Ahmed Mahmoud @pwn_xyz

Exploit brain abilities and security vulnerabilities. BugBountyHunter | Wanna be AppSec Researcher hackerone.com/pwn_xyz There Joined July 2022

Tweets

114
Followers

318
Following

595
Likes

8K

XBOW @Xbow

2 months ago

Sometimes the most illogical approach wins. XBOW discovered XSS in Salesforce Aura by testing aura.format=JSON - which counterintuitively returns text/html content type instead of JSON. The kind of discovery that comes from systematic testing without assumptions. Full hunt…

14 59 311 48K 200

Download Image

inzo @inzo____

2 months ago

back to work with @zhero___ and a new vulnerability on @nextjs that led to CVE-2025-49826 both routers are impacted: app router: framework's cache is directly impacted on ISR pages, regardless of the presence of a CDN pages router: SSR pages only + requires a misconfigured CDN

3 21 222 49K 74

Download Image

Ahmed Mahmoud @pwn_xyz

2 months ago

Alhamdulillah, First time hacking on a GraphQL target!🔥 Many researchers avoid GraphQL because it seems complex… But that complexity hides gold, Try to hack on it. #BugBounty #GraphQL #TogetherWeHitHarder

10 2 207 8K 32

Download Image

shubs @infosec_au

3 months ago

How do we turn bad SSRF (blind) into good SSRF (full response)? The @assetnote Security Research team at @SLCyberSec used a novel technique involving HTTP redirect loops and incremental status codes that leaked the full HTTP resp. It may work elsewhere! slcyber.io/assetnote-secu…

6 180 620 39K 420

Download Image

slonser @slonser_

3 months ago

My new research Escalation of Self-XSS to XSS using modern browser capabilities. blog.slonser.info/posts/make-sel…

12 187 659 40K 493

N$ @nav1n0x

3 months ago

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

7 118 709 29K 523

Download Image

Ahmed Mahmoud @pwn_xyz

3 months ago

الحمد لله اللهم زد وبارك 🩶 Triaged and awarded 🔥 I only share to track my progress, not to show off or pretend I always win. Every success comes after a lot of hard work, failed attempts, and lessons learned #TogetherWeHitHarder #BugBounty

Ahmed Mahmoud @pwn_xyz

3 months ago

2 0 49 7K 1

Download Image

7 0 90 5K 8

Download Image

Ahmed Mahmoud @pwn_xyz

3 months ago

يارب يامسهل ان شاء الله لو اتقبلت دي فيها عزومه على عربية فول وقصب 🤙 #BugBounty

2 0 49 7K 1

Download Image

André Baptista @0xacb

4 months ago

Hidden or disabled fields are commonly overlooked, but they can still open the door to some cool bugs. Try creating a bookmarklet to instantly reveal these fields. Here are some quick examples you can copy and paste: 🔖 Enable all disabled or readonly fields:…

10 97 480 45K 571

Download Video

zhero; @zhero___

4 months ago

with the security advisory published, I should publish my paper within a few hours Race-Condition to Cache Poisoning - CVE-2025-32421 on @nextjs partially leading to the bypass of my previous vulnerability the CVE-2024-46982

14 34 411 21K 110

Download Image

watchTowr @watchtowrcyber

5 months ago

We know what you’re waiting for…..this isn’t it 😅 🚀Join the watchTowr Labs team today on our journey into Kentico Xperience CMS again - chaining vulnerabilities together for full RCE.... labs.watchtowr.com/xss-to-rce-by-…

4 31 126 10K 41

shubs @infosec_au

6 months ago

We recently looked deeper at the authentication bypass vulnerability in Next.js (CVE-2025-29927) and discovered some intelligent and comprehensive ways to check for the vulnerability. Read more in our blog post: slcyber.io/assetnote-secu…

8 122 412 38K 200

Download Image

PortSwigger Research @PortSwiggerRes

7 months ago

The results are in! We're proud to announce the Top ten web hacking techniques of 2024! portswigger.net/research/top-1…

24 295 886 208K 502

watchTowr @watchtowrcyber

7 months ago

8 million requests, $400 later - we’re back. 🚀 We have demonstrated supply chain attacks that could have allowed us to trivially compromise critical infra. networks, including .gov, .mil, and more. This is real Attack Surface Management. labs.watchtowr.com/8-million-requ…

11 92 272 54K 74

d4d @zakfedotkin

8 months ago

Introducing the Cookie Sandwich, a tasty technique to steal HttpOnly cookies using legacy RFC features: portswigger.net/research/steal…

2 92 266 28K 166

Heba Rashed @hebasrashed

6 months ago

ازاي تعمل خير كبير في ثواني وبدون ولا جنيه ادخل بروفايلي على الفيس بوك هتلاقي بوستات شركات كتير افتحها وأعملهم لايك وكل لايك قصاده هيتبرعوا لمرسال بس كده

114 2K 11K 19.0M 510

N$ @nav1n0x

8 months ago

For GraphQL endpoints, test #SQLi in the query’s arguments or nested filters. Many devs overlook injection vectors in #GraphQL resolvers. #BugBountyTips #SQLi

8 36 479 22K 256

Download Image

zhero; @zhero___

8 months ago

very pleased to announce the release of my new article based on my research that led to CVE-2024-46982 titled: Next.js, cache, and chains: the stale elixir zhero-web-sec.github.io/research-and-t… note: does not cover the latest findings shared in my recent posts enjoy reading;