Infosec researcher • Bug bounties & security analysis. https://xitter.cf/t.co/kOIAd973sL Collabs/ads: DM 📥

Joined May 2024
NullSecurityX retweeted
The very first edition of @LatentShiftAI conference now brings you the @OmarchyLinux community booth at the event day 🔥 17 Oct, Istanbul You will meet Omarchy’s website design team lead, @BarisGirismen! Then catch @GoktugVatandas on stage for Omarchy 101: a 20-minute live demo and introduction to Omarchy! I promise you will see what malleable computers can do!
4
12
3
58
10,926
NullSecurityX retweeted
I no longer have any reason to use Claude. I’ll be cancelling it after this month. They can go on living as a happy little cult in their own kingdom.
2
1
13
3,960
NullSecurityX retweeted
⚠️Telegram 0-Click Crash Exploit @telegram This vulnerability can make Telegram unusable regardless of the version or platform. Sending just a single malicious sticker to the target chat is enough. The vulnerability was confirmed and reported to Telegram along with a PoC.
🚨 Potential client-side DoS in Telegram A Telegram group I own has been deliberately made completely inaccessible. Every attempt to open the group causes the Telegram client to crash. The issue is reproducible on iOS, Android, Desktop and Web - the chat is completely inaccessible. The group has not been deleted or banned. I am the owner, and the invite link is still valid. I know who is behind the attack. Based on the circumstances, I suspect that malicious content was deliberately placed in the group to trigger the client crash. If this condition can be remotely triggered by specific content, an attacker could potentially make any Telegram group inaccessible by sending a specially crafted payload. This makes the issue significantly more serious than an ordinary client crash. @telegram - please investigate this urgently. I can provide the necessary details and evidence privately. Affected group: t.me/+u1wgBRqRZvMxNzgy
11
90
6
694
122,461
NullSecurityX retweeted
I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details. #openvpn #bsod #uaf #research #vulnerable #kernel
10
20
3
200
39,745
NullSecurityX retweeted
whatsapp üzerinden karşı taraftan gelen bir tehdit, tehlike veya benzer bir durumda işe yarayacak ufak bir hook scripti yazdım: -karşı tarafın ip adresine dayalı konumu (p2p açıksa)+port -karşı tarafın whatsapp hesabına kaç cihaz bağlı olduğu -karşı tarafın mobilde mi wifi ağında mı olduğu -karşı tarafın işletim sistemine dair info (iphone-android-web vb) gibi bilgileri tek bir çağrıyla (çağrının cevaplanması şartı ile) alabilirsiniz. repo linki👇
5
77
4
859
90,532
NullSecurityX retweeted
[tr]Şu etkinliğimizi elden ele duyurmaya eli uzanmayanları, uzanırmış gibi yapanları da görmüyorum sanmayın😘. Güzel bir şeyin destekçesi olmak kimseyi küçültmez dostlarım. Bugün hepimiz geldiğimiz yerlere OSS kültürün ve bu tür etkinlikleri birilerinin yapmasıyla geldik.
Ya biz muazzam bir A.I. etkinligi organize ediyoruz. Müthiş olacak! İstanbul'un göbeğinde teknik taktik konuşmalarla dolu harika bir gün hayal ediyorum! Biletinizin alın abi bakın 300 TL bir kahve parası. 500 kişi limitimiz var ve şimdiden 50 bilet gitti. Benim ve bu yoldaki dostlarımın ne büyük bir öğrenci aşığı olduğumuz düşünülürse en fazla 300 kişi bilet alabilecek. 200 tane öğrenciye cebimizden hediye edicez. Daha da kitabın ortasından konuşayım. Bu eventi sponsorla bile organize etmek istesek bilet parası 3-5k dan aşağı olmaz. Biz istiyoruz ki ya bi' kahve parası versin insanlar da gelsinler. 😘 Bana ve 20 yıldır bu hayattaki amacıma inanan şirketler, insanlar, kurumlar çıkacak ve sponsor olacaklardır. Eminim ben. Daha da ortasından söyleyeyim. Şu etkinliği elden ele duyurmaya eli uzanmayanları, imtina edenleri de görüyorum. Biliyorum. Bu dostlarımızı evente kendim şahsen çağırıyor olacağım 😉😂
2
9
1
51
9,332
NullSecurityX retweeted
New Videoo: How Attackers Exploit FTP & SSH Misconfigurations? Misconfigured FTP and SSH services can turn exposed ports into potential entry points. Watch: youtu.be/3SFs9Nb3q-o
2
4
1,230
NullSecurityX retweeted
🚨 New video is live! 🎥 NoSQL Injection via JSON Operator Manipulation | Auth Bypass PoC How can a simple JSON operator let an attacker log in without knowing a valid username or password? youtu.be/6MXabopKdTk?si=9xzL…
5
15
2,675
NullSecurityX retweeted
We’re taking a break from the companies I mentioned but those videos are coming too. Up next: my Stored XSS via PDF File Upload PoC video is live..:) We’re just getting warmed up. Google, Microsoft, Wix, and Ford videos are on the way keep an eye on this tweet’s RTs..:)
Adidas XSS Vulnerability. We’re just getting warmed up. Fasten your seatbelts..:) Next Target ? Google ? Microsoft? Wix? Ford? ...?
2
25
4,762
NullSecurityX retweeted
Yeni Video yayında. 🎥 Bir Yapay Zeka ile Diğer Tüm Yapay Zekaları Hacklemek İlk defa şu konsepte video çektim. Destek veren Herkese Teşekkür ederim..:) youtu.be/PNdgZALQ80g
2
3
1,070
NullSecurityX retweeted
New video is live! 🚀 CraftCMS RCE to Root via Telnetd Auth Bypass In this walkthrough, we exploit CraftCMS CVE-2025-32432 for RCE, discover MySQL credentials, abuse password reuse for SSH access, and escalate to root via Telnetd CVE-2026-24061. youtu.be/eS7OLz_2FQo
5
1
26
5,092
NullSecurityX retweeted
Yeni seriye başlıyoruz. 🔥 Active Directory Exploitation & Pentest | OSCP Serisi (Türkçe) playlistinin ilk videosu yayında. İlk bölümde Active Directory’nin temel mantığını; Forest, Domain, Domain Controller, GPO ve Kerberos kavramlarını.. youtube.com/watch?v=68fx2I93…
1
3
1,641
NullSecurityX retweeted
Eski mailimin yedeklemelerinde gezerken COMODO üzerinde 2020 yılında bulduğum SQL Injection'a ait bir görsel buldum. O tarihte Comodo'da Sql Injection bulduğumu bile hatırlamıyordum..:D Şimdi arşiv de videosunu arıyorum.Bulursam youtube kanalım da yakında yayında..:)
1
2
21
2,584
NullSecurityX retweeted
NewVideoo; How I Hacked LinkedIn Sudoku Game? | 2 Different Methods (JavaScript & Burp Suite) In this video I break down a vulnerability in LinkedIn’s Sudoku game where the completion time can be manipulated. youtu.be/dtgGwy31cbs
1
7
2,661
Watch Uncle Rat go fully hands-on and hack @NullSecurityX's box on RatCTF 🐀 Full walkthrough of the recon, the foothold and the privilege path — exactly how a real CTF box comes apart, step by step. ▶️ youtube.com/watch?v=XCmMbCp0… Liked it? Level up with 912 Uncle Rat's Pentesting Paradise — a discount applies via the link: thexssrat.podia.com/912-uncl… #infosec #bugbounty
2
7
2,924
NullSecurityX retweeted
New video: How I Hacked LinkedIn Sudoku Game? | 2 Different Methods (JavaScript & Burp Suite) In this video I break down a vulnerability in LinkedIn’s Sudoku game where the completion time can be manipulated. This video is now live for members only. youtu.be/dtgGwy31cbs
1
1
2
14
3,971
DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 @DarkWebInformer #BugBounty #CyberSecurity #darkforum
🚨🚨🚨 Warning: DarkForums has an active XSS vulnerability. Do NOT use the website, it's unsafe and will leak your IP!
8
57
5
409
54,735
NullSecurityX retweeted
DeepSeek hacked! “AI has ended hacking” they say. I reported vulnerabilities in Gemini, Grok and Claude just 10 days ago. Last year I could access tokens and read chats on DeepSeek. Mythos just opened and they say it’s over… but it’s just talk.:D youtube.com/@NullSecurityX
2
3
46
4,438
NullSecurityX retweeted
🚨 NEW Bug Bounty Video: Stored XSS in an Unexpected Attack Surface | Razer Bug Bounty In this video, I walk through: • Identifying the attack surface • Validating the injection point • Achieving persistent JavaScript execution youtu.be/jZmrC6js1ls
2
1
15
3,889
NullSecurityX retweeted
New Videoo: Strikoder Complete OSCP Journey | From Failure to 70+ Pass (Full Exam Review & Resources) is live. No “3 months OSCP” story here just the real journey: failures, technical mistakes, AD struggles, lab experience, and what actually worked... youtu.be/V1Fo01YRAvg
2
10
1,712