We secure digital assets through cybersecurity research and SaaS solutions . 📧 contact@n45ht.or.id 🌐 https://xitter.cf/t.co/PuPUtGpLwO
Denpasar, Bali
Joined November 2019
- Tweets277
- Following258
- Followers680
- Likes24
Need to find some parameters? XSSRush now supports parameter mining with the -m / --mining option
github.com/N45HT/XSSRush
XSSR - An Automatic XSS Scanner 🚀
Open-source Python CLI security tool powered by Playwright to audit XSS with real browser execution.
Vectors:
GET, POST, DOM ,URL Path & Hash Fragment, HTTP Headers
🔗github.com/N45HT/XSSRush
#XSS #BugBounty #InfoSec
php2shell (CVE-2026-109618, CVE-2026-109619) Vulnerability 🤯🔥
👨💻 Wiz Research, Calif, OpenAi
🔗 calif.io/php2shell/
🔗 cve.org/CVERecord?id=CVE-202…
🔗 cve.org/CVERecord?id=CVE-202…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
$1,000 PortSwigger Bug Bounty 🤑
Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB authentication by Cruz 🤯🔥
👨💻 Pedro Cruz (x/gankd_)
🔗 hackerone.com/reports/397255…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
$90,000 Google Bug Bounty 🤑
"How I Found a $90,000 Remote Code Execution Vulnerability in Google" by Simon Koeck 🤯🔥
👨💻 Simon Koeck (x/soeckly)
🔗 simonkoeck.com/writeups/goog…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
Pre-Auth Arbitrary File Read CVE-2026-21589 🤯🔥
👨💻 watchTowr Team
🔗 labs.watchtowr.com/you-wont-…
$15,000 HackerOne Bug Bounty 🤑
IDOR allows user to access report details via reference.json endpoint 🤯🔥
👨💻 sm41ldrag0n_mbbank (h1/sm41ldrag0n_mbbank )
🔗 hackerone.com/reports/386264…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
$1,500 Cloudflare Public Bug Bounty 🤑
HTTP Request Smuggling via Unsanitized Hop-by-Hop Headers by Quan Le 🤯🔥
👨💻 Quan Le (h1/1nsomnia1102)
🔗 hackerone.com/reports/362287…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?) by watchTowr Team 🤯🔥
👨💻 Sina Kheirkhah (x/sinsinology)
🔗 labs.watchtowr.com/youre-bac…
🔗 nvd.nist.gov/vuln/detail/CVE…
A Practical Guide to Connecting Burp Suite to Claude Code via MCP by Abhishek 👾🔥
👨💻 Abhishek Meena (x/aacle_)
🔗 medium.com/@Aacle/a-practica…
$150,000 Apple Bug Bounty 🍎
[CVE-2026-20685] Beyond Prompt Injection: Hacking Apple's Private Cloud Compute 🤯🔥
🔗 blog.sentry.security/beyond-…
🔗 nvd.nist.gov/vuln/detail/CVE…
$12,000 Mozilla Bug Bounty 🤑
Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) by Griffin 🤯🔥
👨💻 Griffin (x/aussinfosec)
🔗 hackerone.com/reports/378270…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…
0.25 XMR Monero Bug Bounty 🤑
`relay_tx` wallet-rpc skips `--restricted-rpc` guard and lets any caller corrupt wallet state via attacker-controlled `pending_tx` by Beni Saprulah 🤯🔥
👨💻 Beni Saprulah (h1/benisprlh)
🔗 hackerone.com/reports/368754…
🔗 github.com/monero-project/mo…
From Deep Link to Shell: Easy $3000 Android Crits by tinopreter 🤯🔥
👨💻 cTino (x/tinopreter)
🔗 medium.com/the-first-digit/f…
$1,500 AI System Prompt Leak: Using this Burp Suite Configuration by cTino 🤯🔥
👨💻 cTino(x/tinopreter)
🔗 medium.com/@tinopreter/1-500…
Enumerable Lead ID Exposes Millions of Car-Buyer Records and Lets Anyone Overwrite Their Contact Details by Marius du Preez 🤯🔥
👨💻 Marius du Preez (mdpsec.com)
🔗 mdpsec.com/reports/auto-lead…
$42,751 Ubiquiti Inc. Bug Bounty 🤑
Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products by Catchify Security 🤯🔥
👨💻 Abdulaziz Almadhi (Catchify Security)
🔗 catchify.sa/post/pre-auth-rc…
IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years 🤯🔥
👨💻 Nebula Security
🔗 nebusec.ai/research/ionstack…
🔗 t.me/ZeroToBug
🔗 whatsapp.com/channel/0029VbC…