Octagon Networks @OctagonNetworks
We are a global company made up of hackers and security researchers working together to tackle advanced vulnerabilities & techniques using AI. Building @pwn_ai octagon.net New York, USA Joined June 2025-
Tweets16
-
Followers78
-
Following1
-
Likes31
What we are building is insane. If vendors patched quicker, we would've showed you already. The sort of vulnerabilities pwn.ai is finding is on par with the top security researchers. preauth RCE after preauth RCE fully autonomously. Will drop a blog post soon.
With little help with @pwndotai , which is an agentic hacking ecosystem we are building, we are able to get 1-click RCE in Cluely (@cluely). The exploit takes time to setup but it's straight forward and can be reached via many techniques, and an indirect prompt injection. The…
For the last year and a half we have been secretly working on multiple products that will shake and transform cyber security as we know it. From vulnerability detection, source code audit and penetration testing, to bug bounty and offensive security research. Stay tuned! 🤫
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks https://t.co/n5ykdR0UBQ
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
Researchers have uncovered several serious vulnerabilities in Juniper Networks devices, some of which could be exploited for code execution. Read: thehackernews.com/2022/10/high-s… #infosec #cybersecurity #hacking
🔥✍️New post: CVE-2022-22241 preauth RCE and multiple high severity vulnerabilities affecting all Juniper networking devices including Juniper SSLVPN. octagon.net/blog/2022/10/2… #networking #hacking
Tag is out for CVE-2022-22241, a pre-authentication Phar deserialization vulnerability in Juniper JunOS, discovered by @PaulosYibelo and @OctagonNetworks. At this time, @GreyNoiseIO sensors have not observed exploitation in the wild. Track using Trends: viz.greynoise.io/tag/junos-os-p…
Tag is out for CVE-2022-22241, a pre-authentication Phar deserialization vulnerability in Juniper JunOS, discovered by @PaulosYibelo and @OctagonNetworks. At this time, @GreyNoiseIO sensors have not observed exploitation in the wild. Track using Trends: viz.greynoise.io/tag/junos-os-p…
JUST IN: Octagon Networks becomes first cybersecurity company to convert entire balance sheet to #bitcoin 👏
Today, Octagon Networks becomes the first cybersecurity company to convert it's entire balance sheet into #Bitcoin. We will also start accepting payments in Bitcoin, and offering a discount to encourage the use of Bitcoin. Read More: octagon.net/press/2022/06/…
In the comments, nobody is really explaining the root cause. The json_decode allows an attacker to control a type other than string or array. So they can supply a value that’s decoded to a boolean and when juggled with a string, equates to true: 3v4l.org/a1PLP /1
In the comments, nobody is really explaining the root cause. The json_decode allows an attacker to control a type other than string or array. So they can supply a value that’s decoded to a boolean and when juggled with a string, equates to true: 3v4l.org/a1PLP /1
🔥⛓️ CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation, new blog post: octagon.net/blog/2022/03/0… #bugbounty #bugbountytips #rce
Researchers disclose two critical vulnerabilities in Control Web Panel—previously known as #CentOS Web—that could be exploited as part of an exploit chain to achieve pre-authenticated RCE on affected #Linux servers. thehackernews.com/2022/01/critic… #infosec #cybersecurity
🚨 Octagon Networks has reproduced an unpatched SharePoint zero-day (CVE-2025-53770) now under active attack. Exploits leak MachineKey secrets, letting attackers hijack __VIEWSTATE for persistent code execution. If your SharePoint is exposed online, assume it’s compromised, take…
RHack @_rhack_
54 Followers 164 Following Bug Hunter, BugCrowd, HackerOne, Intigriti, YesWeHack, Synack!
Loype @padrejesus484
849 Followers 3K Following
0xGodson @0xGodson_
2K Followers 898 Following Christ is King 👑 | I like web security, and I love JavaScript | OSWE.
Tallest person in cyb... @Xerifiedtallest
48 Followers 187 Following No shelf too high but a lot of bars too low. Problem solved/staying solved Speed of thought operations
Felfo @Felfo696236
27 Followers 420 Following
0xgreyhound @multisigman64
133 Followers 305 Following 25 y/o haxxer | https://t.co/PaRJf3Rg82 active on Instagram: 0xgreyhound
Anne Zou @AnneZou760544
3 Followers 76 Following
Benhur Tekeste @TekesteBenhur
2 Followers 451 Following
Mana Khodadadi @Manakhodadadi
75 Followers 96 Following X Ads Specialist | Helping Brands Grow with Targeted Campaigns & Data-Driven Insights 📩 DM me to unlock the full potential of your business on X!
Alchemist @Alchemist735215
11 Followers 64 Following
Mike Roman @mikeroman
21K Followers 3K Following Trump Campaign 2016, 2020. WH Special Assistant to POTUS 45. Indicted in Fulton County (GA), Arizona, & Wisconsin.
Jamieson Vincent O'Re... @theonejvo
1K Followers 413 Following Hacker. T̶h̶i̶n̶k̶i̶n̶g̶ Doing outside the box.
neuroxploit @neur0xploit
2 Followers 66 Following AI Red Teamer | AI Explot development | Red Team Agent https://t.co/9smsAh1chy
🥳💰✨🎉🎊 @ozeroisonX
36 Followers 97 Following Working class // 23 // White male // PENIS ENVY LOVER I PLAY WITH NUMBERS on MY SCREEN
Shubham @sksq96
992 Followers 2K Following Quant training Large Models. prev research @Github copilot, @IBM research.
El Mehdi @elmehdimee
981 Followers 382 Following bug bounty hunter, https://t.co/IgwNoFRWmO , https://t.co/0DPtWr7tZ8 , https://t.co/eG6Su8DLgb
copywritexecute @copywritexecute
9 Followers 234 Following
AB @europeanequity
195 Followers 646 Following Imagine living a life in which your identity and existence demand the participation and validation of everyone around you
ZeroPatch @zer0patch
14 Followers 338 Following
Project Mano | ማኖ... @projectmano
3K Followers 48 Following Movement to push Ethiopian Gov. to embrace #Bitcoin. Ideas for ETHIOPIA to use to rescue our economy - Join the movement!
Vikas Kathuria @kathuriavikas99
63 Followers 2K Following Wannabe Ninja, Djoker fan ▪︎ SWE @zscaler by day ▪︎ Prev @IBM ▪︎ Alum @SCUEngineering, @NSUT_OFFICIAL
Cognitron, PhD @guerillahax
183 Followers 3K Following
Gaurav Kambli @grvkambli
11 Followers 187 Following
DexterNoN @d3xt3rnon
9 Followers 391 Following
0xdeadbife @_gonzacabrera
1K Followers 5K Following Pwntester - Internet's son - Hack stuffs for learn .⠵
Underlying Principle @iamnamrud
9 Followers 66 Following
`Ivan @Ivanlef0u
11K Followers 3K Following
Evan Luke @EvanThomasLuke
56 Followers 593 Following Senior Security Engineer and Manager at Anvil Secure https://t.co/RrQPbqjl3o
. @OpheliaCourbet
0 Followers 690 Following
Tikus @tikus
714 Followers 13 Following 🔥 TIKUS is a super app for Ethiopians 🇪🇹 📱For Android Get it on https://t.co/JYezwCMt5M or Google Play. iOS soon 👉 Download Tikus for many rewards and earnings
Paulos Yibelo @PaulosYibelo
5K Followers 379 Following security researcher , prev @octagonnetworks , haxor 🗺🦉/, I haxor everything I touch.. Disclaimer: I speak for my self
Cirin @infiltrandome
2K Followers 5K Following Pentester Descubriendo lo que se puede hacer. Conquense de nacimiento,Valenciano de adopcion, Madrileño por trabajo, ciudadano del mundo. Polimata⠠⠵
Mr Observer @MrObserverr
0 Followers 8 Following
Francesco @francBara
0 Followers 24 Following
Yappercino @yappercino
23 Followers 448 Following
me @johnnists
871 Followers 2K Following
Adam @bindshell_
1K Followers 2K Following AI security researcher @ Cisco (acquired Robust Intelligence); threat intelligence; malware; python. opinions expressed are solely my own. read-only mode.
ironquill @WhenOnKStreet
2K Followers 5K Following red team, cats... him/he/y'all. fuck putin. free Palestine.
Whats that? @MrResearch11
0 Followers 2 Following
Harsh Akshit 🇮🇳 @explorash
974 Followers 882 Following Cloud & Security Evangelist | Google Hall of Fame | Also find me at @cloudvillage_dc
pwn.ai @pwn_ai
8K Followers 1 Following Built to breach. Agentic hacking ecosystem in the works. coming soon. Built by the amazing team @OctagonNetworksTrends for United States
You might like
