Muhammad Sarim Raza @hackipy

Breaking Security Legally Karachi, Pakistan Joined June 2020

Tweets

1K
Followers

96
Following

679
Likes

3K

Muhammad Sarim Raza @hackipy

3 hours ago

I completed the Web Security Academy lab: Exploiting an API endpoint using documentation @WebSecAcademy portswigger.net/web-security/a…

0 0 0 11 0

Muhammad Sarim Raza @hackipy

5 hours ago

I completed the Web Security Academy lab: Exploiting server-side parameter pollution in a query string @WebSecAcademy portswigger.net/web-security/a…

0 0 0 33 0

I Researched Ruby class pollutions and discovered a new exploitation method, Rotate Chains, achieving 100% exploit success rate; also created a bi0s CTF 2025 challenge based on the technique which had 0 solves. Read the research/writeup: winters0x64.xyz/posts/post-2

1 34 113 6K 58

Muhammad Sarim Raza @hackipy

6 days ago

I don’t get why bug hunters tweet stuff like ‘Had a great month’ and post a screenshot with everything censored… and the reports aren’t even triaged yet. Thanks to HackerOne for that trailing dot showing the status of every report. What exactly are you trying to show?

0 0 0 21 0

N$ @nav1n0x

8 months ago

If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found. Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips

15 240 1K 70K 947

Download Image

Muhammad Sarim Raza @hackipy

6 days ago

I completed the Web Security Academy lab: JWT authentication bypass via algorithm confusion with no exposed key @WebSecAcademy portswigger.net/web-security/j…

0 0 0 9 0

Muhammad Sarim Raza @hackipy

7 days ago

I completed the Web Security Academy lab: JWT authentication bypass via algorithm confusion @WebSecAcademy portswigger.net/web-security/j…

0 0 0 10 0

chux @chux13786509

2 weeks ago

Bug Hunters 🔥 Ever stumbled upon this weird message? "WebSockets request was expected" If you did, congratz! You just found a NodeJS server in debug mode, ready to quickly move on to RCE via simple DevTools 💥💥💥 Search for this message in Censys/FOFA and your automation 🤑

6 103 552 33K 574

Download Image

Coffin @coffinxp7

2 weeks ago

Just dropped a new video on Web Cache Deception to Account Takeover packed with powerful bypass techniques. Don’t miss it! youtu.be/Epzi1fWwdKk?si…

9 48 262 21K 149

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via kid header path traversal @WebSecAcademy portswigger.net/web-security/j…

0 0 1 14 0

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via jku header injection @WebSecAcademy portswigger.net/web-security/j…

0 0 1 10 0

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via jwk header injection @WebSecAcademy portswigger.net/web-security/j…

0 0 1 8 0

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via weak signing key @WebSecAcademy portswigger.net/web-security/j…

0 0 1 6 0

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via flawed signature verification @WebSecAcademy portswigger.net/web-security/j…

0 0 1 7 0

Muhammad Sarim Raza @hackipy

2 weeks ago

I completed the Web Security Academy lab: JWT authentication bypass via unverified signature @WebSecAcademy portswigger.net/web-security/j…

0 0 1 7 0

Medusa @medusa_0xf

2 weeks ago

Hey hackers👋 How do you Pentest/Bughunt on Salesforce applications, also any good resources for it?

20 39 344 38K 300

X1r0z @X1r0z

2 weeks ago

exp10it.io/2025/08/hackin… This is a "vulnerability" I discovered late last year: by abusing the Continuation API in GraalVM Espresso JDK, it's possible to construct a specific gadget and achieve RCE while relying solely on the JDK itself. GitHub: github.com/X1r0z/hacking-…

0 37 128 11K 60

Intigriti @intigriti

3 years ago

If you want to master hacking JWT tokens, open this thread! JWT tokens are often used to authenticate logged-in users. They do this by signing the data so that the server can verify forged tokens. But in some cases, we can bypass this protection! 🤯 A Thread 🧵👇

37 307 952 130K 724

Download Image

bugcrowd @Bugcrowd

2 months ago

Hacking Android apps? This guide breaks down Google Play’s 19 most commonly reported vulns! Download now: static.googleusercontent.com/media/www.goog…

1 12 61 4K 49

Download Image

Douglas Day @ArchAngelDDay

2 months ago

Hackers that hack to "Make the internet a safer place" are about as honest as politicians who go into politics to "make the country better". It's a way to make a living - myself included.