Pwnr @pwnx0

Pentester | BBH | CPTS, eWPTx, eCPPT, eMAPT, CAPen, CAPenX, C-APIPen, CMPen-A 404 - Not Found Joined May 2020

Tweets

373
Followers

459
Following

2K
Likes

5K

RootSys @RootSysAt

6 days ago

🚨 Next.js and the Mutated Middleware [CVE-2025-57822] - a powerful SSRF primitive enabling full control over HTTP methods, headers & URLs. See how a subtle middleware bug can result in a high-impact vulnerability: 🔗 blog.rootsys.at/posts/nextjs-a… #AppSec #Nextjs #SSRF

1 46 145 16K 91

Pwnr @pwnx0

16 hours ago

Ever since #ChatGPT started ‘thinking for a better answer’ it actually became much dumber.

0 0 0 43 0

Sudarshana @Sudarshana_io

3 days ago

We just published a new quick read on how we performed LFI via XSS in a PDF generator. #BugBounty #BugBountytips #hackerone #bugcrowd #cybersecurity blog.sudarshana.io/blog/local-fil…

0 14 72 4K 45

The SecOps Group @TheSecOpsGroup

5 days ago

🚨 𝙏𝙝𝙚 𝘾𝙤𝙢𝙢𝙪𝙣𝙞𝙩𝙮 𝘿𝙖𝙮𝙨 𝙎𝘼𝙇𝙀 𝙞𝙨 𝙇𝙄𝙑𝙀! 🚨 ✨ 𝘓𝘪𝘬𝘦, 𝘙𝘦𝘴𝘩𝘢𝘳𝘦 & 𝘛𝘢𝘨 𝘺𝘰𝘶𝘳 𝘱𝘢𝘭𝘴 🎁 3 𝘓𝘶𝘤𝘬𝘺 𝘞𝘪𝘯𝘯𝘦𝘳𝘴 𝘸𝘪𝘭𝘭 𝘨𝘦𝘵 𝘢 𝘍𝘙𝘌𝘌 𝘴𝘦𝘢𝘵 𝘰𝘧 𝘵𝘩𝘦 𝘦𝘹𝘢𝘮 𝘰𝘧 𝘵𝘩𝘦𝘪𝘳 𝘤𝘩𝘰𝘪𝘤𝘦! At 𝗧𝗵𝗲 𝗦𝗲𝗰𝗢𝗽𝘀 𝗚𝗿𝗼𝘂𝗽, we…

11 18 35 2K 12

Download Image

The SecOps Group @TheSecOpsGroup

a week ago

🌍 𝗜𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗶𝗻𝗴 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆 𝗗𝗮𝘆𝘀 𝗯𝘆 𝗧𝗵𝗲 𝗦𝗲𝗰𝗢𝗽𝘀 𝗚𝗿𝗼𝘂𝗽 🌍 ✨ 𝘓𝘪𝘬𝘦 & 𝘙𝘦𝘴𝘩𝘢𝘳𝘦 𝘵𝘩𝘪𝘴 𝘱𝘰𝘴𝘵 🎁 5 𝘓𝘶𝘤𝘬𝘺 𝘞𝘪𝘯𝘯𝘦𝘳𝘴 𝘸𝘪𝘭𝘭 𝘨𝘦𝘵 𝘢 𝘍𝘙𝘌𝘌 𝘴𝘦𝘢𝘵! At The SecOps Group, we’ve always believed that cybersecurity skills…

8 33 67 3K 17

Download Image

Dirk-jan @_dirkjan

a week ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 894 3K 432K 1K

Laluka@OffenSkill @TheLaluka

3 years ago

For all non-french speakers out there, I finally found the time to write the article associated to "1001 ways to PWN prod!" ^.^ thinkloveshare.com/hacking/1001_w… For all those that welcomed this talk so well - cc @clintgibler @absoluteappsec @yeswehack @intigriti @chybeta @ManoMano_Tech

6 95 261 0 92

Download Image

عبدالله الرشيدي @3bdullaM9

a month ago

مقاله لطيفه 👌: شخص حصل على المركز الاول في CTF Bug Bounty Village في ديفكون وكتب مقالة عن التحديات : shubhamchaskar.com/defcon-bbv-ctf/

0 8 72 3K 54

Joseph Thacker @rez0__

a month ago

What’s the shortest possible domain that can be used for XSS/SSRF payloads when hacking/bug hunting? I think it’s something like: ⒉ﬆ And it’s available to register actually 😳 read more in my latest blog post. Link below.

5 14 126 11K 88

Download Image

zere @j_zere

a month ago

Just published my first blog post "Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover" You can read the full write-up here: zere.es/posts/cache-de…

27 129 535 37K 408

André Baptista @0xacb

2 months ago

Just released a new recollapse version thanks to @ryancbarnett and @4ng3lhacker after their talk in @BlackHatEvents today. What’s new? 💥Mode 6: Fuzz case folding/upper/lower 💥 Mode 7: Fuzz byte truncations 💥 Recollapse is now available to use as a python library and…

5 76 378 16K 264

Download Video

PortSwigger @PortSwigger

2 months ago

🚨New Black Hat research released: Over $200k in bounties earned in just two weeks. Join the movement to kill HTTP/1.1 today ⬇️ 🔍PortSwigger’s James Kettle (@albinowax) introduces two new classes of HTTP desync attacks capable of compromising credentials on tens of millions of…

6 34 166 18K 58

Download Image

Paweł Hałdrzyński @phaldrzynski

2 months ago

Nice trick showing that the very same zip can be seen differently by two different programs. I've examined how this quirk could help us in zip path traversal attacks: blog.isec.pl/disguises-zip-…

Gynvael Coldwind @gynvael

3 months ago

Nice trick showing that the very same zip can be seen differently by two different programs. I've examined how this quirk could help us in zip path traversal attacks: blog.isec.pl/disguises-zip-…

1 25 105 24K 76

Download Image

0 25 85 11K 67

Soroush Dalili @irsdl

3 years ago

#ASPNET web form tip when bypassing certain WAF rules using #COOKIELESS: ✔️WAF blocks `/admin/main.aspx` ✔️WAF uses canonicalization & not case sensitive Possible bypasses: 🍪/admin/(S(X))/main.aspx 🍪/admin/Foobar/(S(X))/../(S(X))/main.aspx 🍪/(S(X))/admin/(S(X))/main.aspx

5 32 121 10K 55

H’s mom @aiishadahir

2 months ago

Calm your heart, it’s just the dunya

7 4K 14K 353K 713

Download Image

d3d aka dead (dead, мёртв, 死了) @deadvolvo

2 months ago

blog.malicious.group/the-quiet-side… This is a living document at the moment, but here it is for now. 😅As mentioned in the paper, if you are a researcher and have questions after reading, just reach out to me and I will answer everything I can.

9 64 238 19K 195

Mateo Hanžek @h4nsmach1ne

2 months ago

Sharing a mini technique, useful to increase chances of scoring a successful CSRF attack in JSON endpoints, such as GraphQL or REST APIs. Enjoy! h4nsmach1ne.blogspot.com/2025/07/csrf-i…

3 12 69 4K 63

Mustafa Can İPEKÇİ @mcipekci

2 months ago

During a recent pentest, the target had an SQL injection vulnerability but was behind a WAF. Standard payloads using LIKE, =, IN, etc., were blocked, preventing exploitation. As the target used PostgreSQL, I bypassed this using the ~ operator, unique to PostgreSQL. The…

2 32 164 10K 93

/r/netsec @_r_netsec

2 months ago

FortiWeb Pre-Auth RCE (CVE-2025-25257) pwner.gg/blog/2025-07-1…

1 19 69 6K 30

Douglas Day @ArchAngelDDay

6 months ago

There's ALWAYS a bug. Always. The app that everyone & their mom uses? The one that's owned by Megacorp X/Y/Z/whatever? Littered with bugs. The app being developed by engineers making $500k+/yr? Crawling with bugs. The app that's been through 30 pentests? Bugs. Go find them.