RestSec @restsec_01
Curating technical cybersecurity writeups—bug bounty, pentest, research & more. All handpicked. New stuff daily #bugbounty restsec.com Joined September 2025-
Tweets65
-
Followers0
-
Following37
-
Likes11
There's an extremely good write up by @NomaSecurity (and @sasi2103) about a Salesforce Prompt Injection vuln which led to leaking customer data zero-click via prompt injection into image tag generation. Link and my breakdown of it below:
Meta marked a report as Fixed today! Here is a vulnerability I found in Facebooks "Instant Experiences" ads: ash-king.co.uk/blog/Facebook-… #bugbounty
Client-side RCE via CSS Injection in Google Web Designer for Windows. RCE, CSS Injection #BugBountytips #BugBounty balintmagyar.com/articles/googl…
Defeating XSS filters using unexpected HTML tags and attributes #BugBounty #BugBountytips blog.hackcommander.com/posts/2025/03/…
Multiple Vulnerabilities in OpenSlides - X41 identified multiple bugs in OpenSlides, the most severe one being a XSS. XSS, HTML Injection, Path Traversal #PenetrationTesting #BugBounty x41-dsec.de/lab/advisories…
SQL injections in MachForm v24 #bugbountytips #bugbounty dsecbypass.com/en/sql-injecti…
My new research Escalation of Self-XSS to XSS using modern browser capabilities. blog.slonser.info/posts/make-sel…
Nice one by @garethheyes <input onclick=attributes[0].value='`'+URL+'`'> Demo: portswigger-labs.net/xss/xss.php?x=…${alert(1)}
My 10k-word writeup on exploiting a heap-overflow in Llama.cpp's RPC Server's Tensor-operation to RCE. This by far is one of the most challenging but fun exploitation I've ever researched on. retr0.blog/blog/llama-rpc…
I published a video explaining my CVE-2025-4123 in Grafana. It’s a complex open redirect that I chained with multiple other issues to achieve full read SSRF and account takeover. I break down the entire exploitation chain. youtu.be/HsLco4xzJr0 #Cybersecurity #BugBounty
Hey dear hackers! 🐞 New write-up dropped! I believe write-ups should help our community grow, just as we’ve learned from others’ work. Hope you learn something from this! #BugBounty #CyberSec hesar101.github.io/posts/How-I-fo…
publication of my latest modest paper; Eclipse on Next.js: Conditioned exploitation of an intended race-condition - (CVE-2025-32421) enabling a partial bypass of my previous vulnerability, CVE-2024-46982 by chaining a race-condition to a cache-poisoning zhero-web-sec.github.io/research-and-t…
A deeper dive into cache poisoning attacks.
From "Low-Impact" RXSS to Credential Stealer: A JS-in-JS Walkthrough #bugbounty r3verii.github.io/bugbounty/2025…
CSRF → XSS → Admin Takeover in listmonk (CVE-2025-58430) #bugbounty r3verii.github.io/cve/2025/09/08…
It's possible to do CSS exfiltration under default-src: 'self'. Learn how: salvatore-abello.github.io/posts/css-exfi…
XSS-Leak: Leaking Cross-Origin Redirects, Subdomains and More! You can read the article here: blog.babelo.xyz/posts/cross-si…
🔐 NEW from ONEKEY: Our static analysis now automatically detects RCEs in shell-based CGI scripts — a critical attack surface in embedded devices. Security Advisory by Quentin Kaiser: 🔗 onekey.com/resource/shell… #ShellCGI #RCE #FirmwareSecurity #ONEKEY
🚨 Heads-up: Cisco has released advisories for two critical vulnerabilities impacting its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense tools, and if you’re a customer, you must act now: 🔑 CVE-2025-20362 (High) – Unauthenticated access to…
Noma Security @NomaSecurity
86 Followers 38 Following The most-comprehensive, unified platform built to secure enterprise AI and agents.
Laluka@OffenSkill @TheLaluka
5K Followers 1K Following Sharing is Caring, Hacker, Eternel Learner, Cat! =^~^=
Chocapikk 🤘🏻 @Chocapikk_
3K Followers 267 Following Exploit Dev. CVEs for fun 🇫🇷 Security Researcher & Software Developer @leak_ix ☁️ Views are my own 🧠
X41 D-SEC GmbH @X41Sec
1K Followers 29 Following
The Bug Bounty Hunter @tbbhunter
47K Followers 0 Following Promotions or business ✉️[email protected]
payloadartist @payloadartist
43K Followers 284 Following Yapping about AI, AppSec, Hacking, & Cybersecurity • Helped secure organizations like Google • Opinions are my cat's • Part-time shitposter
𝕏 Bug Bounty Write... @bountywriteups
36K Followers 4K Following 🔍 Bug Bounty Hunter | Content Creator | Sharing cybersecurity write-ups & resources | AI | | by @piyush_supiy #bugbounty #bugbountytips
Ruikai @retr0reg
3K Followers 140 Following 16 founder @pwnoio and researcher, innermost security with ML
NCC Group plc @NCCGroupplc
10K Followers 1K Following NCC Group is a global expert in cyber security & risk mitigation. @NCCGroupInfosec - Global Technical. @NCCsecurityUS - North America. @NCCGroupCareers
ProjectDiscovery @pdiscoveryio
38K Followers 132 Following Detect real, exploitable vulnerabilities. Harness the power of Nuclei for fast and accurate findings without false positives.
ONEKEY @onekey_sec
695 Followers 115 Following Automated Product Cybersecurity & Compliance: Tailored Platform & Services for device manufacturers.
Black Hills Informati... @BHinfoSecurity
48K Followers 2K Following Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
Assetnote @assetnote
10K Followers 0 Following Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure.
Horizon3.ai @Horizon3ai
2K Followers 259 Following Improve your security posture and reduce risk with the NodeZero® platform.
pynt.io @pynt_io
371 Followers 6 Following Pynt is an Innovative API Security testing platform exposing real API threats, from hack to fix.
Searchlight Cyber @SLCyberSec
741 Followers 380 Following Searchlight Cyber creates products to enhance investigations, protect businesses, and combat cybercrime. Request a trial at https://t.co/zDISBtLIcU
Wietze @Wietze
7K Followers 392 Following Threat Detection & Response. Views are my own, unless retweeted. Maintainer of https://t.co/000t7J0NBR & https://t.co/thv6PP5C48 Co-maintainer of https://t.co/rXIxOggXs2
RedTeam Pentesting @RedTeamPT
8K Followers 174 Following Official RedTeam Pentesting GmbH account -- Impressum: https://t.co/pS9oK62Lsu
Rhino Security Labs @RhinoSecurity
7K Followers 2K Following Rhino Security Labs is a top penetration testing and security assessment firm with a focus on cloud (AWS, GCP, Azure), network, and web application pentesting.
Dirk-jan @_dirkjan
29K Followers 206 Following Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
Invariant Labs @InvariantLabsAI
665 Followers 28 Following Invariant Labs makes AI Agents secure and reliable.
Fenrisk @FenriskSec
114 Followers 0 Following French security company specialized in offensive assessments
SSD Secure Disclosure @SecuriTeam_SSD
24K Followers 2 Following SSD provides the support you need to turn your experience uncovering security vulnerabilities into a highly paid career. [email protected]
SecureLayer7 @SecureLayer7
3K Followers 20 Following Quick, reliable Pentest as a Service, API Security Scanning, and Offensive Security to uncover vulnerabilities and strengthen security posture
watchTowr @watchtowrcyber
9K Followers 14 Following watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
Varonis @varonis
6K Followers 2K Following Varonis is a pioneer in data security and analytics, specializing in software for data security, governance, compliance, classification, and threat analytics.
StepSecurity @step_security
170 Followers 23 Following Secure your GitHub Actions with StepSecurity: Your Trusted CI/CD Security Partner
Truffle Security @trufflesec
4K Followers 1 Following The TruffleHog company We find credentials, with open source https://t.co/7CnEqo1inq https://t.co/8vZxthRRXX
Compass Security @compasssecurity
3K Followers 111 Following Penetration Testing, Red Teaming, Incident Response, Bug Bounty, Security Training, Cyber Range
Malwarebytes @Malwarebytes
82K Followers 1K Following Protection you can trust. Need support? @SupportMWB
Ars Technica @arstechnica
1.2M Followers 1K Following Original news, reviews, analysis of tech trends, and expert advice on the most fundamental aspects of tech.
Trend Zero Day Initia... @thezdi
83K Followers 16 Following Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Sucuri Security @sucurisecurity
21K Followers 3K Following • Web Application Firewall • DDoS Protection / Intrusion Prevention • Malware Removal • Website Monitoring • Website Backups • Status Updates: https://t.co/R1ZLeTcMhX
Praetorian @praetorianlabs
8K Followers 1K Following At Praetorian, our mission is clear: prevent breaches before they happen by emulating real-world attackers. That’s the power of #ContinuousOffensiveSecurity.
Trends for United States
You might like
