Looking at the burp history & analyzing | InfoSec | Hacker | An semi-active member at @Hacker0x01 | Securing IoMT Devices | BLR🔁AMD | Views are my own
Bengaluru, India
Joined July 2011
- Tweets1.3K
- Following137
- Followers816
- Likes352
Pinned Tweet
Conducted IoMT PT on one of the large manufacturers of different medical devices, critical flaw leads to access their azure!
Here is how:
TL;DR
Frontend application was running on kiosk mode, backend was win with restrictions such as application control, where you cant,
[1/n]
Jinay Patel retweeted
For a clearer and more visual understanding of the OpenAI HuggingFace incident, look here. It features a timeline of how things unfolded.
cristivlad25.github.io/cyber…
Jinay Patel retweeted
A couple of years ago,
Before the AI hype,
We were stuck on an SSRF, where all public methods had failed.
Took us days, but we found something (kinda) novel!
I talked about it at @PTsecurity_EN Talks Bengaluru.
Read here :-
speakerdeck.com/dk999/phtalk…
Jinay Patel retweeted
Hi all!
Long post in a while.
A friend of mine is organizing a fresh take on what a cybersecurity conference can be.
So, if you're someone, who's been sitting on that research paper or list of cool bugs you wanna share yet haven't had the opportunity to. This is your chance to just go and apply :))
Yes, even if this is your first time applying!
🔗 bsidesindore.in/call-for-pap…
@BSidesIndore
#bugbounty #infosec
Jinay Patel retweeted
Come join our awesome community on Bevy! Click this link h1.community/india-west-hack… to join the fun.
We're talking about Hacking/Red Teaming Healthcare systems w/ @0_0eth0
⏳: 1st May 6PM IST
🔗- discord.gg/kMTpAAS4
🤖 Made with AI
Jinay Patel retweeted
The Internet is falling down, falling down, falling down
Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940
Enjoy with us..
labs.watchtowr.com/the-inter…
Jinay Patel retweeted
What happens when you can tamper with patient data in transit?
Episode 2 of Bytez by @Hacker0x01 India West Club dives into red teaming healthcare systems.
From device-level access to manipulating results seen by doctors.
On the stage: @0_0eth0 🎙️
🔗 discord.gg/nrXWWTF9JS
🤖 Made with AI
Jinay Patel retweeted
So when they do it , it’s good. But when we do it, it’s bad?
You can still do it for free:
scrapling.readthedocs.io/en/…
Jinay Patel retweeted
"19 archives, with 19,389 additions and 9,208 deletions."
This is what the new reconFTW version looks like.
V4.0 is almost here!
Jinay Patel retweeted
Reconftw v4.0 is almost ready. It will contain a ton of changes and a proper documentation page. The doc page is also almost ready at docs.reconftw.com
🔥🔥🔥😬😬😬
Jinay Patel retweeted
New reconftw small release with a bunch of QoL improvements, small fixes and ip.thc.org by @hackerschoice added as a source for passive subs and RevDNS entries. ENJOY!
github.com/six2dez/reconftw/…
Whaaaaaaaaaaaaat?
We want to thank the hackerone community for an incredible collaboration over the weekend. They discovered a total of 15 unique issues, leading to an expected payout of $750K.
Our eng team has hardened the WAF as issues were discovered, and the last "flag capture" was 20 hours ago as of this writing. By no means is the work done, but we have have jointly achieved substantial protection against React2Shell for Vercel customers.
With that: The focus should remain on patching vulnerable deployments. If you have not patched the time is now! vercel.com/react2shell
Jinay Patel retweeted
reconFTW v3.2.0 released!
- New modules: GraphQL, gRPC reflection, param discovery, websockets, cloud enum & mail hygiene
- Faster --quick-rescan (skips heavy web steps)
- Optional Axiom in Docker, IPv6 support, more toggles
- All open issues fixed!
github.com/six2dez/reconftw
Jinay Patel retweeted
Ever seen two responses to one request? That's just pipelining... or is it? I've just published "Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling" 👇
Jinay Patel retweeted
Little late to this, but you can follow these steps:
1. Create Rooted AVD with rootAVD & Magisk v27. Choose SDK API v33.
2. Add magisk modules: MagiskFrida, Always Trust User Certificates
3. Use the following script with Frida: github.com/hackcatml/frida-f…
This worked for me.
Join!!
So…
We’re hosting something special👀
At @Hacker0x01 India West Club :-
📍 Goa
📅 Aug 23-24
🧠 H1 HackerHouse - 2 days of learning, hacking & vibing together. We’ll pick a target, hack, collab &
(find 0days?).
🎯 Focused Yet Fun!
Link - h1.community/e/m9gwzn/ OR
Send me a DM!
Jinay Patel retweeted
Attention @kalilinux users! In the coming day(s), apt update is going to fail for pretty much everyone.
The reason? We had to roll a new signing key for the Kali repository. You need to download and install the new key manually: offs.ec/4lUEtak
Jinay Patel retweeted
Take a look at my blog w/ @Bugcrowd where I talk about RCE and one of the ways it landed me a critical payout!
bugcrowd.com/blog/remote-cod…
Jinay Patel retweeted
Just finished my writeup about CVE-2025-23369, an interesting SAML authentication bypass on GitHub Enterprise Server I reported last year. you can read about it here: repzret.blogspot.com/2025/02…