Sabitlenmiş Tweet
Created my first browser extension called RepoAlltheThings while learning web development. More details linked below:
github.com/ChrisCZ2/RepoA…
English
タズ
6.9K posts
タズ
@ChrisCz_
Web App Pentester & Bug Bounty Hunter 🐞 | Breaking apps so you don’t have to | Probably drinking coffee while hunting bugs ☕ |
Katılım Haziran 2013
205 Takip Edilen106 Takipçiler
@yeahbutnahbut You're legitimately and legally obligated in any self hosted or through third party security research platform to wait until they respond and gave you the green light. Anyone that has sent reports knows it this. I've sent some in the past that have been open for 35+ days.
English
Loving the framing of the dogpile gang.
guy finds flaw, guy email's security, guy emails some others guy waits, guy drops it publicly
and it's him getting all the shit.
not Reframe, the people ignoring the security and support emails that have legal obligations to protect the information they hold
oh you didnt buy linked in premium to run around begging staff for a response, oh you could have done all these other things
SECURITY@ SUPPORT@ dickheads.
citing putting the users at risk but not thinking far enough to assume that data has already gone
impulsive@weezerOSINT
if you've ever used Reframe to get sober, your private journals, your craving logs, what triggered you, how bad it got, your name, your email, all of it is sitting in a database that anyone can read without logging in i unzipped the app and found a database key in a config file. thats it. thats all it took 357,939 users exposed. disclosed april 7, no response
English
@weezerOSINT @hot_labor @ZackKorman @rez0__ You can easily tweet if anyone knows how to contact the ceo and dev team of the product since theres a vulnerability that effects hundreds of users. No disclosure/showcase of how theres a vulnerability until you are talking with them. Thats best course of action.
English
@hot_labor @ZackKorman @rez0__ the records were at risk the moment the app was pushed onto the app store what is flying over your head rn?
English
this man called me blackhat on his timeline to 71k people. in the dms he told me he's "not claiming i released some secret technique" so which is it?
he had the platform to help get this fixed. contact the company, escalate the report, connect me with the right people. instead he chose to start a public fight over disclosure timelines
and guess what? the company rotated the key. 25 days of private emails got nothing. one public tweet got it fixed.
Joseph Thacker you know what you was doing when you made this post, you are a grown man instigating tl wars isn't there anything else you could be doing with your time right now?
English
the slop is growing to now getting root shells to linux distros. 🫥☠️
DARKNAVY@DarkNavyOrg
Our AI Agent popped a root shell on Ubuntu 26.04 on the first day it was released :)
English
> For context, GPT-5 missed 40% of vulnerabilities. Opus 4.6 reduced that to 18%. GPT-5.5 brings it down further to just 10%.
holy crap. lol. i guess i'm gonna sign back up for pro.
XBOW@Xbow
Anthropic’s Mythos raised the bar for AI vuln detection but kept it invite-only. GPT-5.5 is OpenAI’s answer, and it’s open to all. We had early access. Ran the benchmarks. Blackbox GPT-5.5 already beats whitebox GPT-5. Best pentesting model we’ve tested. Read our analysis: bit.ly/48OX7v6
English
People underestimate thragg when he was literally born and trained to be the strongest of the viltrumites. Now you will see him fight rest of the series because he is last big bad of invincible.
𝑵𝒊𝒎𝒃𝒍𝒆 💫@NegativeNimble
Never in all my days have I seen a motherfucker wind up his PUMCH so hard it literally starts to pull you in.
English
This person is painfully dumb. She manipulated a point dexter to assassinate foggy because he was going to exposes her for her crimes. She deserves to die and hows is it a hatred of women when she is a vile person?
Mal • ✩｡ • ˚@ItsKarenPage
Vanessa being murdered is another classic example of killing a prominent female character in order to further a man's story. It's sick and twisted. Vanessa deserved better, regardless of how you feel about her. It's baseless misogyny coated as a plot device. STOP KILLING WOMEN.
English
Loved the browser extension now theres a caido plugin cant wait to use it.
Kévin GERVOT (Mizu)@kevin_mizu
I'm happy to release the first version of my DOMLogger++ plugin for @CaidoIO! 🔎 It improves the browser extension in several ways: • Persistent, per-project storage • Temporary session recording • AI support • Stack trace reconstitution • ... 👉 github.com/kevin-mizu/dom…
English
@xssdoctor @Jhaddix This is reassuring to me after months of not finding anything. The self doubt of not finding anything will working another job 40 plus hours a week.
English
He's only doing this after other experienced hackers told him he's in wrong in his entitlement. Anyone thats has done a pentest for a company of any size knows the report is the talking power than the vulnerabilities you found.
Patrickbatman@hamidonsolo
I owe Hack The Box an apology. I was wrong for expecting a cert after scoring 100 points and having a Critical 9.8 validated on a real company through HackerOne. Clearly I should have spent more time on report formatting instead of finding actual vulnerabilities. My bad HTB. I'll do better. won't happen again
English
My bug bounty time and free time past couple of months been building this plugin. Feedback is appreciated. I know there is some bugs im aware of will be fixed in next release.
Caido@CaidoIO
🚀New plugin in the Caido Store! Introducing "RepoExplorer" by @ChrisCz_ Open files from a GitHub repository and inspect their contents directly inside the app. Check out more details: github.com/ChrisCZ2/RepoE…
English
タズ retweetledi
🚀New plugin in the Caido Store!
Introducing "RepoExplorer" by @ChrisCz_
Open files from a GitHub repository and inspect their contents directly inside the app.
Check out more details: github.com/ChrisCZ2/RepoE…
English
my spin on this is called protein pudding:
- scoop of whey
- scoop of pb powder
- 1tbsp cashew butter
- chia sees
- splash of milk (you want it thick)
mix it.
- fresh raspberries on top
super filling, super delicious, super healthy.
Dan Go@CoachDanGo
This is the best breakfast for weight loss. It's 250g low-fat Greek yogurt, one scoop of whey protein, 100g frozen fruit, and a teaspoon of psyllium husk. I call it Glop, and here's why each ingredient matters:
English
@EdLatimore No you are correct the left is sub my guess is 12% and the left is 15-20% range he still has alot leaner than most people in the less than 20 percent range
English
I think it'll be obvious, but I want to preface this by saying I'm giving you a compliment.
You have the opposite problem that most guys have.
Most dudes underestimate their BF.
You are clearly *over*estimating—and by a decent margin
In the left, you are a bit leaner than 15%.
On the right, you are nowhere near 25%.
I might be wrong, but X will come in screaming if I am.
Peter@peterbill69
@EdLatimore Left is me at around 15% Right is me at I’d assume around 25% You can see I have a bicep vein not super apparent but it is there You can definitely have vascularity in the arms in the 20% range
English
@nmatt0 Its weird ever since I started learning and enjoying hacking in 2022 money was a secondary for me. I get some people started for that reason but you start to hate it security and get burnt out faster imo. I like being able to have on top 500 company without being employed.
English
Hacking used to be for nerds.
Then it became the latest get-rich-quick scheme promising a six figure salary with no required experience or passion.
I predict we have seen the peak...
Zack Korman@ZackKorman
What’s cybersecurity going to look like five years from now? I know that’s a hard question, but I’ve been thinking about it a lot lately. Would be good to hear what others think. What roles won’t exist? What product categories disappear? What tech will be obsolete?
English
Just a reminder: I give away many of my tips tricks, research, and methodology via conference talks, podcasts, free workshops, webinars, blogs, here on Twitter, and via my newsletter Executive Offense.
I’ve contributed code to many tools. I write and release tools myself, in FOSS.
I have done this for 21 years. I never stopped. I just charge for classes now that are the ultimate curation of all those things. Updates? Yeah modern research and updates in charge for. I have a family, sue me I guess.
Thanks to the two assholes who sent me dm dissertations on how I’m a sellout influencer and that real hackers release everything for free. Saying that my all my contributions are null and void for running courses.
Really makes me want to keep doing it.
These aren’t bots either, there are real people in the industry at real consultancies.
That’s cool I guess. To be an asshole and meme 💯 of the time is in style.
Better be sure that if I see you on the signup list or anyone from your consultancy… you are not welcome at Arcanum stuff. Gl and have a wonderful life 🤗
English