Abss @absshax

Sporadic Bug Hunter. Aspiring Security Researcher. Cats. Techno 🎧. Tweets only relate to things I am interested in abss0x7tbh.github.io India Joined November 2017

Tweets

489
Followers

1K
Following

518
Likes

2K

zere @j_zere

3 weeks ago

Just published my first blog post "Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover" You can read the full write-up here: zere.es/posts/cache-de…

26 118 499 30K 368

Debangshu 🇮🇳🥷 @ThisIsDK999

a month ago

bugcrowd.com/disclosures/d5… Super-nice technique! Something refreshing to see in the AI-everything era :)

3 25 156 8K 110

Excited to share Aryabhatta 1.0, our leading model that scores 90.2% on JEE Mains, outperforming frontier models like o4 mini and Gemini Flash 2.5 Trained by us at @AthenaAgentRL , in collaboration with @physics__wallah, using custom RLVR training on 130K+ curated JEE problems…

110 206 2K 173K 475

Download Image

Lex Fridman @lexfridman

2 months ago

Here's my 6 hour conversation with @dhh, a legendary programmer, creator of Ruby on Rails, author, and race car driver. This was a fun and inspiring conversation on everything from the future of programming & AI to the nature of happiness & productivity to the value of family,…

482 832 7K 2.7M 5K

Download Video

Abss @absshax

2 months ago

Epic for sure!

0 0 1 317 0

Abss @absshax

2 months ago

Yay, I was awarded a $12,500 bounty on @Hacker0x01! hackerone.com/absshax #TogetherWeHitHarder

10 1 232 12K 35

Lupin @0xLupin

3 months ago

2 AM in a Tokyo hotel room: @assetnote x Depi find a Dependency Confusion vuln that lands RCE on Netflix ! 🚀 Shout-out to @infosec_au for the "keep digging" spark & Netflix security for stellar triage. Full write-up in thread 🧵

13 48 273 23K 127

Download Image

Prajwal Prashanth @praj_22

6 months ago

MCP (Model Context Protocol) is blowing up!! I was intrigued to dig deep, to build and understand. It's like enabling your AI to have more assistants & @AnthropicAI says this is 'USB-C for AI'. I'll break it down by asking `Why?` below ⏬

3 7 60 5K 47

Download Image

zhero; @zhero___

a year ago

happy to release my new article entitled: Next.js and cache poisoning: a quest for the black hole zhero-web-sec.github.io/research-and-t… good reading;

38 179 771 82K 478

Download Image

daniel @hackermondev

11 months ago

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips gist.github.com/hackermondev/6…

76 341 1K 2.0M 635

Abss @absshax

11 months ago

Yay, I was awarded a $1,000 bounty on @Hacker0x01! hackerone.com/absshax #TogetherWeHitHarder Hacking after a long ass time. Anyone open to collab do hmu.

2 2 81 5K 4

Thomas Stacey @t0xodile

11 months ago

Excited to release my latest research today. Exploiting CORS can be a tricky in modern web apps, but there are still critical cases out there if you know what to look for. If you want to learn more about CORS exploitation, the research is available at outpost24.com/blog/exploitin…

2 62 179 15K 149

Orange Tsai 🍊 @orange_8361

a year ago

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confus… Highlights include: ⚡ Escaping from DocumentRoot to System Root ⚡ Bypassing built-in ACL/Auth with just a '?' ⚡ Turning XSS into RCE with legacy code…

37 654 2K 203K 740

Prajwal Prashanth @praj_22

a year ago

Stepping out of my cocoon and launching! 🎉 Here's explainer video for StockResearchGPT 📈 @InvestiVerse Instantly get answers from the annual reports of Indian companies. No more endless reading or tedious keyword searches. Get the context you need, fast!! #buildinpublic

12 13 104 15K 31

Download Video

Prajwal Prashanth @praj_22

a year ago

Time to Shiipppp 🚀

4 3 23 2K 2

Download Image

HTTPVoid @httpvoid0x2f

2 years ago

Check out our new blog post! We hacked into Apple Travel Portal (yes, again!) using a 0-day Remote Code Execution exploit. Part 1 is live now, stay tuned for the follow-up on another RCE worth a total bounty of $40k! blog.projectdiscovery.io/hello-lucee-le…

7 112 357 44K 171

AppSecEngineer @AppSecEngineer

2 years ago

Giveaway Alert! 🎁 Here’s your chance to attend our members-only live event on 18th July. One lucky winner will get our Pro Annual subscription priced at $399 for FREE. To enter: 1️⃣ Follow us on Twitter. 2️⃣ Tag a fellow AppSec Enthusiast in the comments. 3️⃣ Retweet this post…

82 89 83 31K 5

Download Image

Travzu @travzu

2 years ago

Travzu, along with travel management, is now your official travel guide. Go and update now!🚀

17 16 48 7K 3

Download Image

Sreeram KL @kl_sree

3 years ago

Write-up about a client-side SSRF that @sivaneshashok and I found in Google Cloud Vertex AI @GoogleVRP blog.geekycat.in/client-side-ss…

4 72 182 20K 65

Jacopo Tediosi @jacopotediosi

3 years ago

I just published a post on Medium about the most relevant vulnerability I have found in my life so far. "Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)": medium.com/@jacopotediosi…