pwn.ai @pwn_ai
Built to breach. Agentic hacking ecosystem in the works. coming soon. Built by the amazing team @OctagonNetworks pwn.ai New York, USA Joined September 2021-
Tweets100
-
Followers8K
-
Following1
-
Likes234
What we are building is insane. If vendors patched quicker, we would've showed you already. The sort of vulnerabilities pwn.ai is finding is on par with the top security researchers. preauth RCE after preauth RCE fully autonomously. Will drop a blog post soon.
🚨 Octagon Networks has reproduced an unpatched SharePoint zero-day (CVE-2025-53770) now under active attack. Exploits leak MachineKey secrets, letting attackers hijack __VIEWSTATE for persistent code execution. If your SharePoint is exposed online, assume it’s compromised, take…
We hacked @cluely's “Cheat on Everything” tool… and took full control of the cheaters computer. When a cheater uses Cluely, not only are we able to detect they are using Cluely but execute full commands on their computer. ‼️ Watch the full video 👇
This is insane! @Pwndotai has autonomously discovered an unauthenticated remote command execution vulnerability affecting over 70,000 servers. It found the entry point, developed the entire chain, created a proof of concept, iterated through the right issues and entirely on its…
With little help with @pwndotai , which is an agentic hacking ecosystem we are building, we are able to get 1-click RCE in Cluely (@cluely). The exploit takes time to setup but it's straight forward and can be reached via many techniques, and an indirect prompt injection. The…
For the last year and a half we have been secretly working on multiple products that will shake and transform cyber security as we know it. From vulnerability detection, source code audit and penetration testing, to bug bounty and offensive security research. Stay tuned! 🤫
Introducing DoubleClickjacking 🧌: a widespread timing-based vulnerability class that slips between your first & second click — evading modern mitigations leading to account takeover vulnerabilities in almost all major websites. paulosyibelo.com/2024/12/double… #bugbountytips #infosec
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks
Here's a little tip to escalate Client Side Path Traversal (in <script src>) to XSS in wordpress sites; It is possible to use the /wp-json/?_jsonp=<payload> rest-api path to execute arbitrary js functions. Read more at octagon.net/blog/2022/05/2… Credits: @OctagonNetworks https://t.co/n5ykdR0UBQ
You can now bypass CSP on any website that allows https://*.facebook.com in a default or script-src 🔥🌊? PoC: <script src=graph.facebook.com/?id=1337%26cal…></script> Exploitation is only possible using a novel technique we published: octagon.net/blog/2022/05/2… #BugBountytip #BugBounty
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
This CSP bypass technique utilizing SOME attack went under the radar but allowed for a novel way to defeat CSP with only A-z,. characters & windows. Another interesting fact of the specific issue is, WordPress remains vulnerable to this day and affects all WordPress sites (49% of…
CVE-2023-46251: Stored DOM XSS in MyBB < 1.8.37 by using BBCode 🔥: [size='1337px;\">>\<img/src=ccc/ onerror=alert`1`//id=name //&pt;']eviltext[/size] It gets executed within the textbox preview so any user looking at it or editing it will trigger it. Patch asap! #bugbountytip
You can now bypass CSP on any website that allows github.com in a script-src or default-src PoC: <script src=api.github.com/gist/anything?…></script> Despite character limitations, you can use the Same Origin Method Execution technique we shared to get full XSS.…
Can you find the vulnerability here? 10$ reward for first correct answer.
OK, so why does this XSS work? Octagon Networks researchers discovered PHP servers drop any header if the header has "%0D". This means if attacker controls char in header they can remove the header. That is the solution to our latest XSS. The more you know 😉 #bugbountytips
Can you pop alert(1) here? 10$ reward for the first valid solution! 💢🔥 octagon.net/chal/10.php
Solution: 49% of the internet suffer from a 0day CSP bypass because it runs WordPress at a directory or subdomain. Our blog too is WordPress at octagon.net/blog Attackers can utilize a novel CSP bypass technique we discovered to bypass the policy. #bugbountytips…
Solution: 49% of the internet suffer from a 0day CSP bypass because it runs WordPress at a directory or subdomain. Our blog too is WordPress at octagon.net/blog Attackers can utilize a novel CSP bypass technique we discovered to bypass the policy. #bugbountytips… https://t.co/1ASYAOOY09
Md Ismail Šojal �... @0x0SojalSec
30K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
JS0N Haddix @Jhaddix
167K Followers 7K Following CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
InfoSec Community @InfoSecComm
52K Followers 636 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
张惠倩 @momika233
18K Followers 222 Following Anda boleh melakukan segala-galanya dari syurga ke bumi, wanita kecil!! If you have any questions, please contact me https://t.co/MkzsavUU9V
shubs @infosec_au
56K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Nithin 🦹♂️ @thebinarybot
19K Followers 550 Following Heckr | Former Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)
PinkDraconian @PinkDraconian
11K Followers 279 Following ▶️ YouTube: https://t.co/j2KvfZx6Un 💼 LinkedIn: https://t.co/1Ky1Jft7mj
0xSt3li0sD3v @0xSteliosDev
3 Followers 245 Following root@shell:~$ ./break → ./learn | 👾 🎓 - BSc Computing && MSc Cyber Security. Targeting CCNA and A+ for now.
Saad Saeed @saadsaeed1019
36 Followers 2K Following Security researcher in progress | Exploring adversaries & defenses | Aspiring Purple Teamer | Building skills, breaking barriers.
Nightowl @0xfa82
0 Followers 33 Following
Leon 13 @Leon1387453214
3 Followers 44 Following
DishantSehgal @PentesterG
333 Followers 855 Following Hare Krishna | Cehv11 Master | Contributing Security Analyst 🛡️ at @saferinternetpr
Mokhtar Wael @mokhtar0x1
2 Followers 155 Following
mage @haidy_worship
3 Followers 162 Following
HKR PI @HKRPI1
5 Followers 1K Following
Saoud Khalifah @SaoudKhalifah
4K Followers 4K Following Building the future | ex-Founder and CEO, Fakespot (acq'd)
Oxdine @DINESHPrathi12
231 Followers 7K Following #CybersecurityResearcher #Ethical Hacking #Pentester #IoT #CodeReview #WirelessSecurity #Automotive #NatureEnthusiast
Malek🜃 @malikHossny
52 Followers 1K Following Computer Engineering student | Learning Cybersecurity & Bug Bounty Hunting
Gabriel Bernardo @gabrielb_nardo
4 Followers 93 Following
ironquill @WhenOnKStreet
2K Followers 5K Following red team, cats... him/he/y'all. fuck putin. free Palestine.
Arun Christudhas @ArunCDhas
359 Followers 335 Following 🎮 Founder 🏹 Serial Cryptocurrency Investor 🛠️Engineer 🤖 AI Enthusiast, Developer ❓ Ask Me Anything - with me abt life, business & blockchain, AI
hewhounknown @hewhoun
1 Followers 182 Following
PraneethIO @praneethio
23 Followers 97 Following Student of code, builder of tools. Exploring AI, web development, and cybersecurity and sharing the journey.👾
ironheart122 @ironbyte122
374 Followers 1K Following Ethical Hacker | Crypto Enthusiast | CTO @ @breachpeekhq
AYUSH KUMAR SINGH @rootuser0101
0 Followers 45 Following
eric @heyo2222
89 Followers 834 Following
Bumblebee @Lolippop23
182 Followers 2K Following Cybersecurity & AI enthusiast | Offensive Security Learner | Building, breaking & understanding systems | Curious mind
Luiz Fernando @Luizzfernand0
18 Followers 114 Following Se você não está disposto a arriscar, esteja disposto a uma vida comum
Junior Laugthon @JUNIORANTUNIS
327 Followers 5K Following Pecador salvo da penalidade do pecado, pecador sendo salvo do poder do pecado, e um pecador que será salvo da presença do pecado.
John youssef @Johnyou23797829
0 Followers 15 Following
sdf @cbravotech1
1 Followers 173 Following
Aakash @Aak0sh
27 Followers 333 Following
Lov3 @Pow3hi
5 Followers 105 Following CS Student · Cybersecurity & LLMs · First-principles explorer · Tweets ≠ employer
James47 @james47kjv
0 Followers 800 Following
Brendan Dolan-Gavitt @moyix
30K Followers 6K Following Building offsec agents: https://t.co/G9EtnC2Gl3 PGP https://t.co/3WXr0RfRkv
Parzival @LeviTurk
3K Followers 1K Following independent intelligence explosion researcher https://t.co/sqs6UYP9Zs
Eli Rigobeli @elirigobeli
74 Followers 138 Following Falo sobre IA, automações e empreendedorismo digital no YouTube. Mas aqui, coloco de tudo um pouco.
Yannick Boog @YannickBoog
75 Followers 5K Following
indhiravelu @indhiravelu_
9 Followers 330 Following Security Researcher | Bug bounty Hunter | Reverse Engineer
Armando @Angel86223176
27 Followers 817 Following
Tallest person in cyb... @Xerifiedtallest
48 Followers 187 Following No shelf too high but a lot of bars too low. Problem solved/staying solved Speed of thought operations
Danyar @Danyar_00
251 Followers 2K Following
bl00da🦇🔊 (🗿,... @bl00dy1337
611 Followers 5K Following building https://t.co/P993tFvAbO (share sensitive data securely) (https://t.co/XeauDq6n4J)
-M- @0x_saudi
2K Followers 841 Following اللَّهُمَّ اجْعَلْ لَنا مِنْ كُلِّ ضِيقٍ مَخْرَجاً، مِنْ كُلِّ هَمٍّ فَرَجاً، وَمِنْ كُلِّ بَلاَءٍ عَافِيَةً
Chase Fitzgerald @AsymmMeasures
103 Followers 650 Following Research Math | Neuro-Cognitive Warfare | Intelligence https://t.co/fv0KRfwMh0
kentuckyroemers @kentuckyroemers
148 Followers 1K Following NFL, MLB & NBA Sports Team Franchise https://t.co/BUTsZ2zG1Q
Hussein Sherafat @Hussein_Sherafa
234 Followers 6K Following
Octagon Networks @OctagonNetworks
78 Followers 1 Following We are a global company made up of hackers and security researchers working together to tackle advanced vulnerabilities & techniques using AI. Building @pwn_aiTrends for United States
You might like
