AshwinX

I got into a workflow orchestration platform in under 10 minutes, and I was awarded a $1000 bounty. subfinder target[.]com | httpx -sc -title -cl | grep dashboard # this just works #bugbounty #appsec #devsecops #infrastructure #pentesting

@tabaahi_ Congratulations Bhai🎉

Thanks for all the check-ins & DMs 🙏 Quick update: getting married later this year, so I've been off the grid a bit. Busy with pentesting, slower on bug bounty, wedding prep in full swing. Thanks for the support, see you soon! ❤️

@bug_vs_me @zomato Congratulations🥳

Our @defcon talk with @adnanthekhan about how we made $100k+ in Bug Bounty with Supply Chain Attacks is out ! Let me know what you think 😁 youtube.com/watch?v=M3XU-4…

This makes cloudflare /cdn-cgi/image a valid CSPT → innerHTML gadget btw :D gmsgadget.com/preview/?html=…

You ain't a G until you lose it all, watch everything fall apart. Have the closest friend switch up on you and still stand up, hold your head high, grind, take chances, and get it all back.

2026 is 51% complete.

The Urge to Learn Everything.

Solo Leveling 3 is ready! I didn't get a bounty for this one, but it helped me gain better insight when looking at OAuth flows. Maybe the app is secure on its own, but what about third-party JS or iframes that load on the app? ChallengeLink: pwnbox.io/challenges/sol… Good luck and see ya tomorrow =)

Our thoughts on the importance of AI sovereignty. 1. Your AI sovereignty dictates your institution’s future. Sovereignty is the precondition for choice. Relinquishing sovereignty transfers the future choices of your institution to others, who are likely to exploit it for their gain and your loss. 2. Data retention is your treasure. Transfer it at your own peril. Your ability to win is dictated by your ability to recognize and use your unique edges, and you keep winning by compounding the underlying data to generate new insights. Transferring that data hands over access to your pre-existing winning plays and yields the means of production for new ones. 3. Tokenmaxxing hijacks your value orientation and decreases your institutional fortitude and intelligence. The pursuit of high token usage incentivizes disposable scripts over robust software — with the addictive feeling of false progress. There is a reason why those selling tokens refuse to charge based on value. 4. Controlling your weights is controlling your fate. Weights are the distilled form of hard-won, accumulated institutional knowledge. If you let others control your weights, you are allowing them to migrate the alpha of your business to theirs. 5. There is no contradiction between sovereignty and alpha. The architecture that maximally preserves sovereignty is one that enables institutions to own their tribal knowledge, and to compound it as alpha. 6. Politicizing the technical issues involving sovereignty is what your adversary wants. Techno-politicization is the wellspring of false sovereignty. Techno-politicization drives decisions that seem to reduce dependency, but ultimately limit agency — especially on the battlefield in the West. 7. Real expertise is existential. Allowing politics or favoritism to determine your technical decisions rewards whoever is best at politics, not whoever is right. Listen to those closest to the problems, not those speaking most compellingly about them. 8. Learn from institutions that are winning or that have consistently delivered. Institutions facing existential threats do not have the luxury of making technical decisions based on political preferences. 9. Only listen to institutions, countries, and people who have a proven record of being right. A track record of correctness is the best and only signal for future correctness. Judging something as right or wrong based on who you like is exceedingly misguided.

The best hackers I know aren't smarter than me. They've just read more than me. Somewhere in their memory is the one obscure writeup that turns a dead end into a finding. Preview is that memory, on tap. For you, and for your agent. -> rag.preview.is

" Until the breath leaves the body, defeat is only a rumor. " - Alexander the Great

doc=new DOMParser().parseFromString(` <select> <button> <noscript> <selectedcontent></selectedcontent> </noscript> </button> <option> <style></noscript><img src=x onerror=alert()></style> </option> </select>`,'text/html'); document.write(doc.body.innerHTML);//🔥

Every bug bounty hunter is going to want this. Dropping in <12 hours.

People should learn to live like this. Theres not a single thing here that is inaccurate, and i truly believe it would make a lot of people more happy than they currently are.

"The biggest breakthroughs often come after the biggest frustrations. Keep pushing."

Hacking Google with A.I. for $500,000 brutecat.com/r/hacking-goog…