GhostPwner @ghostpwner

AppSec Engineer | Security Researcher | CTF Player ghostpwner.xyz Portugal Joined July 2014

Tweets

576
Followers

241
Following

491
Likes

3K

GhostPwner @ghostpwner

3 weeks ago

From Porto to Lisbon on Sept 25 for HackAIcon by @ethiack 🤖 If the AI can survive Lisbon traffic without rage-quitting, then yes… we’re all doomed. 🎟️ hackaicon.com #HackAIcon

0 0 2 85 0

Payload delivered: 40% discount activated 💸 A new batch of HackAIcon tickets just dropped, and the next 50 participants can unlock 40% off. 💥 Use code HAIC-EARLY-BIRD Or just skip straight to the exploit: eu1.hubs.ly/H0mczlZ0 No patch for FOMO once these are gone.…

0 2 7 291 0

Download Image

André Baptista @0xacb

a month ago

How to grab subs for a target using subfinder, validate them and extract the text body from each response using httpx and jq, extract a wordlist of keywords using NLP then resolve them using puredns to find valid subdomains 👇 You can also use LLMs and tools like alterx to…

3 36 234 11K 213

Download Video

Intigriti @intigriti

2 months ago

💡 Tip! Injecting Log4Shell payloads is also possible in PDF files! eelyvy has a dedicated GitHub repository showing exactly how to craft your PDF payload file! 😎 🔗 github.com/eelyvy/log4jsh…

2 98 412 19K 286

Download Image

Rikesh Baniya @rikeshbaniya

2 months ago

if the target uses zendesk to handle support emails you could send an email with payload `{{ticket.ccs[0].name}}a{{ticket.ccs[0].phone}}` by adding `[email protected]` in CC and extract victim info ranging from phone, address to payment info #bugbounty #bugbountytips

14 90 591 38K 597

Download Image

André Baptista @0xacb

2 months ago

Can you hack a vibe coded PHP app? Yes. Can you use AI to hack the same app? Yes. Just dropped our workshop on AI for Ethical Hacking. Full materials 👇 github.com/ethiack/ai4eh/… Blog post: blog.ethiack.com/blog/dont-fear…

1 49 161 12K 154

Download Image

André Baptista @0xacb

4 months ago

Playing with Headless, PDF or Image rendering for SSRF and are you able to control/inject HTML but JS is disabled? <meta http-equiv="refresh" content="0;url=//ethiack.com"> This may refresh the page and send the browser to a new location, like internal hosts. Some filters may…

2 62 310 16K 232

Download Image

offensivecon @offensive_con

4 months ago

#OffensiveCon25 videos are now up! youtube.com/playlist?list=…

8 169 414 106K 161

Md Ismail Šojal 🕷️ @0x0SojalSec

4 months ago

Use NextJS? Recon Tip by renniepak A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); #infosec #cybersec #bugbountytips

7 235 949 41K 919

Download Image

Bug Bounty Village @BugBountyDEFCON

4 months ago

GraphQL often exposes WebSockets — and they usually have no WAF, no checks, and no rate limits. Roni Carta (@0xLupin) explains how hitting WebSockets can bypass protections and open up even more attack surface. Full Talk → youtu.be/ROqkbXtV2VQ #BugBounty #DEFCON #BBV #DoS

0 15 121 5K 107

Download Video

Intigriti @intigriti

4 months ago

CSPBypass is a simple CSP bypass search to help you find any documented JSONP endpoints to achieve XSS! 😎 🔗 cspbypass.com

0 72 271 13K 191

Download Image

André Baptista @0xacb

4 months ago

Really dope extension by the legend @fransrosen to track postMessage listeners in the current window and all subframes 🧩 It detects short-lived or interaction-triggered listeners, logs their function and source, and lets you replay messages.

3 24 136 7K 115

Download Video

Muqsit 𝕏 @mqst_

5 months ago

⛓️‍Comprehensive Guide: An Overview of Software Supply Chain Security tldrsec.com/p/supply-chain… #infosec

0 24 71 4K 34

Download Image

Het Mehta @hetmehtaa

5 months ago

Introducing: JADX-AI — AI-Powered Reverse Engineering via MCP + Claude Desktop! It's live: Download now: github.com/zinja-coder/ja… Source Code JADX-AI: github.com/zinja-coder/ja… JADX-MCP-SERVER: github.com/zinja-coder/ja… Note: Keep in mind it's still in beta version and early…

0 100 276 13K 165

André Baptista @0xacb

5 months ago

Subdomain enumeration tools often miss the most obscure dev related subs. Tools like @pdiscoveryio alterx are able to generate subdomain permutations in an efficient way.

2 38 344 16K 253

Download Image

bugcrowd @Bugcrowd

5 months ago

The requirement to enable MFA at login is a proactive security measure. This change to the platform was roadmapped for later on in the year, however, it was accelerated following threat intelligence that included credential leaks and compromised tools affecting other bug bounty…

7 10 77 45K 15

Download Image

Nicolas Krassas @Dinosn

5 months ago

39M secrets exposed: GitHub rolls out new security tools securityaffairs.com/176170/securit…

0 3 4 2K 3

André Baptista @0xacb

5 months ago

This @bishopfox tool is next level! 🚀 Eyeballer uses AI to analyze screenshots and sorts them into categories based on appearance, including: 👀 Old-looking pages, 👀 Login pages, 👀 404 responses 👀 Web apps 👀 Parked domains Get your eyeballs around this👇