AOXSIN

My JS surface mapper is now live in CAI (@AliasRobotics). It's a tool for the web pentester agent that does JS analysis: github.com/aliasrobotics/…

Nominations for the Top 10 (new) Web Hacking Techniques of 2025 are now live! Review the submissions & make your own nominations here: portswigger.net/research/top-1…

@Bugcrowd T-shirt

If you had to choose: Which gift would you pick? 👇🎁 Choose wisely👀

@Bugcrowd Burp

$1,000 GIVEAWAY 🎁‼️ Here’s how to enter: 1️⃣ Fill out the ITMOAH survey 2️⃣ Like this post 3️⃣ Comment your fave tool 4️⃣ Repost bc your friends deserve a chance too Giveaway closes Sept 30 at 11:59pm ET. One hacker takes home $1K. 20 others will score $200 each. Already filled out the survey? You’re entered to win! If not, now's your chance: surveymonkey.com/r/bugcrowd-itm…

@jobertabma @NahamSec @stokfredrik @Hacker0x01 aoxsin

Hey hackers! We're running a beta for Hai for Hackers, our AI security agent. If you're interested, please reply with your HackerOne username (we will probably limit to ~100 hackers for now). After it's been enabled, you can start using it by clicking the Hai button in the top right corner of the app. It’s free to use (with a limited daily budget for now). It is like any other AI you’ve interacted with, with the added benefit that it has access to a whole bunch of HackerOne data, like reports and programs. We’re shipping improvements to Hai almost every day. Here are some neat use cases: - “take all the learnings from STÖK, jhaddix, and nahamsec's recon strategy and build one for me!” - “write a python script for a typical recon process” - “i need an XSS payload that doesn’t use single or double quotes” - “my XXE payload doesn't call back to my server, what could go wrong?” - “write a response for report #133337” The beta also comes with Hai Plays for you, which allows you to build your own security agents in HackerOne. You can create them at hackerone.com/settings/hai_p…. Some of the cool use cases we’ve seen so far are: - write reports with minimal input from you (efficiency++!) - convert reports into blogposts with a single prompt - AI mentor to give feedback about your communication and increase the likelihood of a reward In the background we’ve been working on agentic behavior, which we expect will soon come to Hai for Hackers as well. These AI agents can act like your hacking buddy and hack alongside you. We’ll keep you in the loop on our progress.

@monkehack The view is incredible. Wow

definitely one of the nicer spots I’ve hacked from ✌️#NewZealand #bugbountylife

@Joejou10 @Hacker0x01 Congrats🎉

Just crossed 500 reputations on @Hacker0x01 🥳🥳 Slowly but surely 🙆🏻‍♀️ chase excellence, success will follow 🤍

@ghostlulz1337 Been waiting for this🔥

📔 Pentest Interview Playbook 📔 New book coming soon! I started writing an entire book on passing pentest and other offensive security interviews. Iv been hired as a pentester, ran my own pentesting company, and have hired pentesters. This book will break down the interview process step by step giving you the exact recipe to pass each phase so you can land a pentesting job. #bugbountytips #pentest #redteam #infosec #bugbounty #bugbountytip

@Bugcrowd ls

You SSH into your new VPS for the first time. What's your first command?

If you are interested in learning how I use AI to automate pentesting you should follow me on Linkedin. I often post stuff about the research my company stealthnet.ai (@StealthNetAI ) is doing on there. linkedin.com/in/alex-thomas… #redteam #aipentesting #infosec #VC #VentureCapital #startup #automatedpentesting #pentesting

@sayim0x @YogoshaOfficial Congratulations🔥

Alhamdulillah! I was awarded 300€ bounty on @YogoshaOfficial! First bounty is always special🥰

Eid Mubarak 🌙✨

Had an amazing time at Exploit Exchange: A Gathering for Bug Bounty Hunters & Penetration Testers🔥 Huge thanks to @Hacker0x01 & @remonsec for hosting this awesome event happen. Great meetup, awesome discussions, and unforgettable moments⚡ #BugBounty #hackermeetup #aoxsin

@0x_saikat @_0x999 O.nice one.

@_0x999 @aoxsin u are not dead yet

Yay, I was awarded a $5,050 bounty for Clickjacking -> ATO + $7,700 for several other bugs which I’m excited to write about once they’re cleared for disclosure🤞 hackerone.com/0x999 #TogetherWeHitHarder

WordPress quick wins! 😎 #HackWithIntigriti

What’s up @KN0X55 From the pro to the pros. All credit goes to @KN0X55 and @BRuteLogic XSS is confirmed. Sqli is confirmed. Lfimap still working on the lfi list.

Early results from the StealthNet.AI beta Congrats to @aoxsin for securing a bounty with our AI-powered agent 🔗Bug Bounty Hunting Using StealthNets AI Agent shorturl.at/iU196 #bugbounty #AI #CyberSecurity #infosecurity #AIforSecurity #Pentesting #StealthNetAI

Meet the Future of Cybersecurity: AI-Powered Hacking StealthNet.AI Agentic AI revolutionizes pen testing with autonomous assessments. Watch our beta demo to see AI agents think, adapt, & hack 🤖🔍 💡 Want beta access? Comment or DM! 🔗 bit.ly/4i70Fv9

ok, so, as a reminder, my recon course is free on youtube, go check it out. (and I demonetized my channel a while ago so that there are no ads - not sure if that works).