turb0

🙈

@Rhynorater Very true. I nominated it and voted for it when it made the nomination list but it still remains slept on.

This really should have been in the top 10 web hacking techniques of 2025: adragos.ro/fontleak/

Reviewed another very creative piece of research by the @StarstrikeAI team and am sharing another demo tape. Probably going to be a bit of pause due to travel before reaching episode 0 as I work through feedback and refine the format. youtu.be/f8iO3irIdKw

@busf4ctor @ryancbarnett Downgrade your seat to "bathroom" for a refund and just sleep in there the whole flight.

@ryancbarnett They call it business class I think haha even though it’s very expensive, I’d take it but it’s full because of the last minute buy :(

I have 26h of flight ahead of me, I may or may not survive 🫡

Playing with the format of a "Security Research Writeup Deep Dive" series with a bug bounty focus and did a demo episode on this really high quality writeup of a clever bug. Open to feedback on this format before I get to nonnegative episode numbers. :) youtu.be/JqvJSF2UMyY

@omer_asfu This is such a high quality writeup and such a good bug. So cool that you were able to keep pushing deeper into the tenant project and ultimately get cross tenant impact, and it's so cool that Google was willing to disclosed. Really helpful concrete example.

This is only part 1 of my cross-tenant research series. There are many more #CloudSecurity and #InfoSec writeups to come! Read the full technical deep-dive here: omeramiad.com/posts/gatewayt…

👼GatewayToHeaven (CVE-2025-13292). I discovered a cross-tenant vulnerability in @GoogleCloud's #Apigee, allowing me to access other organizations' data (and sometimes even plaintext JWTs of end users). Below is the full breakdown of the exploit chain⛓️

@monkehack @busf4ctor Dude, this rules! Can't wait to read the articles!

Excited to launch this with @busf4ctor. We'll be posting some of our research over the next few weeks 😁 so make sure to follow. Really looking forward to seeing where this goes!

@evanconnelly @Hacker0x01 This is such an interesting intersection and this interview really does it justice!

Recently did an interview with @Hacker0x01 on the (seemingly unlikely) combination of the two hats I wear as a pastor and hacker. hackerone.com/blog/pastor-mi…

@zhero___ @inzo____ SvelteKill!

Happy to publish our first research of the year on the SvelteKit framework, downloaded over 800,000 times per week, which led to CVE-2025-67647 (w/@inzo____): Avoiding the paradox: A native full-read SSRF and one‑shot DoS in SvelteKit zhero-web-sec.github.io/research-and-t… Enjoy the read

@busf4ctor @NahamSec Hoping to see markdown images rendered in ways I never knew possible. Definitely looking forward to this talk!

This is my first ever bug bounty or security related talk. I admit I've been a bit nervous, but I hope everyone enjoys it! @NahamSec

@_sy1vi3 Surely you can modify the PoC requests sufficiently to still achieve the needed property access to bypass the naive hour two or whatever WAF rule, right?

cloudflare ily but you're making it really annoying for me to farm bug bounties rn 💔

Been collecting bugs I document them in my journal 📝

The writeup for the first challenge is cool, but the first one existed just as a warm up for the actually cool tricks in the second one. Go solve it.

Go hack this. It's cool, and leading up to something cooler.

@nmatt0 Wow, definitely gonna think twice before I move out to the sticks if they've got bugs like that crawling around!

@7urb01 Still sussing out CIA impact. Haven't reversed all subcommands that I can run. definitely C & A are high. working on I.

It's that time of year when all the bugs enter my house for warmth. I swear since I moved to the country I see a new species every other day.

@monkehack @busf4ctor We need a bug bounty hunter "terrible indie game from days of yore" anthology site. I am willing to contribute some games.

@busf4ctor crazy how game dev was the entry point for so many of us

> be me, lil Vitor, age 10-12 > got addicted to creating games using Game Maker > also addicted to creating 3D models using Blender > learned Photoshop, Illustrator, etc > absolutely no hacking or breaking yet > pulling all-nighters: WoW, PW, TF2, SC2, ... > age 14, get even more addicted to gaming > want to be a game artist/dev > copy-pasted a random JS from the internet in my console to make everyone follow me on Twitter > pwned lol > age 15, go to a graphic design school that lasts 2 years > realize that's not what I want, it was just a hobby > get lost for the next few years > school grades are low > trying to decide on a university course around age 18 > got into an engineering uni, would choose a specialization in 1.5 years > I wanted electronics engineering > had the first programming class, fell in love, decided to go for software engineering > started learning to hack using books like The Art of Exploitation > tried getting my first bounty a few times, failed > no friends but me interested in that, so was alone on this journey > around 20yo start working as dev > learning a lot about cloud infra and competitive programming > tried my first bounty again, failed again > still learning everything about cybersec alone > forgot about bug bounty, too hard for me > 26yo, leading a cloud infra team and burning out > time to set my priorities straight and take risks > amazing gf fully supported it > built a savings buffer, left my job and started studying to break into a cybersec job > got the job! > after a year I got my first bounty > then another bounty, then one more, and more... > locked in, time to get amazing bugs > four months ago I became a full-time hunter > very happy, good money, a lot of freedom > started collabing with amazing people like monke, rafax, rez0, rhyno, etc > got 2nd on my first LHE > got another LHE invite because of the results on the first one > still locked in ---> YOU ARE HERE <---

Imagine Being so Good That Bugs FIND YOU

@nowaskyjr This is super cool! For those trying to wrap their heads around it, you can think of it as something closer to the following: const divide = (a,b)=>a/b; x = top in divide(RegExp('is; '), alert(1)) Where the   is effectively a space.

JavaScript Lexer Ambiguity - Part 2 Unlike the snippets I shared in the original post, these variants trigger a syntax-highlighting bug in all major browsers’ devtools.

@offsec225881 jorianwoltjer.com

@7urb01 Nice challenges! Congrats. I couldn't bypass CSP on challenge 3. Any tips? Best regards.

Had enough people reaching out around the React createElement XSS stuff that I decided to throw up a blog post. Nothing really new added here from the original presentations, just gives some of it somewhere more accessible to live longer term. turb0.one/pages/From_Com…