Brute Force @bruteforce_algo
Programmer Joined April 2023-
Tweets195
-
Followers21
-
Following511
-
Likes2K
Here’s my slides from today’s “Regex For Hackers” talk at DEFCON with @NahamSec, bookmark this for some exciting news in the near future docs.google.com/presentation/d…
I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame" is coming to #DEFCON33! This talk will feature multiple new classes of desync attack, mass exploitation spanning multiple CDNs, and over $200k in bug bounties. See you there!
I hacked a popular vibe coding platform with a simple, straight-forward logic flaw - allowing access to private applications . Here’s how I did it 🧵
CSRF ATO using not so known technique of chaining facebook login csrf had made over 11,000$ across programs in 2022 #bugbounty #bugbountytips
How did we (@AmirMSafari) earn $50k using the Punycode technique? I’ve published a detailed blog post about our recent talk, we included 3 attack scenarios, one of which poses a high risk of account takeover on any "Login with GitLab" implementation blog.voorivex.team/puny-code-0-cl…
This #NahamCon2025 talk has generated over $50,000 in bounties for @YShahinzadeh and a few other hackers: Puny-Code, 0-Click Account Takeover. 🎥👉🏼youtu.be/4CCghc7eUgI
Blind SQL injection in JSON 💉 #infosec #cybersec #bugbountytips
💡 Quick Tip! Found a subdomain takeover on a CDN or cloud bucket (S3/Azure)? ❌ Don't stop there! ✅ Always investigate if the main application loads any resources from that subdomain, such as scripts and images. Check the Network tab in your web console and filter by your…
12 #recon tools you NEED to know about! 🧵 Recon, the gathering of information about your target, is becoming more and more important! 🧠 Here are the tools to help you spot subdomains, vhosts, S3 buckets, parameters and more faster and more effective than the others 👇
I made a tool to help test archive (zip/tar) extraction bugs (synk working directory into archive, add path traversals, links, permissions, etc): github.com/avlidienbrunn/…
Today I used a technique that’s probably not widely known in the community. In what cases could code like this lead to a vulnerability? ->
Bug Bounty Tip: Keeping It simple & consistent Over time, I’ve realized that overly complicated automation in bug bounty isn’t as exciting or rewarding—at least not for me. Instead of trying to automate everything under the sun, I’ve found that focused, consistent recon on core…
I’ve noticed that most new folks who reach out for guidance in bug bounty feel overwhelmed early on trying to learn everything at once. That often leads to half-baked knowledge across multiple areas and slower overall progress. Here's what I recommend instead 👇 1/ Pick one…
🚨 PART 2 — ADVANCED BUG BOUNTY RECON PLAYBOOK 🚨 Stealth, Automation & Finding What Others Miss Most hunters STOP at surface recon. This is where REAL MONEY starts. Here’s how to step into the elite 1% → (Stealth + Deep + Automated Recon Blueprint) ⸻ 1️⃣ JS Recon — Extract…
For first time i found a SQL Injection On **sitemap.xml** endpoint 😎😎 #BugBountytips #BugBountytip target[.]com/sitemap.xml?offset=1;SELECT IF((8303>8302),SLEEP(9),2356)# sleep payload [1;SELECT IF((8303>8302),SLEEP(9),2356)#] = 9s Happy Hunting #BugBounty
Do you want to master NoSQL injection vulnerabilities? 😎 Open this thread! 🧵 👇
❌GraphQL introspection disabled? ✅No problem! Extract all GraphQL operations from Javascript files! 1. go install github.com/rashahacks/jsm… 2. Scan the JS URL with -u flag. 🚀View all the GraphQL operations in seconds -- no introspection needed.
Use NextJS? Recon Tip by renniepak A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n')); #infosec #cybersec #bugbountytips
This email domain confusion technique from @garethheyes is so cool! Some really weird behavior can be found between different mail agents and the right characters/symbols 🤔
So many beginners ask what to do after finding subdomains 🧵 1. Do directory search 2. Do Github dork 3. Do google dork 4. FUZZ for params 5. FUZZ for vhosts 6. Find Wayback data (gau, waybackurl) 7. Find javascript files 1/n
Roberta @roberta_say55
184 Followers 3K Following
Dedithe @DeditheeRbw1
16 Followers 1K Following
SnoopGod @snoopgodlinux
1K Followers 2K Following SnoopGod #Linux it is a free #opensource community project with the aim of promoting the culture of #cybersecurity #pentesting and #ethicalhacking
Refactor Security @refactorsec
504 Followers 1K Following Refactor Security is a cyber security company focused on application security and penetration testing.
Stacey @staceymendes69
275 Followers 3K Following
Tunahan TEKEOĞLU @tun4hunt
635 Followers 509 Following 🇹🇷 Senior Cyber Security Consultant | Bug Bounty Hunter
Linda @juarez42linda
277 Followers 3K Following
Annie @f_annie92
167 Followers 3K Following
Maria @maria_lentini13
309 Followers 3K Following
Jeanette @cairone_jeanett
271 Followers 3K Following
Carol @peterson_carol9
1K Followers 3K Following
Mildred @deaton_mildred5
580 Followers 3K Following
Rachel @brock_rachel36
274 Followers 3K Following
Jean @myers_jean21
274 Followers 3K Following
Evelyn @johnson16evelyn
282 Followers 3K Following
Naoyoshi Aikawa @ Rim... @awakia
3K Followers 1K Following Rimo合同会社代表＆ChatGPTプロンプトエンジニア RimoというAI文字起こし/議事録の会社を運営していて、ChatGPTをはじめとした生成AIなどの情報を中心にツイートしてます。 GPTに自分より良いコードを書かれた日にソフトウェアエンジニア名乗るのやめました。 経歴:Google→Wantedly→Rimo
Radcipher @radcipherr
31K Followers 90 Following Smart Contract Security Audits | Shaping the future of the Web3 stack
Claude @claudeai
134K Followers 1 Following Claude is an AI assistant built by @anthropicai to be safe, accurate, and secure. Talk to Claude on https://t.co/ZhTwG8dz3D or download the app.
Priyanshu @priyanshu_xo
2K Followers 662 Following full time bug bounty hunter https://t.co/Z1PExchTcf
Patrik Fehrenbach @ITSecurityguard
31K Followers 285 Following rɪsˈpɒnsəbl dɪsˈkləʊʒə https://t.co/UKFhw5EBwf https://t.co/uCOkOOoNnP
Khoa Dinh @_l0gg
2K Followers 118 Following
nikhil(niks) @niksthehacker
10K Followers 1K Following Founder @BSidesAhmedabad | Speaker @Blackhatmea @defcon | Board of Advisor @riskprofilerio | Legend @synackredteam
Sreeram KL @kl_sree
2K Followers 895 Following Infosec enthusiast! | @googlevrp fan boy 😍 | CTF @thehackerscrew1 | Web Security
Jsmon - jsmon.sh @jsmonsh
708 Followers 21 Following 🔥 JavaScript Security Simplified 🕵️♂️ Monitor, Scan & Detect JS Threats 🚀 Trusted by 2K+ Users | 1M+ JS files 🌐 Start Securing: https://t.co/KAxMTnrEmT
Anthropic @AnthropicAI
646K Followers 35 Following We're an AI safety and research company that builds reliable, interpretable, and steerable AI systems. Talk to our AI assistant @claudeai on https://t.co/FhDI3KQh0n.
Tushar Sharma @tusharSharma_0
1K Followers 231 Following If this weren't for `qwerty` I don't know who I will be |Security Engineer | Bug Bounty Hunter |
⚡🌌🌌teslatheg0... @TeslaTheGod
4K Followers 226 Following Top 80 on https://t.co/FjfGmQxi75 || https://t.co/pPR9UWROQt || Just a Teenage Hacker Spirit || Full Time Bug Hunter since July 2023 || No_DMs
TESS @ArmanSameer95
7K Followers 945 Following Application Security Researcher https://t.co/g0QPLb24tI | https://t.co/XuUMBUWl0x | Most Valuable Hacker 2022 thanks to @bugcrowd | ex @pdiscoveryio
xss0r @xss0r
6K Followers 3K Following xss0r Deploying an alert box in a web app is like having a tiny pop-up comedian shout 'Surprise!' whenever you least expect it! #xss0r #ibrahimXSS #Blindxss0r
LaurieWired @lauriewired
105K Followers 285 Following researcher @google; serial complexity unpacker; https://t.co/Vl1seeNgYK ex @ msft & aerospace
Jonathan Bouman @JonathanBouman
7K Followers 523 Following Medical Doctor (GP) & Security Researcher
Docusaurus @docusaurus
7K Followers 32 Following Build optimized websites quickly, focus on your content. Part of @MetaOpenSource.
【Rimo公式 】会�... @RimoApp
229 Followers 116 Following 『Rimo Voice』-音声をすぐ文字に。AIでカンタン文字起こし。- 会議の議事録や会話の記録、執筆のための取材など、1時間の音声データを5分程度で文字化し、AIが自動で要約、最終成果物まで生成します。日本語特化の独自チューニングで、高速処理・話者分離など高度なAI議事録導入を実現します。
Patrick Collins @PatrickAlphaC
107K Followers 4K Following Co-founder of 🛡️@cyfrinaudits | 🟪 @soloditofficial | 🦅 @codehawks | 🎓 @cyfrinupdraft Building the Web3 we promised.
DeepSeek @deepseek_ai
971K Followers 0 Following Unravel the mystery of AGI with curiosity. Answer the essential question with long-termism.
Developers @XDevelopers
701K Followers 749 Following The voice of the X Dev team and your official source for updates, news, and events, related to the X API.
Meta Bug Bounty @metabugbounty
4K Followers 1 Following Updates & announcements related to Meta Bug Bounty program. If you have found a security vulnerability, we encourage you to let us know ⬇️
Deev Pal @techycodec08
5K Followers 103 Following Security Engineer @ Meta | Ex - SAP | Trying to be a full time Bug Bounty Hunter
pwnii @pwnwithlove
3K Followers 416 Following bug bounty lover, breaking stuff on @yeswehack & worldcuping 🇫🇷 at @Hacker0x01 || organizer of @esnhack, trying to keep hacking underground || CVE-2023-44352
Guhan Raja @havocgwen
1K Followers 580 Following Google VRP Top Researcher | Penetration Tester | OSCP | Bug Bounty Hunter
Open Bug Bounty @openbugbounty
11K Followers 69 Following Verified information about latest vulnerabilities on the most popular websites. Responsible and Coordinated Disclosure. #OpenBugBounty
Anand Prakash @anandpraka_sh
11K Followers 1K Following Founder & CEO, @pingsafeai (Acquired by SentinelOne), Top ranked whitehat hacker on Twitter, Uber, LinkedIn, Meta
Nathan @nj_dav
857 Followers 79 Following I type instructions into computers, which are intermittently understood.
Sharik Khan @4non_Hunter
4K Followers 315 Following A Proud INDIAN 🇮🇳| Bugcrowd Ambassador | Application Security Researcher @bugcrowd | Full time Bug Bounty Hunter |
Muthu D @_anonysm
2K Followers 322 Following Security Analyst | Bug Bounty Hunter | Investor | Book Enthusiast 📚
karkisec @kaks3c
717 Followers 21 Following
Adnan Malik @adnanmalikinfo
2K Followers 173 Following BlackHat Speaker || Cyber Security || AI and LLM Security || @SecurePurple
sandh0t @sandh0t
4K Followers 279 Following Ethical Hacker / Bug Bounty Hunter, At HackerOne, Synack Red Team, and BugCrowd. Certified OSCP. Acknowledge By Facebook, Microsoft, Yahoo, ...
Sachin Thakuri @sachinnthakuri
2K Followers 300 Following Security Engineer @ some tech company | Co-founder @THREAT_CON and @THREATNIX 🤓Hacker by profession.
Swissky @pentest_swissky
20K Followers 1K Following RedTeam | Pentest Author of PayloadsAllTheThings & SSRFmap https://t.co/w1ZLRqoafG
sw33tLie @sw33tLie
10K Followers 917 Following Web application hacker, 25yo. Top 30 @ https://t.co/wX0yr85Tzk https://t.co/ZI7a8oJJcQ https://t.co/LGYK7tMOGo
mr-r00t @_mr_r00t_
75 Followers 33 Following Profesional de ciberseguridad especializado en las áreas de Red Team y Blue Team, análisis de Malware y jugador de CTF, representante de TryHackMe en México.
Trends for United States
You might like
