RootSploit @rootsploit

Tweets

753
Followers

1K
Following

830
Likes

2K

𝚑𝚎𝚗𝚔 𝚟𝚊𝚗 𝚎𝚜𝚜 @henkvaness

a month ago

ChatGPT quietly scrubbed today nearly 50,000 shared conversations from Google's index after our investigation. They thought they'd solved the problem. They were wrong. (1/5)

212 3K 18K 2.3M 8K

Download Image

RootSploit @rootsploit

3 months ago

Recently I collaborated with @rtvkiz to explore Bug bounty in automobile space, it was definitely an interesting hunt we recently did.

Ritvik Arya @rtvkiz

3 months ago

Recently I collaborated with @rtvkiz to explore Bug bounty in automobile space, it was definitely an interesting hunt we recently did.

2 6 46 5K 23

0 0 2 133 1

Bug Bounty Village @BugBountyDEFCON

5 months ago

Ever run an exploit in the wrong path? AI has too In this demo, @niemand_sec & @djurado9 show their agent (@Xbow) debugging itself, fixing dependencies, tweaking payloads and eventually logging in as admin — autonomously. Full talk → youtu.be/YDsHI2acEVA #BugBounty #DEFCON

0 6 34 3K 14

Download Video

The Bug Bounty Hunter @tbbhunter

5 months ago

MCP Security Notification: Tool Poisoning Attacks invariantlabs.ai/blog/mcp-secur…

0 5 7 866 4

jian @jianxliao

6 months ago

So... I just simply asked Manus to give me the files at "/opt/.manus/", and it just gave it to me, their sandbox runtime code... > it's claude sonnet > it's claude sonnet with 29 tools > it's claude sonnet without multi-agent > it uses @browser_use > browser_use code was…

226 800 7K 2.6M 7K

Download Video

RootSploit @rootsploit

6 months ago

github.com/BountySecurity…

0 0 0 89 1

Rithwik (is in SF) @thel3l

10 months ago

Apple released a hearing aids feature for the AirPods Pro a while ago. I bought a pair for grandma, but then realized that the feature was geoblocked in India So we at @_lagrangepoint decided to unblock it. It ended up involving a leaky microwave and building a Faraday cage:

385 2K 18K 1.8M 5K

Download Image

Alexander Mia @arekusandr_

a year ago

INTRODUCING: Agentic Security - LLM Security Scanner! 🔍 🔑 Features: Scans for prompt injections, jailbreaking & more. Provides detailed reports & options to customize attack rules. 🔗access the GitHub Link ↓

5 16 175 599K 159

Kyser Clark - Cybersecurity @KyserClark

11 months ago

🎙️ New episode of The Hacker's Cache #Podcast is LIVE! 🔥 Ever wondered how to become a #BugBounty hunter or what it’s like being an #OffensiveSecurity pro at a Fortune 500 company? We’ve got you covered in Ep. 17 with @rootsploit! Watch now! youtu.be/8VbZ-iLt8W4 #InfoSec

0 1 1 112 0

Download Image

ZachXBT @zachxbt

12 months ago

1/ An investigation into how Greavys (Malone Iam), Wiz (Veer Chetal), and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen.

3K 7K 39K 11.8M 13K

Download Image

Haseeb ＞|＜ @hosseeb

12 months ago

Fucking wild. @OpenAI's new o1 model was tested with a Capture The Flag (CTF) cybersecurity challenge. But the Docker container containing the test was misconfigured, causing the CTF to crash. Instead of giving up, o1 decided to just hack the container to grab the flag inside.…

226 931 8K 1.2M 3K

Download Image

Bug Bounty Village @BugBountyDEFCON

a year ago

We're excited to announce one of our giveaways thanks to "@CaidoIO" 🎉 We will pick 5 winners to win a 1-year Caido Pro license! To enter: 1️⃣ Follow us @BugBountyDEFCON and @CaidoIO 2️⃣ Like this post ❤️ 3️⃣ Retweet this post 🔁 You have time to participate until Friday (9/13)!

51 379 497 41K 23

Ian Carroll @iangcarroll

a year ago

In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found. Here is our writeup: ian.sh/tsa

52 652 2K 187K 607

Florian Roth ⚡️ @cyb3rops

a year ago

A POC for CVE-2024-38063 (RCE in tcpip.sys / IPv6) github.com/ynwarcs/CVE-20…

4 67 209 30K 89

Mantas Sabeckis @ott3rly

a year ago

x.com/i/article/1799…

6 35 200 19K 207

Inti De Ceukelaire @intidc

a year ago

Here is the full blogpost: inti.io/p/when-privacy…

4 20 115 13K 27

Dark Web Informer @DarkWebInformer

a year ago

🚨#BREAKING🚨Notorious threat actor, @InteIBroker, is selling access to a large Cybersecurity company. Price: $20,000. Details below. #DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI Revenue: $1.8 Billion Access includes: - Confidential and highly…

23 75 339 400K 175

Download Image

Justin Gardner @Rhynorater

a year ago

Can I just say @PaulosYibelo has been dropping some bangers lately. We'll mention them on the pod this upcoming Thursday, but both of these client-side techniques are really innovative and sick: paulosyibelo.com/2024/02/cross-… octagon.net/blog/2022/05/2…