `$ pip install --upgrade apkid` Thanks to @AbhiTheModder for the stunning work 🙌

0 15 41 2K 8

James Clear @JamesClear

5 months ago

When choosing a new habit many people seem to ask themselves, “What can I do on my best days?” The trick is to ask, “What can I stick to even on my worst days?” Start small. Master the art of showing up. Scale up when you have the time, energy, and interest.

115 667 4K 123K 906

8kSec @8kSec

6 months ago

🖥️Learn about root detection techniques on Android and how to bypass them in our latest blog: 8ksec.io/advanced-root-… ☑️Found this interesting? Our courses offer more in-depth insights. Check them out here: academy.8ksec.io/course/practic… #MobileSecurity #AndroidSecurity #Jailbreak…

0 9 38 1K 10

Download Image

HackTricks @hacktricks_live

6 months ago

🚀 To celebrate the upcoming Azure Red Team Expert cert, we're launching the first Cloud PEASS: Azure PEASS! 🔎 It gets Azure/Entra tokens, finds all your permissions, highlights sensitive ones HackTricksAI and tells you how to privesc! 👉 github.com/carlospolop/cl… #hacktricks

2 139 459 18K 233

Govind Sharma @ApkUnpacker

6 months ago

Introducing github.com/apkunpacker/Ro…, a small POC code that detects known root-related apps by attempting to launch their activities and monitoring security exceptions. Strengthen your app’s security by identifying potential root access attempts. #AndroidSecurity #RootDetection

1 7 47 2K 16

0xvangrim @0xvangrim_

6 months ago

I've talked to enough web3 SRs to know that your auditing methodology is your bread and butter. This means that you are not only focusing on understanding new bugs. But also make sure that the bugs you've found once upon a time will be found every single time. On your worst…

3 3 36 2K 12

Assem @assem_ch

9 months ago

First project in the line: A software cost estimator based on Figma design files: considering nb of screens and the complexity, other factors will be added by time

7 7 30 5K 0

Download Image

Taym @taym95

11 months ago

Made it to top 10 contributors to Servo this year, this is probably the thing I'm most proud of in my life so far as a developer, More to come in the future!

2 4 20 2K 1

Download Image

_bhamza @_bhamza

12 months ago

Previously, I covered how to use #unidbg from scratch to emulate an #Android native lib. The PoC was basic & slow. In this new blog, I'll demonstrate where the bottleneck is, and how we can make it production-ready by using Spring boot bhamza.me/blogpost/2024/… #mobilesecurity

0 20 55 4K 21

_bhamza @_bhamza

a year ago

Here's a step-by-step guide on how to emulate #Android native libraries using #unidbg: bhamza.me/blogpost/2024/… PS: I've created a PoC android app/native library so you can follow along. #reverseengineering #MobileSecurity #Pentesting

3 47 142 6K 77

Fady Othman @Fady_Othman

a year ago

A while ago I made $11k for a heap overflow in one of @Meta's open source projects "netconsd", in this 3 parts series I explain the details of how I wrote the fuzz harness in addition to some details about the fuzzing process itself #bugbountytips blog.fadyothman.com/meta-bug-bount…

4 43 257 10K 129

Hemant Mohapatra @MohapatraHemant

a year ago

So now that Nvidia has far outstripped the market cap of AMD and Intel, I thought this would be a fun story to tell. I spent 6+yrs @ AMD engg in mid to late 2000s helping design the CPU/APU/GPUs that we see today. Back then it was unimaginable for AMD to beat Intel in market-cap…

133 903 8K 2.6M 6K

Download Image

Jon Yongfook @yongfook

a year ago

Work on something: - hard to build - no platform risk - can charge $99/mo - you’re good at it - tweet about what you’re doing And you have a recipe for $10k MRR and beyond 🚀

56 31 774 70K 622

sagitz @sagitz_

a year ago

We found a Remote Code Execution (RCE) vulnerability in @ollama - one of the most popular AI inference projects on GitHub. Here is everything you need to know about #Probllama (CVE-2024-37032) 🧵👇