Mahmoud Omar @furiouskernel
Joined March 2025-
Tweets42
-
Followers2
-
Following348
-
Likes298
New writeup hope you like it ❤️ A simple idea.... furiouskernel.medium.com/account-takeov…
I earned $1000 for my submission on @Bugcrowd #ItTakesACrowd #bugbounty Tip: If a site generates a custom PDF using user input, test for HTML injection. If it works, try SSRF via an iframe to read metadata files: <iframe src="http://169.254.169.254/latest/meta-data/"></iframe>
Just got a bounty on @StandoffBB for a logic bug 🤩 One of the best platforms ever!
Happy to have contributed to secure @komoot The bug is now fixed by the security team 💪 >> Try to bypass 403 endpoints with URL encoding like: %2e → . %2f → / %5c → \ %20 → space %09 → horizontal tab %0a, %0d → line feed, carriage return thunderforest.com/about/security/
How do we turn bad SSRF (blind) into good SSRF (full response)? The @assetnote Security Research team at @SLCyberSec used a novel technique involving HTTP redirect loops and incremental status codes that leaked the full HTTP resp. It may work elsewhere! slcyber.io/assetnote-secu…
Think you've found an RCE? Use the `time` command with cURL and a `sleep 5` payload to see how long the server takes to respond. If it takes longer than 5 seconds then may have confirmed an RCE! 🚀
Real Human Hacker vs AI Agent Hacker
Hi, I need your help but couldnt contact you in message here. How can I contact you? I found this bug and the team sent me this... @coffinxp7
🧠 Session Fixation → Account Takeover 1️⃣ Attacker sets a known session ID (via link, cookie, etc.) 2️⃣ Victim logs in — app accepts attacker’s session ID 3️⃣ Session remains valid after login 4️⃣ Attacker uses same ID to hijack the account 🎯 Full session takeover #bugbounty
APPLE XSS Vulnerability 🔍 Stored XSS vulnerability discovered in an Apple web service — PoC, full breakdown, and disclosure process included. 📺 youtu.be/9fkEH78n2c4 #BugBounty #XSS #CyberSecurity #Apple
🧠 WAF Bypass via Path Normalization (LFI/RFI) 1️⃣ WAF blocks direct access to /etc/passwd 2️⃣ Attacker sends: /././etc/passwd, /..%2fetc/passwd, or /etc/./passwd 3️⃣ Server normalizes path before processing 4️⃣ WAF doesn’t decode → bypass! 🎯 Filters fooled, exploited #bugbounty
How did we (@AmirMSafari) earn $50k using the Punycode technique? I’ve published a detailed blog post about our recent talk, we included 3 attack scenarios, one of which poses a high risk of account takeover on any "Login with GitLab" implementation blog.voorivex.team/puny-code-0-cl…
We have established a volunteer-based cybersecurity organization with no financial gain.(1 jun 2025) We’re share posts to inform and educate people. We see the rewards of our efforts. An example of this is @coffinxp7 following us. Thank you..:) ❤️ #cybersecurity #bugbounty
Findsomething extension it’s give more than amazing results just in 1 press Keep it running and I assure you , it will save a lot of work for you / find some sensitive keys so quick chromewebstore.google.com/detail/findsom… #bugbounty #bugbountytip #bugbountytips
An interesting XSS. reflected and blind. Hope you like my writeup :D furiouskernel.medium.com/reflected-and-…
Microsoft patched the issue just days after my report. super fast response! They've now released an updated version: Grafana v12.0.0 (MSAP-Build)
Microsoft patched the issue just days after my report. super fast response! They've now released an updated version: Grafana v12.0.0 (MSAP-Build) https://t.co/PXZHbZ8OVa
Happy to have contributed to secure @UNLincoln
Hi all, is it normal to have a report under review for 3 months? @yeswehack
G. Takopoulos @be7se_Cool
140 Followers 1K Following Spotlighting Web3’s top Security Researchers & their achievements. Aspiring to join them. Follow to stay in the loop. 🚀
Iceman @herrmann1001
8K Followers 1K Following RFID hacker, Proxmark, NFC & EMV | Magic moon beans | Four spaces instead of Tab | https://t.co/A6rzUPpPs6 https://t.co/dZD52FgCaL
Gospel @4osp3l
16K Followers 7K Following Offensive Security | Christain | Bug Bounty Hunter | Vulnerability Researcher | 0x19 | Pentester | WoT
Who Am I ? 🇪🇬 �... @19whoami19
3K Followers 732 Following Penetration Tester and Bug Bounty Hunter since 2023 with 70+ Halls of Fame
0x6c75696a616974 @luijait_
19K Followers 1K Following Apasionado de la tecnología desde corta edad | AI researcher | cybersecurity | PERSONAL ACCOUNT AND OPINION RL
Aditi Singh @aditi_singghh
13K Followers 732 Following Bug Bounty Hunter | Cyber security Researcher
Mahmoud. @mahmoudwaelali
8K Followers 335 Following Official Twitter account of the Egyptian Prodigy Mahmoud Wael | Instagram: mahmoudwaelali | Blue is the color. Chelsea FC.
MrBeast @MrBeast
33.2M Followers 2K Following DONATE TO TEAMWATER $1 IS 1 YEAR OF CLEAN WATER FOR SOMEONE IN NEED!
Mustafa Can İPEKÇİ @mcipekci
8K Followers 427 Following I'm an engineer from Turkey, who is interested with biotechnology, computer science and digital gaming. Proud father of three little devils. A.K.A nukedx
Nick Mykhailyshyn �... @whoareme33
569 Followers 735 Following Security Reseacher and Software Engineer
Amr Elsagaei @amrelsagaei
881 Followers 99 Following Hacker & Security Researcher | Creator of AmrSec - Breaking things for a living — sometimes filming it too
Dark Web Informer @DarkWebInformer
129K Followers 60 Following Providing Cyber Threat Intelligence from the Dark Web & Clearnet: Breaches, Ransomware, Darknet Markets, Threat Alerts & more. https://t.co/Fi7VW9lg94
/ˈziːf-kɒn/ @x33fcon
7K Followers 1 Following When Red meets Blue... The very first security conference for Purple Teams on the planet
Reeboot_to_init5 @ReebootToInit5
4K Followers 327 Following Just another NooB Hacker🫡 Hakuna Matata ☠️ quite unapologetic when it comes to my country and religion
Arshad Kazmi @arshadkazmi42
2K Followers 389 Following 🔍 https://t.co/y9nGPrujbt | 🕵️ https://t.co/Nz4OeuRYu5 | https://t.co/I4vk04GP2P | https://t.co/cfGDVsjRYF | https://t.co/4ewaqt7N23
Hack3rScr0lls @hackerscrolls
10K Followers 57 Following for hackers by hackers Contact: [email protected]
root@AkashHamal0x01:~... @AkashHamal0x01
9K Followers 713 Following Solo | https://t.co/I6KH8WN8nm | Community Helper 🤝| WebApp Security 🐞 | Avid Learner 📖 | Male | Father of One | Married 💍 Asia❤️ . wiener/peter
Mantas Sabeckis @ott3rly
6K Followers 333 Following Bug Bounty Hunger. Helping people to score bounties 💰
Standoff Bug Bounty @StandoffBB
1K Followers 11 Following Welcome to Standoff Bug Bounty — where hackers and businesses join forces, and everyone wins. Start the hunt 👇
WifiRumHam @WifiRumHam
2K Followers 1K Following Why not RumHam? https://t.co/g137QVijhq Azure/Sentinel PHISHING,OSINT. FORENSICS Dont mistake my generosity for generosity
Mr. Wise @MrWise3099
251 Followers 19 Following Bugbounty Hunter | Hacker @Sudarshana_io | Digital/Performance Marketer | Graphic Designer
Cubed @Cubed_h1
2K Followers 347 Following Career in hacking into stuff on https://t.co/9wUU4HbNMO | Security Researcher @hacker0x01. Half 🇷🇴 and half 🇪🇬
Security BSides Ahmed... @bsidesahmedabad
9K Followers 881 Following Official Account of Security BSides Ahmedabad, India; 6th Edition: 12-13 SEPTEMBER 2025📢🗓️
Abdullah Nawaf (Hacke... @XHackerx007
8K Followers 414 Following Hackerx007 Bug hunter FB/Twitter/Mail.ru HOF 41 Bugcrowd rank 11 Bugcrowd P1 rank with 226 p1 :) In love with P1 ;)
Ashraf Basyoni @AshrafBasyoni4
1K Followers 747 Following وَاجْعَلَنِي اللهم مِمّنْ يمر كريماً بلا ضررٍ طيب الذِكْرِ وطيب الأثَرِ
Safia Ahmed @r0s37
2K Followers 849 Following Independent Security Researcher. Bug Bounty 💗 If any organization need to test their project Ping Me.
Kartikey Verma @KartikeyStack
8K Followers 751 Following Developer shipping at warp speed⚡ prev-@warmwind_OS, @SenditMarkets
h0rus3c @h0rus3c
2K Followers 302 Following Bug Bounty Hunter | https://t.co/S37ltY49Je | https://t.co/ZLNFNYJPYa | https://t.co/ONCmVgCTEa
Damian Player @damianbplayer
22K Followers 610 Following founder https://t.co/xWnJoHXr06 || helping non-tech people start ai agencies || ai agents for business.
Mahmoud Hamed @7odamoo
4K Followers 679 Following
Muhammad Daffa @daffainfo
2K Followers 490 Following My opinions are my own | Vulnerability Researcher @ spiderSilk | CTF Player @ HCS and L3ak
PentesterLand @PentesterLandEn
3K Followers 73 Following WNMC Penetration Tester RedTeamer BugHunter Instagram: PentesterLand
⚡🌌🌌teslatheg0... @TeslaTheGod
4K Followers 228 Following Top 90 on https://t.co/FjfGmQxi75 || https://t.co/pPR9UWROQt || Just a Teenage Hacker Spirit || Full Time Bug Hunter since July 2023 || No_DMs
David Bombal @davidbombal
170K Followers 690 Following YouTube: https://t.co/xGPVEj6ULN Discord: https://t.co/GZI30F45va Website: https://t.co/MpcS9ylBrV
PentesterLab @PentesterLab
190K Followers 0 Following We make learning web hacking and security easier. Online systems, code review, videos & courses that can be used to understand, test and exploit bugs!
mhmd berro (badcracke... @badcrack3r
7K Followers 373 Following 22 Years old. Researcher at hackerone. Known as badcracker. Listed at more than 100 companies hacker's hall of fame.
Aptos @Aptos
667K Followers 402 Following Aptos is the layer 1 blockchain engineered to evolve. Make Your Move on Aptos 🌐 Twitter by Aptos Foundation.
ETHWarsaw 🧜♀�... @ETHWarsaw
7K Followers 364 Following Ethereum in Poland 🇵🇱 | All year round builder events, meetups & gatherings | Kolektyw3 Community Hub | Builders, dreamers & mermaids 🧜♀️
AbuMuslim (أبومُ... @m19o__
8K Followers 2K Following Just another OffSec geek. Speaker at Black Hat, IEEE, BSides & RE:HACK. Organizer of BSidesABQ & OWASPCairo. Building @CyberDose_
Ryan Barnett (B0N3) @ryancbarnett
5K Followers 401 Following Web App Defender | Bug Hunter/Triager | Purple Team | Detection Engineering | Author | Senior Threat Research Manager @Akamai_research | OWASP Project Leader ✝️
SickSec 🇲🇦 🇵... @OriginalSicksec
8K Followers 381 Following I love GraphQL | Hackerone Ambassador 🇲🇦 | Tweets are my own | Riichi #Mahjong Player Master Tier | see https://t.co/hqRuoXEQH3 before DM :)
Traceix @usetraceix
17K Followers 417 Following Correlate binaries by behavior | Demo: https://t.co/elkZk1VrrC | Discord: https://t.co/jcZBvfLOic | Product of Revix Labs LLCTrends for United States
You might like
