Medusa @_medusa_1_

Joined May 2013

Tweets

37
Followers

426
Following

394
Likes

341

sw33tLie @sw33tLie

4 weeks ago

Super glad to have collaborated on @albinowax’s research this year with @bsysop and @_medusa_1_. Funny enough, it all started with a random Slack DM that revealed a potential research collision with James, and things took off from there.

James Kettle @albinowax

4 weeks ago

20 250 746 75K 335

8 6 112 17K 10

James Kettle @albinowax

3 months ago

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame" is coming to #DEFCON33! This talk will feature multiple new classes of desync attack, mass exploitation spanning multiple CDNs, and over $200k in bug bounties. See you there!

11 93 527 43K 126

Download Image

sw33tLie @sw33tLie

4 months ago

I've recently put more work into my ffuf fork, uff, and I think every ffuf user should at least give it a try - and maybe even switch to it. Here's why, in a #bugbounty 🧵

12 77 476 52K 385

Download Image

d4d @zakfedotkin

6 months ago

I’m excited to introduce Namespace Confusion, a novel attack discovered during Gareth's and mySAML Roulette: The Hacker Always Wins research. We uncovered a brutal attack on XML signature validation that destroys authentication in Ruby-SAML!

Gareth Heyes \u2028 @garethheyes

6 months ago

4 67 200 33K 112

1 30 169 17K 83

Download Image

bsysop @bsysop

7 months ago

Super happy to see our research ranking #3 in @PortSwigger Top Web Hacking Techniques of 2024! 🚀 This one was a wild ride! Huge thanks to @_medusa_1_ & @sw33tLie for the amazing teamwork and to @Bugcrowd, who supported us! ❤️ What next? Keep tuned 👀🥷🏻 #BugBounty #Hacking

PortSwigger Research @PortSwiggerRes

7 months ago

24 295 886 207K 502

10 9 96 9K 6

sw33tLie @sw33tLie

7 months ago

Huge news! Our research just ranked #3 in @PortSwigger’s Top Web Hacking Techniques of the Year! 🎉 Biggest lesson: ever assume something isn’t exploitable—test it. Smuggling attacks are far from dead! Massive thanks to my research partners @bsysop & @_medusa_1_ 🙌 #bugbounty

PortSwigger Research @PortSwiggerRes

7 months ago

24 295 886 207K 502

7 7 130 19K 24

Download Image

bsysop @bsysop

8 months ago

🏆 Top 10 Web Hacking Techniques of 2024 nominations are live, and this time, we’re participating! Our technique is "TE.0 HTTP Request Smuggling" affecting thousands of servers. Vote in portswigger.net/polls/top-10-w… Questions? CC: @_medusa_1_ @sw33tLie #BugBounty #InfoSec

1 12 90 9K 33

bugcrowd @Bugcrowd

a year ago

How novel HTTP request smuggling techniques led to an in-depth investigation and a substantial payout... 🤯 After extensive research and failed attempts, @sw33tLie, @bsysop, and @medusa_1 uncovered a new HTTP Request Smuggling vulnerability 🧩: bgcd.co/3zNVPlB

0 5 30 3K 15

Bee 🐝 @securibee

a year ago

🐝 Hive Five 181 - What the Dying Teach the Living --- 🔍 Innovative recon tool alert: Lemma, a Python-based AWS Lambda package for executing command-line tools in a scalable, remote environment. @defparam 🕵️ Unveiling TE.0 HTTP Request Smuggling: A critical vulnerability…

2 5 10 4K 7

Download Gif

Medusa @_medusa_1_

a year ago

It’s been a while since last publication on the hop-by-hop vulnerability affecting Akamai. Special thanks to @bsysop, @sw33tLie, the Google team, and @Bugcrowd for their invaluable support. bugcrowd.com/blog/unveiling…

0 12 61 6K 21

bsysop @bsysop

a year ago

Servers with top-notch security measures like authentication, authorization, and ZeroTrust can still fall prey to HTTP Smuggling 🏴‍☠️. Proud to work with @_medusa_1_ and @sw33tLie on this discovery. Genius guys! 🚀🧠 bugcrowd.com/blog/unveiling… #BugBounty @Bugcrowd

4 38 127 10K 57

bugcrowd @Bugcrowd

a year ago

BIG round of applause for this BIG find! 👏🐛📈

sw33tLie @sw33tLie

a year ago

BIG round of applause for this BIG find! 👏🐛📈

13 67 276 47K 136

Download Image

0 3 28 4K 4

sw33tLie @sw33tLie

a year ago

This is one of the most widespread and impactful bugs I've ever found in my career. Great collab with @bsysop and @_medusa_1_ Smugglings are still out there—stay vigilant! #bugbounty @Bugcrowd bugcrowd.com/blog/unveiling…

13 67 276 47K 136

Download Image

hacktive security @hacktivesec

3 years ago

portswigger.net/daily-swig/res… Hey @_medusa_1_ , the situation is getting out of hand! 😅 @PortSwigger

0 3 7 0 1

hacktive security @hacktivesec

3 years ago

thestack.technology/akamai-vulnera… @_medusa_1_ @jacopotediosi #BugBounty #BugBountytips #CyberSecurity

0 1 5 0 1

Jacopo Tediosi @jacopotediosi

3 years ago

I just published a post on Medium about the most relevant vulnerability I have found in my life so far. "Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)": medium.com/@jacopotediosi…

6 92 266 0 76

hacktive security @hacktivesec

3 years ago

blog.hacktivesecurity.com/index.php/2022… TL;DR: Overall bounty of USD 46,000! 😱🥳 First post by @_medusa_1_ showing the outcomes of his most recent #bugbounty activity which led to the detection of an HTTP Request #Smuggling #vulnerability on several big Corp. #cybersecurity #bugbountytips

5 100 252 0 94

Download Image

Youssef (s3c) @s3c_krd

4 years ago

really it's not fun for me, some @Hacker0x01 trigger team don't care about reports without understand the report quickly close it as N/A or dups, i had 4 reports it was closed as dups and i talked with them to closer look at these reports and they was mistake it was not dups.