Octagon Networks @OctagonNetworks
We are a global company made up of hackers and security researchers working together to tackle advanced vulnerabilities & techniques using AI. Building @pwn_ai octagon.net New York, USA Joined June 2025-
Tweets16
-
Followers80
-
Following1
-
Likes31
What we are building is insane. If vendors patched quicker, we would've showed you already. The sort of vulnerabilities pwn.ai is finding is on par with the top security researchers. preauth RCE after preauth RCE fully autonomously. Will drop a blog post soon.
With little help with @pwndotai , which is an agentic hacking ecosystem we are building, we are able to get 1-click RCE in Cluely (@cluely). The exploit takes time to setup but it's straight forward and can be reached via many techniques, and an indirect prompt injection. The…
For the last year and a half we have been secretly working on multiple products that will shake and transform cyber security as we know it. From vulnerability detection, source code audit and penetration testing, to bug bounty and offensive security research. Stay tuned! 🤫
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks https://t.co/n5ykdR0UBQ
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
Researchers have uncovered several serious vulnerabilities in Juniper Networks devices, some of which could be exploited for code execution. Read: thehackernews.com/2022/10/high-s… #infosec #cybersecurity #hacking
🔥✍️New post: CVE-2022-22241 preauth RCE and multiple high severity vulnerabilities affecting all Juniper networking devices including Juniper SSLVPN. octagon.net/blog/2022/10/2… #networking #hacking
Tag is out for CVE-2022-22241, a pre-authentication Phar deserialization vulnerability in Juniper JunOS, discovered by @PaulosYibelo and @OctagonNetworks. At this time, @GreyNoiseIO sensors have not observed exploitation in the wild. Track using Trends: viz.greynoise.io/tag/junos-os-p…
Tag is out for CVE-2022-22241, a pre-authentication Phar deserialization vulnerability in Juniper JunOS, discovered by @PaulosYibelo and @OctagonNetworks. At this time, @GreyNoiseIO sensors have not observed exploitation in the wild. Track using Trends: viz.greynoise.io/tag/junos-os-p…
JUST IN: Octagon Networks becomes first cybersecurity company to convert entire balance sheet to #bitcoin 👏
Today, Octagon Networks becomes the first cybersecurity company to convert it's entire balance sheet into #Bitcoin. We will also start accepting payments in Bitcoin, and offering a discount to encourage the use of Bitcoin. Read More: octagon.net/press/2022/06/…
In the comments, nobody is really explaining the root cause. The json_decode allows an attacker to control a type other than string or array. So they can supply a value that’s decoded to a boolean and when juggled with a string, equates to true: 3v4l.org/a1PLP /1
In the comments, nobody is really explaining the root cause. The json_decode allows an attacker to control a type other than string or array. So they can supply a value that’s decoded to a boolean and when juggled with a string, equates to true: 3v4l.org/a1PLP /1
🔥⛓️ CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation, new blog post: octagon.net/blog/2022/03/0… #bugbounty #bugbountytips #rce
Researchers disclose two critical vulnerabilities in Control Web Panel—previously known as #CentOS Web—that could be exploited as part of an exploit chain to achieve pre-authenticated RCE on affected #Linux servers. thehackernews.com/2022/01/critic… #infosec #cybersecurity
🚨 Octagon Networks has reproduced an unpatched SharePoint zero-day (CVE-2025-53770) now under active attack. Exploits leak MachineKey secrets, letting attackers hijack __VIEWSTATE for persistent code execution. If your SharePoint is exposed online, assume it’s compromised, take…
Jemika D j. Price- Wa... @FighterRise11
327 Followers 7K Following Bankholder. Hls agent, Professor. Cpr: © keyholder. insurance. ssi and Complicated. Real Estate and Law. and Finance Assistant. College info.
Leo Tolstoy @LeoTolstoy27358
0 Followers 15 Following International Journal of Wireless & Mobile Networks (IJWMN) is a bi monthly open access peer-reviewed journal
RHack @_rhack_
56 Followers 166 Following Bug Hunter, BugCrowd, HackerOne, Intigriti, YesWeHack, Synack!
Loype @padrejesus484
1K Followers 4K Following
0xGodson @0xGodson_
2K Followers 902 Following Christ is King 👑 | I like web security, and I love JavaScript | OSWE.
Tallest person in cyb... @Xerifiedtallest
49 Followers 209 Following No shelf too high but a lot of bars too low. Problem solved/staying solved Speed of thought operations
Felfo @Felfo696236
37 Followers 450 Following
0xgreyhound @multisigman64
136 Followers 305 Following 25 y/o haxxer | https://t.co/PaRJf3Rg82 active on Instagram: 0xgreyhound
Anne Zou @AnneZou760544
5 Followers 85 Following
Benhur Tekeste @TekesteBenhur
2 Followers 463 Following
Mana Khodadadi @Manakhodadadi
91 Followers 99 Following X Ads Specialist | Helping Brands Grow with Targeted Campaigns & Data-Driven Insights 📩 DM me to unlock the full potential of your business on X!
Alchemist @Alchemist735215
8 Followers 64 Following
Mike Roman @mikeroman
21K Followers 3K Following Trump Campaign 2016, 2020. WH Special Assistant to POTUS 45. Indicted in Fulton County (GA), Arizona, & Wisconsin.
Jamieson Vincent O'Re... @theonejvo
1K Followers 427 Following Hacker. T̶h̶i̶n̶k̶i̶n̶g̶ Doing outside the box.
neuroxploit @neur0xploit
3 Followers 70 Following AI Red Teamer | AI Explot development | Red Team Agent https://t.co/9smsAh1chy
🥳💰✨🎉🎊 @ozeroisonX
30 Followers 98 Following Working class // 23 // White male // PENIS ENVY LOVER I PLAY WITH NUMBERS on MY SCREEN
Shubham @sksq96
998 Followers 2K Following Quant training Large Models. prev research @GithubCopilot, @IBM research.
El Mehdi @elmehdimee
1K Followers 394 Following bug bounty hunter, https://t.co/IgwNoFRWmO , https://t.co/0DPtWr7tZ8 , https://t.co/eG6Su8DLgb
copywritexecute @copywritexecute
9 Followers 235 Following
AB @europeanequity
191 Followers 650 Following Imagine living a life in which your identity and existence demand the participation and validation of everyone around you
ZeroPatch @zer0patch
16 Followers 340 Following
Project Mano | ማኖ... @projectmano
3K Followers 48 Following Movement to push Ethiopian Gov. to embrace #Bitcoin. Ideas for ETHIOPIA to use to rescue our economy - Join the movement!
Vikas Kathuria @kathuriavikas99
67 Followers 2K Following Wannabe Ninja, Djoker fan ▪︎ SWE @zscaler by day ▪︎ Prev @IBM ▪︎ Alum @SCUEngineering, @NSUT_OFFICIAL
Cogn1tron, PhD @Cogn1tron
184 Followers 3K Following
Gaurav Kambli @grvkambli
11 Followers 187 Following
DexterNoN @d3xt3rnon
8 Followers 530 Following
0xdeadbife @_gonzacabrera
1K Followers 5K Following Pwntester - Internet's son - Hack stuffs for learn .⠵
Underlying Principle @iamnamrud
12 Followers 67 Following
`Ivan @Ivanlef0u
11K Followers 4K Following
Evan Luke @EvanThomasLuke
61 Followers 597 Following Senior Security Engineer and Manager at Anvil Secure https://t.co/RrQPbqjl3o
. @OpheliaCourbet
0 Followers 690 Following
Tikus @tikus
717 Followers 13 Following 🔥 TIKUS is a super app for Ethiopians 🇪🇹 📱For Android Get it on https://t.co/JYezwCMt5M or Google Play. iOS soon 👉 Download Tikus for many rewards and earnings
Paulos Yibelo @PaulosYibelo
5K Followers 383 Following security researcher , prev @octagonnetworks , haxor 🗺🦉/, I haxor everything I touch.. Disclaimer: I speak for my self
Cirin @infiltrandome
2K Followers 5K Following Pentester Descubriendo lo que se puede hacer. Conquense de nacimiento,Valenciano de adopcion, Madrileño por trabajo, ciudadano del mundo. Polimata⠠⠵
Mr Observer @MrObserverr
0 Followers 8 Following
Francesco @francBara
0 Followers 24 Following
Yappercino @yappercino
32 Followers 497 Following
me @johnnists
872 Followers 2K Following
Adam @bindshell_
1K Followers 2K Following AI security researcher @ Cisco (acquired Robust Intelligence); threat intelligence; malware; python. opinions expressed are solely my own. read-only mode.
k strizzle @WhenOnKStreet
2K Followers 5K Following red team, web app security, digital archaeology, cats... him/he/y'all. fuck putin. free Palestine. ANTI- FASCIST AF.
Whats that? @MrResearch11
0 Followers 2 Following
pwn.ai @pwn_ai
8K Followers 1 Following Built to breach. Agentic hacking ecosystem in the works. coming soon. Built by the amazing team @OctagonNetworksTrends for United States
You might like
