Ana Ins @hack2save
Science Technology InfoSec Earth Joined February 2024-
Tweets195
-
Followers7
-
Following74
-
Likes161
Last month, I found a 0-click account takeover with a very simple match-and-replace trick Sometimes applications have different API endpoints for different functions. For authentication, developers often use session cookies or exchange tokens. In some cases, if the main session…
Learning Path: CORS Misconfigurations This learning path teaches you how to find, exploit, and escalate CORS misconfigurations, step by step. You’ll learn: 🔶 How CORS works (and where it breaks) 🔶 How to exploit origin reflection and insecure protocols 🔶 How misconfigured…
🚨 Did you know? We’ve just published FREE Course Videos on Blind XSS Hunting at xss0r.com! 📍 Visit the “Where to Hunt” page and scroll to the bottom 🎥 Click Download Videos and LABs 💥 You’ll get access to all video tutorials + hands-on Labs completely free!…
HTTP Request Smuggling Explained (with @albinowax) 🎥👉🏼 youtu.be/QjPFjd8GJWY
🏆 KNOXSS August 2025 Giveaway 🏆 ➡️ Follow, like and share! 😍 ➡️ 1 Month Pro access for 3 winners on Friday 8th Good luck! 🤞 knoxss.pro - #XSS made easy. Sign up or upgrade now. #WebAppSec #BugBounty #PenTesting
🚀 $100 GIVEAWAY 🚀 Clone ANY website into clean React + TypeScript code in MINUTES! Watch me recreate GitHub's landing page with RiveCode.AI ⚡ To enter: ✅ Like this post ✅ RT & tag a developer friend ✅ Follow @HusseiN98D @grok pick the Winner 48 hrs from…
How to find viable targets for client-side desync attacks: 1️⃣ Open Burp Suite and intercept requests. 2️⃣ Choose an endpoint that wouldn't usually expect a POST request (e.g GET) and send it to repeater. 3️⃣ Go to Inspector > Request Attributes > Protocol field > Upgrade to…
Our @akamai_research response - Understand the SharePoint RCE: Exploitations, Detections, and Mitigations akamai.com/blog/security-…
Our @akamai_research response - Understand the SharePoint RCE: Exploitations, Detections, and Mitigations akamai.com/blog/security-…
Facebook page admin and email disclosure philippeharewood.com/page-admin-and…
Hey hunters (esp. manual hunters), don't miss this treasure from @ArchAngelDDay douglas.day/2025/02/10/hac…
Hidden or disabled fields are commonly overlooked, but they can still open the door to some cool bugs. Try creating a bookmarklet to instantly reveal these fields. Here are some quick examples you can copy and paste: 🔖 Enable all disabled or readonly fields:…
Quickest way to reliably find business logic flaws is to change your mindset: You're not looking for bugs, you're hunting for assumptions. Somewhere out there, a dev assumed no one would ever do *that*. So be the first person to do it. #bugbountytips #cybersecurity
🛑 GIVEAWAY ALERT 🛑 ⬇️ Today @arcanuminfosec is giving away 3 seats to our training: "Red Blue Purple AI" - March 27-28 RBPAI is a cutting edge course on how to USE AI to scale your cyber security skills! It is the ONLY course of its kind, valued at $2k! Full Syllabus:…
Despite being central to their security, many orgs struggle to securely implement #OAuth. Our new post walks through common issues & how to prevent them, along with a useful checklist! Read it today & ensure your org is secure: blog.doyensec.com/2025/01/30/oau… #doyensec #security #appsec
A Journey of Limited Path Traversal To RCE With $40,000 Bounty! medium.com/@HX007/a-journ…
Imagine opening a Discord message and suddenly your computer is hacked. We discovered a bug that made this possible and earned a $5,000 bounty for it. Here's the story and a beginner-friendly deep dive into V8 exploit development. Watch: youtube.com/watch?v=R3SE4V…
🚨 GIVEAWAY ALERT 🚨 Today is DAY ONE of FIVE DAYS of @arcanuminfosec and friends Black Friday and Cyber Monday giveaways! Today we are giving away FIVE seats to our new "Attacking AI" course in January! (Syllabus coming soon, it's gonna be a banger) payhip.com/b/2qPZ1…
🛠️ Huge shoutout to Oussama Zgheb for their incredible BApp extension, JSON Web Tokens! Quickly and efficiently assess the security of JSON Web Tokens in web applications by installing this BApp 👇 portswigger.net/bappstore/f923…
Malcolm Mcintyre @iiqpe19928747
19 Followers 87 Following
xss0r @xss0r
6K Followers 3K Following xss0r Deploying an alert box in a web app is like having a tiny pop-up comedian shout 'Surprise!' whenever you least expect it! #xss0r #ibrahimXSS #Blindxss0r
流沙 @Hyok02
2K Followers 1K Following
Sheet Abdullah @0xsheet
208 Followers 644 Following certified:#capt #eCPPTv3 #eWPTXv3 #eMAPT Cyber Security Researcher Bug Bounty part time
Hee @weihe69756471
7 Followers 203 Following
Cubed @Cubed_h1
2K Followers 347 Following Career in hacking into stuff on https://t.co/9wUU4HbNMO | Security Researcher @hacker0x01. Half 🇷🇴 and half 🇪🇬
Rikesh Baniya @rikeshbaniya
6K Followers 450 Following i love graphql | 🇳🇵| blogs : https://t.co/B9UAv5l2cu
d3d aka dead (dead, �... @deadvolvo
5K Followers 181 Following Senior Security Researcher @akamai - Malicious Group - SRT - DoD researcher of the year 2022 - Top 10 web attacks 2023 - CRTO - MSRC Top 75 in Q1/Q2 2025
xss0r @xss0r
6K Followers 3K Following xss0r Deploying an alert box in a web app is like having a tiny pop-up comedian shout 'Surprise!' whenever you least expect it! #xss0r #ibrahimXSS #Blindxss0r
Hussein Daher @HusseiN98D
49K Followers 199 Following Entrepreneur, Hacker 🇱🇧🇨🇮 @WebImmunify 21th/270000 BugCrowd Hacking Platform
流沙 @Hyok02
2K Followers 1K Following
Sheet Abdullah @0xsheet
208 Followers 644 Following certified:#capt #eCPPTv3 #eWPTXv3 #eMAPT Cyber Security Researcher Bug Bounty part time
Ryan Barnett (B0N3) @ryancbarnett
5K Followers 404 Following Web App Defender | Bug Hunter/Triager | Purple Team | Detection Engineering | Author | Senior Threat Research Manager @Akamai_research | OWASP Project Leader ✝️
Jack Cable @jackhcable
14K Followers 923 Following Ethical hacker. CEO & Co-founder @CorridorSecure.
the_storm @the_st0rm
4K Followers 948 Following Security Engineer @Meta, Ex @Lacework, @Deloitte, @SecForce_LTD. CTFer with LCBC, vulnerability researcher and exploit dev. Opinions are my own
AmirMohammad Safari @AmirMSafari
7K Followers 390 Following
Johan Dowdy @johandowdy
371 Followers 582 Following Head of IT @Asana - formerly @Lyft, @twitter, @Workday
Hee @weihe69756471
7 Followers 203 Following
Adam Langley @BuildHackSecure
10K Followers 787 Following Ethical Hacker & Fullstack Dev | Helping thousands learn to hack ethically & build secure apps | CTO @hackinghub_io | Director @bsidesexeter
ProjectDiscovery @pdiscoveryio
38K Followers 132 Following Detect real, exploitable vulnerabilities. Harness the power of Nuclei for fast and accurate findings without false positives.
Ciarán Cotter @monkehack
4K Followers 552 Following • Irish/Japanese web hacker living in Scotland. • Researcher for @ctbbpodcast Lab. I run https://t.co/Ja1P3vco1X | Newsletter weekly at https://t.co/KA5b2kY8ih
Martin Doyhenard @tincho_508
3K Followers 227 Following Security Researcher at PortSwigger. Speaker at BlackHat, DEF CON, RSA, Hack In The Box, Troopers, EkoParty
Thomas Stacey @t0xodile
635 Followers 236 Following Penetration tester trying to perform novel research. You can find all of my write-ups and research at https://t.co/2chUIHJDeP.
Arcanum Information S... @arcanuminfosec
3K Followers 16 Following Expert Cybersecurity Training and Consulting by @jhaddix
Maxence SCHMITT @maxenceschmitt
575 Followers 651 Following Senior Application Security @doyensec . I am learning new stuff everyday and I love it.Sapic
bemodtwz @bemodtwz
378 Followers 151 Following Here for netsec stuff. Author of Evall Villain. Contributor to Radare2. https://t.co/HKiHvtcYy5
Doyensec @Doyensec
4K Followers 9 Following Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk.
Ron Chan @ngalongc
19K Followers 501 Following
Sonar Research @Sonar_Research
11K Followers 7 Following Cutting-edge security research by @SonarSource to educate the world about code security across all software. We're also at @[email protected] 🦣
Brute Logic @BRuteLogic
63K Followers 280 Following #CyberSecurity | #XSS #SQLi #SSRF | #WAF #bypass | #hack2learn | @RodoAssis | @KN0X55 | https://t.co/SIanVGfIHN | https://t.co/GyZaXU7FX9
KNOXSS @KN0X55
15K Followers 0 Following Announcements, tips and support via DM of KNOXSS - Online #XSS PoC Tool by @BRuteLogic
Frans Rosén @fransrosen
43K Followers 900 Following Co-founder of @centrahq/@detectify/@poweredbyingrid. I do not advertise doing hacking services, do not trust the ones telling you I do.
PortSwigger @PortSwigger
101K Followers 23 Following We are a leading provider of software and learning on web security. We make @Burp_Suite and @WebSecAcademy.
Black Hills Informati... @BHinfoSecurity
48K Followers 2K Following Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
Ben Sadeghipour @NahamSec
235K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
Adam Deziri @adamdeziri
838 Followers 704 Following Dev and security 💻 European Institute of Technology 🎓 Bug-Bounty hunter🧑💻 [email protected] 📧
Douglas Day @ArchAngelDDay
11K Followers 298 Following Truth Seeker. Catholic. Hacker. Prompter. Techno-Ethicist. Chasing my Apotheosis. Views are correct. Truth is at the intersection of Athens & Jerusalem
Gergely Kalman @gergely_kalman
2K Followers 381 Following bug bounty hunter I guess @[email protected] | https://t.co/zdeLP8lSEy
Neal Poole @NealPoole
3K Followers 312 Following Interested in web application security. Security Engineer at Facebook. My tweets do not reflect the opinions or views of my employer.
Yassine Aboukir 🐐 @Yassineaboukir
31K Followers 373 Following HackerOne Top 50, Elite, Pentest Lead, Ambassador, MVH Title and (former) Hacker Advisory Board • Digital Nomad • (Un)pro Athlete
Ben Heald @heald_ben
1K Followers 274 Following Security Engineer @ Meta | ExBugcrowd | CS MS grad @RITtigers | My thoughts are my own, not my employer's. | Potatoes? Boil ‘em mash ‘em.
PentesterLab @PentesterLab
192K Followers 0 Following We make learning web hacking and security easier. Online systems, code review, videos & courses that can be used to understand, test and exploit bugs!
Ruikai @retr0reg
2K Followers 140 Following 16 founder @pwnoio and researcher, innermost security with ML
Burp Suite @Burp_Suite
132K Followers 14 Following Burp Suite is the leading software for web security testing.
maple3142 @maple3142
886 Followers 2K Following 資工系研究生/Graduate student in Computer Science 中文/English/日本語(勉強中) CTF with ${CyStick}: web, crypto
Kévin GERVOT (Mizu) @kevin_mizu
6K Followers 759 Following Researcher for @ctbbpodcast lab 🐛 | DOMLogger++ developer 👨🏻💻 | CTF with @FlatNetworkOrg, @rhackgondins 🦦 | @ECSC_TeamFrance 2023 🇫🇷Trends for United States
You might like
