FHack @_fhack_

#BugBounty #Venezuela Joined February 2020

Tweets

59
Followers

44
Following

778
Likes

97

André Baptista @0xacb

3 months ago

This is how DOM clobbering works. When you create an element with an id, the browser automatically creates a global variable for that ID: <a id="foo"></a> Now window.foo points to that single element. But when you create multiple elements with the same id: <a…

4 41 215 16K 168

Download Video

FHack @_fhack_

11 months ago

Presente en la #DragonJARCON 2024 😎

0 1 5 562 0

Download Image

Assetnote @assetnote

a year ago

In May 2024, our security research team disclosed three critical issues in ServiceNow, which allowed for unauthenticated arbitrary code execution and data access for ServiceNow Vancouver or Washington instances. You can read our blog post here: assetnote.io/resources/rese…

1 43 162 19K 39

Download Image

Lupin @0xLupin

2 years ago

1/🧵When I report an XSS vulnerability I always try to escalate its impact, especially when I know that the Security Team is mature about those subjects. However, what happens when I find an XSS on a WordPress site that is used only for branding ? Here is how I do it ;)

6 77 285 50K 230

Download Image

🅱1️⃣4️⃣🅲🅺🅷0️⃣1️⃣3️⃣ @310hkc41b

3 years ago

Es tarde. Estás cenando, recibes un SMS de un teléfono que no te suena. No le prestas atención. (hilo) 🧵

9 126 309 0 35

Download Image

shubs @infosec_au

3 years ago

My colleagues @seanyeoh and @devec0 found some phenomenal vulnerabilities in Cloudflare Pages. I highly recommend you read about their adventures in pwning CI systems. There's a lot to learn from their research. blog.assetnote.io/2022/05/06/clo…

4 86 264 0 59

🅱1️⃣4️⃣🅲🅺🅷0️⃣1️⃣3️⃣ @310hkc41b

3 years ago

Hoy toca jugar un poco con un antiguo #malware de #Android. En concreto un troyano que incluye un Downloader. Lo que se conoce como un #TrojanDownloader. Es ANTIGUO (importante), del 2017. Nada actual, solo por jugar un poco. Hilo 🧵

2 43 143 0 21

Brute Logic @BRuteLogic

8 years ago

They think we do things in a snap. But there's a lot of hard work, endless hours of trial and error. Many hours parsing search engine results, reading tons of not so helpful information. What they end up seeing is the show time. We make it look easy but it's not. #hack2learn

6 74 232 0 9

dawgyg - WoH @thedawgyg

4 years ago

I understand platforms like @SynackRedTeam @Hacker0x01 and @Bugcrowd not allowing Russian/Belarusian hackers to be paid for new bugs, or not allowing them to participate. But to steal what they have already earned prior, and donate it without their consent is theft. They

24 140 763 0 12

BountyTalks @BountyTalks

4 years ago

Bueno, la espera ha terminado. Este domingo vuelve Bounty Talks con el inicio de la segunda temporada, y que mejor manera de arrancar sino que con un invitado de lujo. Este domingo estaremos hablando con Roni Carta (@0xLupin). Se suman a las 4PM ARG por twitch.tv/arl_rose!

3 8 34 0 0

Download Image

Karsten Hahn @struppigel

4 years ago

This is JavaScript ➡️ utf-8.jp/public/aaencod…

16 108 469 0 74

Download Image

spaceraccoon | Eugene Lim @spaceraccoonsec

4 years ago

I just published "Solving DOM XSS Puzzles" on some interesting bypasses and techniques I used that earned bonus bounties! spaceraccoon.dev/solving-dom-xs…

2 75 251 0 113

Guido @palmerabollo

4 years ago

Estas Navidades hice un cacharro para enviar fotos a mi abuela que no tiene móvil ni internet. Los requisitos eran dedicar poco tiempo (~20h) + que pudiese enchufarlo y listo + sin mantenimiento.

106 2K 8K 0 1K

Emad Shanab - أبو عبد الله @Alra3ees

4 years ago

GitHub Dork Helper:- by @Verry__D Url:- vsec7.github.io Write up by @GodfatherOrwa orwaatyat.medium.com/your-full-map-…

8 256 518 0 192

Download Image

Purab Parihar @purab_parihar

4 years ago

Some Path Traversal/LFI Bypasses🔥 : 1. %2e%2e%2f 2. %uff0e%uff0e%u2215 3. example.com/index.php?incl… 4. Double Encoding 5. Nginix - ////////../../ 6. php://filter/convert.base64-encode/resource=index.php 7. data://text/plain,<?php phpinfo(); ?> #bugbounty #bugbountytips