Juan Pablo Perata @cxzero

Tweets

411
Followers

288
Following

5K
Likes

3K

Axel Souchet @0vercl0k

5 days ago

I've been waiting for this a long time: the latest version of WinDbg is now shipping with the console mode debuggers (cdb, kd, ntsd) as well🥳 If you start WinDbg a bazillion times a day, starting cdb instead will save you a lot of frustration / time.

0 13 87 8K 20

Download Image

Critical Thinking - Bug Bounty Podcast @ctbbpodcast

2 months ago

New episode is out! — youtu.be/cHQXlF4p-Ro In episode 130: @Rhynorater is joined by @valent1nee, who shares his journey from hacking Minecraft to becoming a Google hunter. He talks us through several bugs, including an HTML Sanitizer bypass and .NET deserialization, and…

3 14 85 10K 13

ippsec @ippsec

3 months ago

Just made the Wanderer Prep playlist live! It’s designed to help people get started with the Wanderer Pro Lab on Hack The Box (which I created). Even if you don’t plan on playing Wanderer, I’d still recommend checking this playlist out—it highlights a lot of the techniques I’ve…

3 27 197 13K 53

Bobby Cooke @0xBoku

5 months ago

As promised... this is Loki Command & Control! 🧙‍♂️🔮🪄 Thanks to @d_tranman for his work done on the project and everyone else on the team for making this release happen! github.com/boku7/Loki

29 237 705 565K 311

slonser @slonser_

5 months ago

During one CTF competition, our team found xss in python markdown2, you can read the issue from my teammate renbou github.com/trentm/python-…

0 16 98 5K 35

zhero; @zhero___

6 months ago

the research paper is out: Next.js and the corrupt middleware: the authorizing artifact result of a collaboration with @inzo____ that led to CVE-2025-29927 (9.1-critical) zhero-web-sec.github.io/research-and-t… enjoy the read!

74 450 2K 167K 706

Download Image

Salvador Schelotto @S_Schelotto

5 months ago

Los invito a ver la ciudad con los ojos de Fabian Bia y Carlos Lebrato. Porque el nuevo cambio de Montevideo exige del amor por el departamento y su gente. Mirá Montevideo, estoy hablando de vos. 🔴🔵⚪️

67 98 441 34K 21

Download Video

smaury @smaury92

6 months ago

One of my old @GoogleVRP reports just went public -- check it out if you want to see an example of CEF exploitation. bughunters.google.com/reports/vrp/qM…

0 15 80 5K 44

BApp Store @BApp_Store

6 months ago

Check out "TruffleHog Integration" on the BApp Store - use TruffleHog with Burp to scan traffic for 800+ different types of secrets. Available in Burp Suite Professional.

2 55 304 19K 167

Download Image

James Kettle @albinowax

7 months ago

We've just published Turbo Intruder 1.52 which fixes some bugs, and makes the response table silky smooth. PS there's something awesome coming from @PortSwiggerRes tomorrow.

4 3 104 5K 11

picoCTF @picoctf

7 months ago

📅 Registration for #picoCTF2025 is open!. 🌟 Competition Dates: ⏰ Start: 12:00pm ET, March 7 ⏰ End: 3:00pm ET, March 17 📝 Write-ups due on March 17, 2025 Ready to test your skills and have fun? 💻 Let’s go! 🌐 Practice daily at picoCTF.org

1 38 133 9K 27

Hunter @HunterMapping

7 months ago

🚨Alert🚨 CVE-2025-1094: PostgreSQL psql SQL injection 🔥PoC:github.com/rapid7/metaspl… 🧐Deep Dive :attackerkb.com/topics/G5s8ZWA… 📊 956K+Services are found on the hunter.how yearly. 🔗Hunter Link:hunter.how/list?searchVal… 👇Query HUNTER : protocol="postgresql" FOFA :…

2 65 198 12K 98

Download Image

Ivan at Wallarm / API security solution @d0znpp

7 months ago

DeepSeek jailbreak, system prompt extracted, and some @OpenAI data distillation model response after the jailbreak lab.wallarm.com/jailbreaking-g…

1 3 26 4K 9

PentesterLab @PentesterLab

9 months ago

Want to level up your learning in security? 🚀 Stop scrolling and start reflecting. 'Reading Between the Lines' challenges you to dig deeper: 1️⃣ What can I learn from this? 2️⃣ What patterns apply elsewhere? 3️⃣ Why didn’t I spot this? The real breakthroughs come when you ask…

0 7 33 3K 6

Caleb Gross @noperator

10 months ago

Two weeks ago, my team (Capability Development Group @ Bishop Fox) published a deep dive on FortiManager in support of analyzing FortiJump (CVE-2024-47575, missing authentation in fgfmsd), which is being actively exploited in the wild. We cover prerequisite steps for discovering…

3 17 84 18K 39

James Kettle @albinowax

10 months ago

We’re finally live! You can now watch “Listen to the whispers: web timing attacks that actually work” on YouTube: youtube.com/watch?v=zOPjz-…

4 97 322 27K 140

Martin Doyhenard @tincho_508

10 months ago

@arthurair_es If you check my DEFCON talk about cache poisoning in Imperva you can find another useful bypass. Just add 16 / between the dot segments and it also works perfectly. However, according to Bugcrowd’s triage, that’s not a vulnerability. 🤷🏼‍♂️

3 1 27 1K 14

Germán Fernández @1ZRR4H

11 months ago

🔴 CVE-2024-47575: FortiManager fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests (critical) / aka #FortiJump. Vulnerability used in zero-day attacks 🔥 Reported malicious IPs: - 45.32.41.202 -…

1 67 197 56K 83

Download Image

STÖK ✌️ @stokfredrik

11 months ago

Excited about the opportunity of getting back to one of my absolute favorite places: Buenos Aires and the mainstage of this years @ekoparty! Grateful and hyped to have @joohoi with me on the adventure! Can’t wait to meet up with yall and hang out with @BugBountyArg