Mohammed Fadhl Al-Barbari

I just published my new tool DirDar; DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it Link on Github: github.com/M4DM0e/DirDar #bugbountytips #bugs #Hackerone #BugCrowd #hackingnews

🚨 Mossad breach: Sensitive agent data exposed. Compromised info includes names, emails, phone numbers, and addresses. Data reportedly contains Israeli intelligence agents' details. This breach has not been independently verified. #DataBreach #CyberSecurity #InfoSec #Mossad

🚨 Data Breach Alert A database allegedly from Encuentra24 is being advertised on a cybercrime forum. Threat actor claims to hold 570,125 records. This breach has not been independently verified. #Encuentra24Breach #DataBreach #CyberSecurity #InfoSec #CentralAmericaBreach

🚨 Data Breach Alert: Threat actor NinjaBoi claims to sell a 105M record database allegedly from KPU Indonesia (national voter data). Includes NIK, KK, name, address, DOB, gender — priced at $5K. Unverified. #CyberSecurity #DataBreach #Indonesia #PII #DarkWeb #OSINT

🚨 Data Breach Alert Kuwait – Ministry of Public Works allegedly breached. Seller offers 12 TB of files (1.64M+ files) and demands $600k ransom. Sale price $40k if unpaid. Deadline: Oct 16, 2025. Not independently verified. #CyberSecurity #DataBreach #Kuwait #DarkWeb

🚨 Data Breach Alert A Threat actor leaked McDonald's India workers DB (Oct 2025). 📂 14,696 staff records + 261 restaurants. ⚠️ Exposed: IDs, names, DoB, job details, phones, addresses. Unverified. More: darkgen.io #CyberSecurity #DataBreach #InfoSec #OSINT

🚨 Data Breach Alert A Threat actor claims to have leaked a database from SFOI (sfoi.mg), a leading packaging company in Madagascar ($39.9M revenue, 1,000 families supported). ⚠️ Potential exposure of sensitive business/employee data. Unverified.

🚨 Data Breach Alert A database allegedly linked to the Israel Deface Army / idf.il has been posted by Zvok X Wz. Exposed: names, parent names, birth dates, national IDs, addresses. This breach has not been independently verified. #CyberSecurity #DataBreach

🚨 Data Breach Alert Employee records from cccrc.gov.om (Oman’s Comprehensive Cancer Care & Research Center) reportedly leaked by a threat actor. Not independently verified. #CyberSecurity #DataBreach #DarkWeb #OSINT #Infosec #HealthcareSecurity

🚨 Data Breach Alert A database allegedly from Tokopedia (tokopedia.com) has been leaked on a cybercrime forum. This breach has not been independently verified. #CyberSecurity #DataBreach #EcommerceSecurity #ThreatIntelligence #OSINT

🚨 Data Breach Alert – Japan A leak allegedly from Japan’s e-Stat (政府統計の総合窓口) exposes 78M records of residents. ⚠️ Not independently verified. More info: darkgen.io #CyberSecurity #DataBreach #Japan #DarkWeb #ThreatIntel

🚨 Data Breach Alert A database allegedly from Yamm.sa with 28.9k customer records has been leaked. Includes names, phones, orders, refunds, return reasons, shipping & payment info. #CyberSecurity #DataBreach #SaudiArabia #Infosec #DarkWeb

🚨 Data Breach Alert – Japan 🇯🇵 A threat actor named N1KA has leaked a database allegedly from Kawamoto Pump Mfg. Co., Ltd., a Japanese manufacturer. The data was published on a cybercrime forum and contains sensitive contact information.

I just shared my latest bug hunting write-up on Medium, where burp's search feature helped me uncover three vulnerabilities: a cache deception data leak, a PII exposure, and a Broken Access Control issue. Check it out here: @drhatab/three-bugs-one-search-discovering-security-flaws-with-burp-00aeba9fedcf" target="_blank" rel="nofollow noopener">medium.com/@drhatab/three… #bugbountytips

@NullByte0x شرح بطل من الاسطوره

قبل يومين طلع موضوع ما نسمع عنه كثير: Zero-click RCE في Apple AirPlay حرفيًا: ثغرة تسمح باختراق جهازك بدون ما تسوي شيء. ممكن تكون أقوى ثغرة لهذي السنة. لكن وش مدى خطورتها فعلًا؟ وهل تقدر تخترق جهازك بدون أي تفاعل من المستخدم؟ ثريد 🔽

@PhilippeDelteil 😂

Elon said he would end Twitter spam: Never received so much spam before.

@skiupace زي ماقلت انت (ثغره تتعلق برفع الملفات) اصدار PHP ماله دخل بالموضوع. هنا الثغره (خطأ من المبرمج) للعلم انه حتى السيرفر قديم تقريباً كل شي من 2015 ماحدثوه بس هذا لايمنع ان كل هذا ماله دخل بالاختراق

@M4dM0e له علاقه بحيث انها نسخه قديمه وفيها ثغرات + إستخدامهم لدوال تعامل مع قواعد بيانات اصبحت قديمه، والمفارقه العجيبه انه تم عن طريق ثغره تتعلق برفع الملفات.

أمس كان الإنترنت بحاله من الهستيريا، اذا ماتعرفون شصار، احد أشهر المواقع بالإنترنت والي هو موقع "4chan" تعرض للإخت.راق *بسبب إستخدامهم لنسخه قديمه من php* وتم تسريب بيانات الـadmins والسورس كود الخاص بالموقع بالكامل، وخلال بحثي عن الأمر قدرت أحصل على السورس كود، لين الحين مصدوم..

@NullByte0x وحش ماشاء الله بالتوفيق للقادم ❤️

الحمدلله🤍, غالباً بعد eCIR بودع ايليرن ونروح لـ Offsec ان شاء الله 🔥

@hatab0x Congrats buddy🎉 Enjoy your vacation

February so far

@NullByte0x والله وحش الف مبروووك

الحمدلله 🤍