NullSecurityX retweeted
The very first edition of @LatentShiftAI conference now brings you the @OmarchyLinux community booth at the event day 🔥
17 Oct, Istanbul
You will meet Omarchy’s website design team lead, @BarisGirismen!
Then catch @GoktugVatandas on stage for Omarchy 101: a 20-minute live demo and introduction to Omarchy!
I promise you will see what malleable computers can do!
NullSecurityX retweeted
I no longer have any reason to use Claude. I’ll be cancelling it after this month. They can go on living as a happy little cult in their own kingdom.
⚠️Telegram 0-Click Crash Exploit @telegram
This vulnerability can make Telegram unusable regardless of the version or platform. Sending just a single malicious sticker to the target chat is enough.
The vulnerability was confirmed and reported to Telegram along with a PoC.
🚨 Potential client-side DoS in Telegram
A Telegram group I own has been deliberately made completely inaccessible.
Every attempt to open the group causes the Telegram client to crash. The issue is reproducible on iOS, Android, Desktop and Web - the chat is completely inaccessible.
The group has not been deleted or banned. I am the owner, and the invite link is still valid.
I know who is behind the attack.
Based on the circumstances, I suspect that malicious content was deliberately placed in the group to trigger the client crash.
If this condition can be remotely triggered by specific content, an attacker could potentially make any Telegram group inaccessible by sending a specially crafted payload.
This makes the issue significantly more serious than an ordinary client crash.
@telegram - please investigate this urgently. I can provide the necessary details and evidence privately.
Affected group:
t.me/+u1wgBRqRZvMxNzgy
NullSecurityX retweeted
I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD.
I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details.
#openvpn #bsod #uaf #research #vulnerable #kernel
whatsapp üzerinden karşı taraftan gelen bir tehdit, tehlike veya benzer bir durumda işe yarayacak ufak bir hook scripti yazdım:
-karşı tarafın ip adresine dayalı konumu (p2p açıksa)+port
-karşı tarafın whatsapp hesabına kaç cihaz bağlı olduğu
-karşı tarafın mobilde mi wifi ağında mı olduğu
-karşı tarafın işletim sistemine dair info (iphone-android-web vb)
gibi bilgileri tek bir çağrıyla (çağrının cevaplanması şartı ile) alabilirsiniz. repo linki👇
NullSecurityX retweeted
[tr]Şu etkinliğimizi elden ele duyurmaya eli uzanmayanları, uzanırmış gibi yapanları da görmüyorum sanmayın😘.
Güzel bir şeyin destekçesi olmak kimseyi küçültmez dostlarım. Bugün hepimiz geldiğimiz yerlere OSS kültürün ve bu tür etkinlikleri birilerinin yapmasıyla geldik.
Ya biz muazzam bir A.I. etkinligi organize ediyoruz. Müthiş olacak! İstanbul'un göbeğinde teknik taktik konuşmalarla dolu harika bir gün hayal ediyorum!
Biletinizin alın abi bakın 300 TL bir kahve parası.
500 kişi limitimiz var ve şimdiden 50 bilet gitti. Benim ve bu yoldaki dostlarımın ne büyük bir öğrenci aşığı olduğumuz düşünülürse en fazla 300 kişi bilet alabilecek. 200 tane öğrenciye cebimizden hediye edicez.
Daha da kitabın ortasından konuşayım. Bu eventi sponsorla bile organize etmek istesek bilet parası 3-5k dan aşağı olmaz. Biz istiyoruz ki ya bi' kahve parası versin insanlar da gelsinler. 😘
Bana ve 20 yıldır bu hayattaki amacıma inanan şirketler, insanlar, kurumlar çıkacak ve sponsor olacaklardır. Eminim ben.
Daha da ortasından söyleyeyim. Şu etkinliği elden ele duyurmaya eli uzanmayanları, imtina edenleri de görüyorum. Biliyorum. Bu dostlarımızı evente kendim şahsen çağırıyor olacağım 😉😂
NullSecurityX retweeted
New Videoo: How Attackers Exploit FTP & SSH Misconfigurations?
Misconfigured FTP and SSH services can turn exposed ports into potential entry points.
Watch: youtu.be/3SFs9Nb3q-o
NullSecurityX retweeted
🚨 New video is live!
🎥 NoSQL Injection via JSON Operator Manipulation | Auth Bypass PoC
How can a simple JSON operator let an attacker log in without knowing a valid username or password?
youtu.be/6MXabopKdTk?si=9xzL…
NullSecurityX retweeted
We’re taking a break from the companies I mentioned but those videos are coming too. Up next: my Stored XSS via PDF File Upload PoC video is live..:) We’re just getting warmed up. Google, Microsoft, Wix, and Ford videos are on the way keep an eye on this tweet’s RTs..:)
NullSecurityX retweeted
Yeni Video yayında. 🎥 Bir Yapay Zeka ile Diğer Tüm Yapay Zekaları Hacklemek
İlk defa şu konsepte video çektim. Destek veren Herkese Teşekkür ederim..:)
youtu.be/PNdgZALQ80g
NullSecurityX retweeted
New video is live! 🚀
CraftCMS RCE to Root via Telnetd Auth Bypass
In this walkthrough, we exploit CraftCMS CVE-2025-32432 for RCE, discover MySQL credentials, abuse password reuse for SSH access, and escalate to root via Telnetd CVE-2026-24061.
youtu.be/eS7OLz_2FQo
NullSecurityX retweeted
Yeni seriye başlıyoruz. 🔥
Active Directory Exploitation & Pentest | OSCP Serisi (Türkçe) playlistinin ilk videosu yayında.
İlk bölümde Active Directory’nin temel mantığını; Forest, Domain, Domain Controller, GPO ve Kerberos kavramlarını..
youtube.com/watch?v=68fx2I93…
NullSecurityX retweeted
Eski mailimin yedeklemelerinde gezerken COMODO üzerinde 2020 yılında bulduğum SQL Injection'a ait bir görsel buldum. O tarihte Comodo'da Sql Injection bulduğumu bile hatırlamıyordum..:D Şimdi arşiv de videosunu arıyorum.Bulursam youtube kanalım da yakında yayında..:)
NullSecurityX retweeted
NewVideoo; How I Hacked LinkedIn Sudoku Game? | 2 Different Methods (JavaScript & Burp Suite)
In this video I break down a vulnerability in LinkedIn’s Sudoku game where the completion time can be manipulated.
youtu.be/dtgGwy31cbs
NullSecurityX retweeted
Watch Uncle Rat go fully hands-on and hack @NullSecurityX's box on RatCTF 🐀
Full walkthrough of the recon, the foothold and the privilege path — exactly how a real CTF box comes apart, step by step.
▶️ youtube.com/watch?v=XCmMbCp0…
Liked it? Level up with 912 Uncle Rat's Pentesting Paradise — a discount applies via the link: thexssrat.podia.com/912-uncl…
#infosec #bugbounty
NullSecurityX retweeted
New video: How I Hacked LinkedIn Sudoku Game? | 2 Different Methods (JavaScript & Burp Suite)
In this video I break down a vulnerability in LinkedIn’s Sudoku game where the completion time can be manipulated.
This video is now live for members only.
youtu.be/dtgGwy31cbs
NullSecurityX retweeted
DarkForums has been hacked by NullSecurityX :)
Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 @DarkWebInformer
#BugBounty #CyberSecurity #darkforum
NullSecurityX retweeted
DeepSeek hacked! “AI has ended hacking” they say. I reported vulnerabilities in Gemini, Grok and Claude just 10 days ago. Last year I could access tokens and read chats on DeepSeek. Mythos just opened and they say it’s over… but it’s just talk.:D
youtube.com/@NullSecurityX
NullSecurityX retweeted
🚨 NEW Bug Bounty Video: Stored XSS in an Unexpected Attack Surface | Razer Bug Bounty
In this video, I walk through:
• Identifying the attack surface
• Validating the injection point
• Achieving persistent JavaScript execution
youtu.be/jZmrC6js1ls
NullSecurityX retweeted
New Videoo: Strikoder Complete OSCP Journey | From Failure to 70+ Pass (Full Exam Review & Resources) is live.
No “3 months OSCP” story here just the real journey: failures, technical mistakes, AD struggles, lab experience, and what actually worked...
youtu.be/V1Fo01YRAvg















