sumgr0

It just keeps getting better 😉 Thank you @intigriti ✌🏻

No jailbreak. No problem. 🔓 I built a tool that bypasses iOS SSL Pinning using OpenVPN + iptables — works with Burp Suite & mitmproxy out of the box. 👇 GitHub github.com/SahilH4ck4you/… #CyberSecurity #BugBounty #iOS #Pentesting

We got frustrated with dealing with vendor dependencies when reverse engineering large applications. @ITSecurityguard from @SLCyberSec’s Sec Research Team built Hyoktesu to solve this problem forever: github.com/assetnote/hyok… - releasing this today! Blog: slcyber.io/research-cente…

Sun, sea & cybersecurity. Had a great time with you guys at Nullcon&seasides! #Nullcon
#CyberSecurity
#InfoSec
#EthicalHacking
#SecurityResearch
#BugBounty
#RedTeam
#BlueTeam
#AppSec
#InfosecCommunity

bbscope v2 is out & bbscope.com is live! A free #bugbounty tool to pull scope from HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi. Store it all in PostgreSQL, track changes, query it, pipe it into your tools Thread on what's new👇

@ManasH4rsh Looking forward 👌

We are launching a Hacker House in Noida. If you are in Delhi NCR, feel free to join us. We will have one target and multiple hackers working on it together. It will be a full night of hacking, brainstorming, and sharing ideas. #hacking

Hi everyone, Fill this form to participate in hacker house. Once we have exact no. Of people who can participate, we will invite 10 of you, in the first of many weekends. forms.gle/GFy11G16dDc3mb…

I’ll be at @seasides_conf from 19-21 February 2026. If you see the Bald and Long Bearded Guy come say Hi 👋 See ya ✌️

I wasn’t active in Bugbounty since very long time but the amount of love and support the bug bounty community is showing towards the live hacking event is overwhelming ❤️ As I always say stay kind with each other 😇 @BugTroopers #lhe #bugbounty #iitr #bugtrooper #security

Let’s be clear: @Hacker0x01 is using researchers’ work to train their AI and profit from it without consent. That’s not “innovation” — that’s exploitation. Our reports, our research, our time — turned into their product, while we get nothing. This violates client agreements. Vulnerabilities belong to the companies and the researchers — not HackerOne. Yet they’re monetizing it anyway. Layoffs, shrinking bounties, and now this? The platform is collapsing, and instead of fixing it, they’re squeezing the community that built it. Researchers made HackerOne. Programs trusted HackerOne. And now both are being treated like disposable data sources. If you’re a company, review your contracts immediately. If you’re a researcher, stop feeding them your work. HackerOne isn’t supporting the community anymore it’s exploiting it. And people are finally waking up. Many programs have already shifted to self-hosted , such as Salesforce. #BugBounty

n case you missed it, all of the talks from both conferences last year are posted on our website for free. Watch all 20+ talks here 👉🏼 nahamcon.com

I was targeted by a popular X phishing campaign after my @moltbook discovery that tried to steal my account - this time by impersonating a fake @TechCrunch reporter So I used @openclaw to investigate the attackers. Here's what I found 🧵

Over the weekend I developed a major new feature for Shazzer: Teams! You can now share your vectors between team members and have your own fuzzing network. shazzer.co.uk/blog/shazzer-t…

Join the webinar on Feb 3, 2026, with Inderjeet Singh, (CEO of JSMON) for an exclusive session on securing modern apps. 📅 : Feb 3, 12:00 PM IST 🔗 Registration: form.typeform.com/to/YbXDBRxJ

Just dropped a new Jsmon CLI walkthrough (Part 1). Learn how to scan any domain/website for: ✅ Recon & Threat Signals ✅ Leaked Secrets & PII ✅ API paths, URLs, emails, subdomains ✅ Clean, structured output you can act on Watch here: youtu.be/rRjEyXuTYc8

@Toshusec_ Awesome! Congratulations man!

@sumgr0 First TKO Thanks for planting the idea of subdomain takeovers in bsides ahmedabad hope meet again:)

New blog from our research team: DOM XSS is not dead. A breakdown of polyglot payloads, real-world exploitation patterns, and what defenders should watch for. blogs.jsmon.sh/dom-xss-is-not…

@Toshusec_ Shopify has implemented TXT verification, so it has become an edge case.

@sumgr0 sir this is still vulnerable? over 20 min now its still loading

This is crazy and unexpected… thanks @galnagli