pwn.ai @pwn_ai
Built to breach. Agentic hacking ecosystem in the works. coming soon. Built by the amazing team @OctagonNetworks pwn.ai New York, USA Joined September 2021-
Tweets100
-
Followers8K
-
Following1
-
Likes235
What we are building is insane. If vendors patched quicker, we would've showed you already. The sort of vulnerabilities pwn.ai is finding is on par with the top security researchers. preauth RCE after preauth RCE fully autonomously. Will drop a blog post soon.
🚨 Octagon Networks has reproduced an unpatched SharePoint zero-day (CVE-2025-53770) now under active attack. Exploits leak MachineKey secrets, letting attackers hijack __VIEWSTATE for persistent code execution. If your SharePoint is exposed online, assume it’s compromised, take…
We hacked @cluely's “Cheat on Everything” tool… and took full control of the cheaters computer. When a cheater uses Cluely, not only are we able to detect they are using Cluely but execute full commands on their computer. ‼️ Watch the full video 👇
This is insane! @Pwndotai has autonomously discovered an unauthenticated remote command execution vulnerability affecting over 70,000 servers. It found the entry point, developed the entire chain, created a proof of concept, iterated through the right issues and entirely on its…
With little help with @pwndotai , which is an agentic hacking ecosystem we are building, we are able to get 1-click RCE in Cluely (@cluely). The exploit takes time to setup but it's straight forward and can be reached via many techniques, and an indirect prompt injection. The…
For the last year and a half we have been secretly working on multiple products that will shake and transform cyber security as we know it. From vulnerability detection, source code audit and penetration testing, to bug bounty and offensive security research. Stay tuned! 🤫
Introducing DoubleClickjacking 🧌: a widespread timing-based vulnerability class that slips between your first & second click — evading modern mitigations leading to account takeover vulnerabilities in almost all major websites. paulosyibelo.com/2024/12/double… #bugbountytips #infosec
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks https://t.co/n5ykdR0UBQ
You can now bypass CSP on any website that allows https://*.facebook.com in a default or script-src 🔥🌊? PoC: <script src=graph.facebook.com/?id=1337%26cal…></script> Exploitation is only possible using a novel technique we published: octagon.net/blog/2022/05/2… #BugBountytip #BugBounty
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
CVE-2023-46251: Stored DOM XSS in MyBB < 1.8.37 by using BBCode 🔥: [size='1337px;\">>\<img/src=ccc/ onerror=alert`1`//id=name //&pt;']eviltext[/size] It gets executed within the textbox preview so any user looking at it or editing it will trigger it. Patch asap! #bugbountytip
You can now bypass CSP on any website that allows github.com in a script-src or default-src PoC: <script src=api.github.com/gist/anything?…></script> Despite character limitations, you can use the Same Origin Method Execution technique we shared to get full XSS.…
Can you find the vulnerability here? 10$ reward for first correct answer.
OK, so why does this XSS work? Octagon Networks researchers discovered PHP servers drop any header if the header has "%0D". This means if attacker controls char in header they can remove the header. That is the solution to our latest XSS. The more you know 😉 #bugbountytips
Can you pop alert(1) here? 10$ reward for the first valid solution! 💢🔥 octagon.net/chal/10.php
Solution: 49% of the internet suffer from a 0day CSP bypass because it runs WordPress at a directory or subdomain. Our blog too is WordPress at octagon.net/blog Attackers can utilize a novel CSP bypass technique we discovered to bypass the policy. #bugbountytips…
Solution: 49% of the internet suffer from a 0day CSP bypass because it runs WordPress at a directory or subdomain. Our blog too is WordPress at octagon.net/blog Attackers can utilize a novel CSP bypass technique we discovered to bypass the policy. #bugbountytips… https://t.co/1ASYAOOY09
Md Ismail Šojal �... @0x0SojalSec
31K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
JS0N Haddix @Jhaddix
167K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
InfoSec Community @InfoSecComm
52K Followers 635 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
张惠倩 @momika233
18K Followers 222 Following Anda boleh melakukan segala-galanya dari syurga ke bumi, wanita kecil!! If you have any questions, please contact me https://t.co/MkzsavUU9V
shubs @infosec_au
56K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Nithin 🦹♂️ @thebinarybot
19K Followers 554 Following Heckr | Former Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)
PinkDraconian @PinkDraconian
11K Followers 276 Following ▶️ YouTube: https://t.co/j2KvfZx6Un 💼 LinkedIn: https://t.co/1Ky1Jft7mj
Dwoieteen @Dwoieteen9249
13 Followers 842 Following
Ravi Kumar Mahaur @ravikar6
14 Followers 482 Following
NIKITA ROY @NIKITAROY648555
76 Followers 2K Following
Marks Hvezenko @MarksH67952
0 Followers 30 Following
sill @2m7m0
0 Followers 1K Following
Andrews Felipe @FelipeAndrewz
0 Followers 47 Following
Benhur Tekeste @TekesteBenhur
2 Followers 463 Following
J. @d4rkS0ld13r
50 Followers 2K Following
. @Mohamme2607526
2 Followers 110 Following
Lorena Pérez @LorenaP36345299
2 Followers 49 Following
Lindsay Robibero @Linztenn
24 Followers 591 Following
andrew @PurpleTeamLead
109 Followers 336 Following Seeking alpha {cybersecurity advocate} {DeFi enthusiast} {software dev}
Saad Saeed @saadsaeed1019
33 Followers 2K Following Security researcher in progress | Exploring adversaries & defenses | Aspiring Purple Teamer | Building skills, breaking barriers.
Nightowl @0xfa82
0 Followers 34 Following
Leon 13 @Leon1387453214
3 Followers 45 Following
DishantSehgal @PentesterG
333 Followers 855 Following Hare Krishna | Cehv11 Master | Contributing Security Analyst 🛡️ at @saferinternetpr
Mokhtar Wael @mokhtar0x1
2 Followers 162 Following
HKR PI @HKRPI1
8 Followers 1K Following
Oxdine @DINESHPrathi12
228 Followers 7K Following #CybersecurityResearcher #Ethical Hacking #Pentester #IoT #CodeReview #WirelessSecurity #Automotive #NatureEnthusiast
Malek🜃 @malikHossny
55 Followers 1K Following Computer Engineering student | Learning Cybersecurity & Bug Bounty Hunting
Gabriel Bernardo @gabrielb_nardo
4 Followers 91 Following
k strizzle @WhenOnKStreet
2K Followers 5K Following red team, web app security, digital archaeology, cats... him/he/y'all. fuck putin. free Palestine. ANTI- FASCIST AF.
Arun Christudhas @ArunCDhas
361 Followers 334 Following 🎮 Founder 🏹 Serial Cryptocurrency Investor 🛠️Engineer 🤖 AI Enthusiast, Developer ❓ Ask Me Anything - with me abt life, business & blockchain, AI
hewhounknown @hewhoun
1 Followers 181 Following
PraneethIO @praneethio
21 Followers 102 Following Student of code, builder of tools. Exploring AI, web development, and cybersecurity and sharing the journey.👾
ironheart122 @ironbyte122
422 Followers 1K Following Ethical Hacker | Crypto Enthusiast | CTO @ Stealth Startup #5
AYUSH KUMAR SINGH @rootuser0101
0 Followers 44 Following
eric @heyo2222
87 Followers 875 Following
Bumblebee @Lolippop23
179 Followers 2K Following Cybersecurity & AI enthusiast | Offensive Security Learner | Building, breaking & understanding systems | Curious mind
Luiz Fernando @Luizzfernand0
17 Followers 114 Following Se você não está disposto a arriscar, esteja disposto a uma vida comum
Junior Laugthon @JUNIORANTUNIS
327 Followers 5K Following Pecador salvo da penalidade do pecado, pecador sendo salvo do poder do pecado, e um pecador que será salvo da presença do pecado.
John youssef @Johnyou23797829
0 Followers 16 Following
sdf @cbravotech1
0 Followers 173 Following
Aakash @Aak0sh
28 Followers 338 Following
Octagon Networks @OctagonNetworks
80 Followers 1 Following We are a global company made up of hackers and security researchers working together to tackle advanced vulnerabilities & techniques using AI. Building @pwn_aiTrends for United States
You might like
