rootzest @rootzest
Subang, Indonesia Joined July 2024-
Tweets65
-
Followers4
-
Following12
-
Likes124
PHP2Shell: toolkit de investigación para CVE-2026-109618/109619. RCE pre-auth en session.upload_progress de PHP (mod_php). 5 builds verificados · 13 perfiles · labs · calibración · detección. Solo testing autorizado. github.com/devploit/php2s…
github.com/9bie/php2shell… 确实牛逼，没错这个就是真的exp了
php2shell poc CVE-2026-109618 CVE-2026-109619 Qi 哥的 poc 已经安排上了：github.com/ikow/php2shell… 你的 Agent 发力了吗？
Redirector for SSRF Most filters only check the first URL. Redirects slip right past them. brutelogic.net/r 600+ payloads in 4 categories, easy to automate.
@d3vc0r3 @orange_8361 This dude is inhuman bro💀
Pure sorcery | vercel.com/blog/findings-… @PaulosYibelo
Google paid me $90,000 for this RCE simonkoeck.com/writeups/googl…
How @brutecat 's scored $500k with AI (video version) youtu.be/rVpfPyF7Teg
와우 버그헌팅 연구하는 사람들에게 최고의 사이트네요!! 굿. webhacklist.com/?year=2026-ai#…
🎓 Breaking into Google's GFile for $100k Writeup: bughunters.google.com/blog/breaking-… Author: Arvin Shivram
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
@GodfatherOrwa Mb, is already there in the URLs
@GodfatherOrwa Where is the part of the Google apiKey used in that curl request?
We're back, analyzing CVE-2026-21589 - an Arbitrary File Read vulnerability in Atlassian Jira, Confluence, BitBucket and more... Enjoy! labs.watchtowr.com/you-wont-hear-…
This scrappy setup got him 10+ account takeovers on the same program 👇🏼
Blog post about From header smuggling in Apple iCloud just dropped. Sending emails as [email protected], exotic parsing, and a $15,000 bounty. sec-consult.com/blog/detail/fr…
It's Steiner254 @Steiner254
6K Followers 1K Following Penetration Testing | Application Security (Mobile, Web, APIs) | Reverse Engineering | Zero Day Researcher | Bug Bounty Hunter 🙂 | Bug Bounty Triage ... e.t.c
NXR🇮🇩 @_nnxxrr_
1K Followers 608 Following
RyotaK @ryotkak
12K Followers 653 Following Security researcher? | Icon: @MelvilleTw | Private: @RyotaK_Private | Misskey: https://t.co/63E5Rpv2pk | Blog: https://t.co/c7NFQXhV90
zseano @zseano
83K Followers 722 Following rebuilding https://t.co/oFH3BQm9YZ and creating zseano methodology v2. *COMING SOON!!* ex full time amazon hacker 2018-2026 🫡
. @696e746c6f6c
5K Followers 129 Following 20yo SWE student, breaking things for fun & bounty https://t.co/RNojxpen4f
Google VRP (Google Bu... @GoogleVRP
44K Followers 0 Following We ❤️ 🐜🐞🦗🦟🦋. {echo,{{{Google,Chrome,Android,Abuse,Mobile,OSS,Cloud}Vulnerability,Patch}Reward,VulnerabilityResearchGrants}Program}
Jeremy Kritz @JeremyKritz
980 Followers 2K Following Safety Researcher / Red Teaming @meta MSL. ex-Scale. Mostly harmless. NYC.
Bug Bounty Reports Ex... @gregxsunday
56K Followers 626 Following Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.
Godfather Orwa 🇯�... @GodfatherOrwa
28K Followers 2K Following Hacker | Bug Hunter | Cooker | Top 5 P1 Warrior On https://t.co/dzFQH75OWj | LevelUpX Champion | 10+ 0Days/CVEs
Awesome Google VRP Wr... @gvrp_writeups
3K Followers 1 Following Automatically tweeting new writeups from the GitHub repository "awesome-google-vrp-writeups".
Renwa @RenwaX23
10K Followers 65 FollowingTrends for United States
You might like
