trying to hack.. you. Offsec | Appsec | Red | Blue | Purple
Joined November 2015
- Tweets1.1K
- Following882
- Followers219
- Likes2.2K
ZodSecurity retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
ZodSecurity retweeted
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST.
Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using:
🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…)
🟧 Bambda scan checks (github.com/PortSwigger/bambd…)
🟧 BChecks (github.com/PortSwigger/bchec…)
Start scanning for the vulnerability now → portswigger.net/bappstore/31…
ZodSecurity retweeted
if this affects the default installation of PHP
We are fucked up
CVE-2026-109618
CVE-2026-109619
PHP RCEs with a CVSS score of 10.0 ☠️
news.ycombinator.com/item?id…
ZodSecurity retweeted
📚Resultados de tesis - A7724 y su impacto en el ecosistema financiero
"Resultados de tesis - A7724 y su impacto en el ecosistema financiero..."
🎙️ Facundo Lisotto
🕒 15:30 - 16:15
📍 Sala C3
#CyberFinance #Ekoparty #Eko2026
ZodSecurity retweeted
The Hugging bay, The Pirate bay for open LLM's, model weights downloadable with torrents.
This is a game changer.
huggingbay.xyz
ZodSecurity retweeted
Para quien quiera hacer el curso oficial gratuito, este es el enlace: claude.com/resources/courses
ZodSecurity retweeted
From Out of Scope to $10K+ in Bug Bounty Rewards
If the paper helps you discover even one valid vulnerability—or changes the way you approach third party integrated applications—then writing it was worth it. Read the full research paper,
drive.google.com/file/d/11td…
#BugBounty #bug
ZodSecurity retweeted
Another BYOVD process killer. works on all EDR's. fully signed. github.com/redteamfortress/P…
ZodSecurity retweeted
Helping AI Agent become an awesome practical hacker! github.com/yaklang/hack-skil…
ZodSecurity retweeted
GitHub repos with reports/writeups for bug bounty hunters:
1. HackerOne Reports github.com/reddelexc/hackero…
2. Google VRP Writeups github.com/xdavidhu/awesome-…
3. Facebook Bug Bounty Writeups github.com/jaiswalakshansh/F…
4. Awesome Bugbounty Writeups github.com/devanshbatham/Awe…
5. Daily Bugbounty Writeups github.com/securitycipher/da…
#BugBounty #BugBountyTips #Infosec #EthicalHacking #CyberSecurity
ZodSecurity retweeted
Here's a cool trick for y'all looking to create new Nuclei templates for exploitable CVEs!
Using CVEmap you can get a list of CVEs with public proofs of concept, that have been marked as exploitable by CISA, are remotely exploitable AND don't have a Nuclei template (yet)!
Flags:
-k / -kev: Marked as exploitable vulnerabilities by CISA
-t=false / -template=false: Has no public Nuclei templates
-poc: Has public published POC
-re / -remote: is remotely exploitable
Good luck! 🤞
#nuclei #hacking #pentesting #bugbounty #CVEmap
ZodSecurity retweeted
here we go! hope this helps every beginner trying to master the full recon to exploitation process. i’ve covered every step in detail and will be adding more soon..just a bit caught up with things right now.
infosecwriteups.com/recon-to…
ZodSecurity retweeted
Si quieren estudiar Ciberseguridad miren un poco este documento y luego busquen cursos o certificaciones que les ayuden a hacer un camino.
#PerfilesenCiberseguridad
fundacionsadosky.org.ar/wp-c…
