Abss @absshax

Sporadic Bug Hunter. Aspiring Security Researcher. Cats. Techno 🎧. Tweets only relate to things I find Interesting. abss0x7tbh.github.io India Joined November 2017

Tweets

487
Followers

1K
Following

525
Likes

2K

Abss @absshax

19 hours ago

This was a fun find during a recent pentest! CDN eventually displays images leaking AWS temp creds. appsecengineer.com/blog/pixelated… OG Read: buer.haus/2019/10/18/a-t…

0 0 4 114 1

zere @j_zere

a month ago

Just published my first blog post "Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover" You can read the full write-up here: zere.es/posts/cache-de…

27 129 533 36K 405

Excited to share Aryabhatta 1.0, our leading model that scores 90.2% on JEE Mains, outperforming frontier models like o4 mini and Gemini Flash 2.5 Trained by us at @AthenaAgentRL , in collaboration with @physics__wallah, using custom RLVR training on 130K+ curated JEE problems…

110 206 2K 176K 475

Download Image

Abss @absshax

3 months ago

Yay, I was awarded a $12,500 bounty on @Hacker0x01! hackerone.com/absshax #TogetherWeHitHarder

10 1 231 12K 35

Lupin @0xLupin

3 months ago

2 AM in a Tokyo hotel room: @assetnote x Depi find a Dependency Confusion vuln that lands RCE on Netflix ! 🚀 Shout-out to @infosec_au for the "keep digging" spark & Netflix security for stellar triage. Full write-up in thread 🧵

13 48 273 24K 126

Download Image

Prajwal Prashanth @praj_22

7 months ago

MCP (Model Context Protocol) is blowing up!! I was intrigued to dig deep, to build and understand. It's like enabling your AI to have more assistants & @AnthropicAI says this is 'USB-C for AI'. I'll break it down by asking `Why?` below ⏬

3 7 60 5K 47

Download Image

zhero; @zhero___

a year ago

happy to release my new article entitled: Next.js and cache poisoning: a quest for the black hole zhero-web-sec.github.io/research-and-t… good reading;

38 180 771 82K 479

Download Image

daniel @hackermondev

11 months ago

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips gist.github.com/hackermondev/6…

76 341 1K 2.0M 637

Abss @absshax

12 months ago

Yay, I was awarded a $1,000 bounty on @Hacker0x01! hackerone.com/absshax #TogetherWeHitHarder Hacking after a long ass time. Anyone open to collab do hmu.

2 2 81 5K 4

Thomas Stacey @t0xodile

12 months ago

Excited to release my latest research today. Exploiting CORS can be a tricky in modern web apps, but there are still critical cases out there if you know what to look for. If you want to learn more about CORS exploitation, the research is available at outpost24.com/blog/exploitin…

2 62 179 15K 149

Orange Tsai 🍊 @orange_8361

a year ago

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confus… Highlights include: ⚡ Escaping from DocumentRoot to System Root ⚡ Bypassing built-in ACL/Auth with just a '?' ⚡ Turning XSS into RCE with legacy code…

37 654 2K 204K 742

Prajwal Prashanth @praj_22

a year ago

Stepping out of my cocoon and launching! 🎉 Here's explainer video for StockResearchGPT 📈 @InvestiVerse Instantly get answers from the annual reports of Indian companies. No more endless reading or tedious keyword searches. Get the context you need, fast!! #buildinpublic

12 13 105 15K 31

Download Video

Prajwal Prashanth @praj_22

a year ago

Time to Shiipppp 🚀

4 3 24 2K 2

Download Image

HTTPVoid @httpvoid0x2f

2 years ago

Check out our new blog post! We hacked into Apple Travel Portal (yes, again!) using a 0-day Remote Code Execution exploit. Part 1 is live now, stay tuned for the follow-up on another RCE worth a total bounty of $40k! blog.projectdiscovery.io/hello-lucee-le…

7 112 357 44K 171

AppSecEngineer @AppSecEngineer

2 years ago

Giveaway Alert! 🎁 Here’s your chance to attend our members-only live event on 18th July. One lucky winner will get our Pro Annual subscription priced at $399 for FREE. To enter: 1️⃣ Follow us on Twitter. 2️⃣ Tag a fellow AppSec Enthusiast in the comments. 3️⃣ Retweet this post…

82 89 83 31K 5

Download Image

Travzu @travzu

2 years ago

Travzu, along with travel management, is now your official travel guide. Go and update now!🚀

17 16 48 7K 3

Download Image

Sreeram KL @kl_sree

3 years ago

Write-up about a client-side SSRF that @sivaneshashok and I found in Google Cloud Vertex AI @GoogleVRP blog.geekycat.in/client-side-ss…

4 72 182 21K 65

Jacopo Tediosi @jacopotediosi

3 years ago

I just published a post on Medium about the most relevant vulnerability I have found in my life so far. "Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)": medium.com/@jacopotediosi…

6 92 266 0 76

Holly Brockwell @holly

4 years ago

#HollysMerryMoggies adopts the cats no one wants because they're old, ill or 'imperfect.' We depend on kindness. Make a kitty's day: Donate: paypal.com/paypalme/holly Subscribe: patreon.com/hollysmerrymog… Grant a wish: amazon.co.uk/hz/wishlist/ls… Thank you for loving them with me 🥰

54 386 2K 0 59

Download Image

OWASP® Foundation @owasp

3 years ago

Mark your calendars and join #OWASP for AppSec Training on June 6-8 and our Global AppSec Conference June 9-10. We have an amazing line up of trainers, speakers, keynotes and exhibitors. Take a look at the line up and REGISTER TODAY whova.com/web/GKSmlhCK%2… #globalappseceu