0xkujen @_kujen5

Senior Penetration Tester at Intrinsic-Security | C-ADPENXv2 | CRTE | CRTP | CARTP Personal Blog: https://t.co/JhE466wzJz Joined January 2022

Tweets

156
Followers

117
Following

738
Likes

336

0xkujen @_kujen5

4 days ago

Let me cook 🧑‍🍳🧑‍🍳 @bountyhunt3rz @0xriptide I'll be on your podcast one day, very soon. Keep up on bringing amazing people to the podcast ♥️

1 0 17 895 2

Download Image

0xkujen @_kujen5

5 days ago

My team is better than yours @_PwnSec_ !❤️ SEE YOU IN SAS 2025 CTF FINALS IN KHAO LAK, THAILAND 🇹🇭🫶

PwnSec @_PwnSec_

5 days ago

My team is better than yours @_PwnSec_ !❤️ SEE YOU IN SAS 2025 CTF FINALS IN KHAO LAK, THAILAND 🇹🇭🫶

1 9 23 4K 6

Download Image

0 0 3 148 0

Eureka is a hard machine fron @hackthebox_eu: Eureka instance leaking its’ heapdump=> Decompile=>Credentials =>Malicious service creation allowing us to leak another user’s credentials to finally abuse a logging service by modifying a file targeted by it fouedsaidi.com/2025/08/29/Hac…

0 0 1 66 0

0xkujen @_kujen5

3 weeks ago

Nocturnal is an easy machine from @hackthebox_eu : Web application which we’ll fuzz for hidden backup=>User credentials=>Admin panel=>Backup=>RCE through source code review=>User flag=>CVE-2023-46818 in ispconfig whish is a PHP RCE to land root privileges fouedsaidi.com/2025/08/16/Hac…

0 0 0 103 2

0xkujen @_kujen5

a month ago

Happy to share that over the last weekend my team "4ay 5amseena" played @ascyberwargames Quals CTF and managed to secure 4th place with lots of 1st, 2nd and 3rd bloods 🩸 during the process💯Therefore securing a spot in the finals happening next month in Cairo, Egypt! 🇪🇬

0 0 0 73 0

Download Image

0xkujen @_kujen5

a month ago

Code is an easy machine from @hackthebox_eu :Exposed python interpreter=>Exposed python subclasses to execute code and get a shell=>Abuse a backup script that takes as an argument a json file, so we can request to backup the root directory => root flag fouedsaidi.com/2025/08/02/Hac…

0 0 0 60 0

PwnSec @_PwnSec_

a month ago

This weekend, we ranked 3rd at DeadSec CTF, took some grit and fervor to get there, considering we played WWCTF and UIU CTF simultaneously. We are growing the next wave of top-notch competitive hackers, day after day. Stay tuned for our journey to the top.

0 4 10 1K 0

Download Image

0xkujen @_kujen5

a month ago

Cypher is a medium machine from @hackthebox_eu: Cypher injection through manipulation of error codes to =>System shell=>Exfiltrating creds. For privesc, we’ll abuse bbot with the ability to inject our own YARA rules to read the contents of the root flag. fouedsaidi.com/2025/07/24/Hac…

0 0 1 71 0

0xkujen @_kujen5

2 months ago

Watching @RealJohnnyTime web3 security interviews to try and extract as much tips as possible from the best people in the field. I will be on your podcast one day, watch out!

1 0 2 112 1

Download Image

0xkujen @_kujen5

2 months ago

Scepter is a hard machine from @hackthebox_eu :Exposed rpc endpoint that we can mount onto our machine =>Keys and certificates to impersonate d.baker user=>ForceChangePassword to get a.carter=>Abuse ESC14 and get h.brown=>p.adams who has DCSync privileges fouedsaidi.com/2025/07/18/Hac…

0 0 1 71 0

0xkujen @_kujen5

2 months ago

Hey Web3 comunity! Hope you are all doing well. I wanna take your advice: after you finish an audit in which you did not perform well and you want to study the findings of other people, how do you study them efficiently in a way that they become a reference for future audits?

0 0 3 126 1

0xkujen @_kujen5

2 months ago

Hey Web3 community, I need your advice: On each new audit, I find myself struggling and taking too much time to understand the docs and the codebase, especially for new concepts that I cant find any vulnerability cuz my mind is focused on understanding first. How do you do it?

1 0 0 103 0

0xkujen @_kujen5

2 months ago

Dog is an easy machine from @hackthebox_eu : Exposed .git folder leaking user credentials=>Exploit an Authenticated RCE vulnerability on a Backdrop CMS instance for user. As for root, we’ll abuse bee to execute commands as root granting us system access. fouedsaidi.com/2025/07/10/Hac…

0 0 2 98 0

0xkujen @_kujen5

2 months ago

Cat is a medium machine from @hackthebox_eu : Exposed git directory=>XSS to get to admin panel => SQLI to get user creds and user flag => CVE-2024-6886 which is a stored XSS in an internal instance of Gitea to get root credentials. fouedsaidi.com/2025/07/04/Hac…

0 1 1 289 0

0xkujen @_kujen5

2 months ago

Haze is a hard machine from @hackthebox_eu : Splunk instance=>LFI=>Extract splunk secrets and decrypt them=>Read GMSA secrets to=>WriteOwner=>ForceChangePassword and AddKeyCredentialLink to impersonate=>Splunk secrets and=>SeImpersonatePrivilege fouedsaidi.com/2025/06/26/Hac…

0 0 1 52 0

0xkujen @_kujen5

3 months ago

Titanic is an easy machine from @hackthebox_eu : Local File Inclusion concluded from some source code analysis=>gitea app.ini=>Database file=>Crack hashes=>=Arbitrary code execution in ImageMagic CVE-2024–41817 fouedsaidi.com/2025/06/21/Hac…

0 0 1 155 0

0xkujen @_kujen5

3 months ago

INFILTRATOR insane-machine from @hackthebox_eu fouedsaidi.com/2025/06/14/Hac…

0 0 1 96 0

0xkujen @_kujen5

3 months ago

Question to SRs who have been doikg this for a long time: How do you keep track of logic and function calls in a codebase? If codebase is big with many contracts how do you get it well? I spent a long time diagramming the contracts to understand well and seems I'm wasting time.

0 0 0 84 0

0xkujen @_kujen5

3 months ago

Smart Contracts in Web3 are still susceptible to Denial Of Service (DoS) attacks, even @owasp listed DoS in its' 2025 OWASP top 10. I have made a couple of examples outlining how DoS attacks can be a really dangerous vector in Today's smart Contracts. github.com/kujen5/Smart_C…

0 2 40 2K 39

0xkujen @_kujen5

3 months ago

Backfire is a medium machine from @hackthebox_eu : Leaked Havoc C2 files -> HavocC2 SSRF -> Open websocket connection to get a revshell -> Internal instance of HardHatC2 -> RCE 0-day -> Execute iptables-save as sudo -> back any file we want -> pwned. fouedsaidi.com/2025/06/06/Hac…