Bug Hunter ☣ | Hi I Hacker spare time and not spare time too 🧙♂️. https://xitter.cf/t.co/ob6h7VO9uC
Brasil
Joined June 2020
- Tweets3.8K
- Following597
- Followers20.2K
- Likes6.7K
Pinned Tweet
I am very happy for the donation I had from @zseano I am very grateful because I am inspired by you, my friend, always a good man. Thank you for everything and I wish you many good things, be well my friend and thank you very much. I was very happy.
#bugbounty #twitch
notholy.com/r/9sgfkwj7
Curti em! 🚀 Uma das primeiras que pego sem uma cacetada de coisas. Parabéns meu irmão @matheuskartel
👑 OFJAAAH → ofjaaah.com retweeted
My ultimate goal for 2027~28 is grow NotHoly.com and then start to build one of the most powerful AI models dedicated to cybersecurity and hacking.
A model built from the ground up for security researchers, red teamers, pentesters, and anyone pushing the boundaries of cybersecurity.
Hackbot bringing something new every day...
#bugbounty #hackbot #cloudfinder #bugbountytips #ofjaaah
37
1,612
👑 OFJAAAH → ofjaaah.com retweeted
👑 OFJAAAH → ofjaaah.com retweeted
Tem uma galera nova vindo pra Bug Bounty focada 100% em dinheiro, rapaziada...
Bug Bounty é extremamente frustante, você fica horas numa mesma requisição, testa bypass, acha uma vulnerabilidade dupli, leva volta de programa, enfim.. se você tá por dinheiro, você não dura 3 meses
👑 OFJAAAH → ofjaaah.com retweeted
GPT-6-Sol is the most lethal attacker that I have ever seen.
But it works in silence. No outputs, and definitely no Chain-of-Thought reasoning. So I don't really use it much, unless it's really needed.
In the following RCE lab, Kimi-K3.1-Pro and DeepSeek-V4.1-Flash-1017 gets there in about 8 minutes. GLM-5.3/Flash gets there in about 10 mins.
GPT-6-Sol? 3 minutes! The attacker taste is unreal! Full attack video below.
👑 OFJAAAH → ofjaaah.com retweeted
Sped up DeepSeek V4.1 Flash on a Mac Studio (M3 Ultra, 512GB) ~2.2x, using ideas from Strata:
• DSpark speculative decoding: the MLX checkpoint shipped without DeepSeek's 3 draft (MTP) layers, so I pulled them from the original weights
• Fused Metal kernels: oMLX had them, but they never ran on this weight format. A one-line FP8-input switch turned them on for all 40 layers
• Context-copy drafts (depth 5) + CED prefill
Result: 36 → ~60-85 tok/s on real agent work, prompts read 2x faster. Same accuracy on my quality checks.
Without a doubt, argonDNS is very comprehensive and perfect for enumeration. Thanks @damian_89_
3
849
👑 OFJAAAH → ofjaaah.com retweeted
anthropic gave claude code a hidden lean on 4 calls in a study with 50 expert analysts
they went with it 86% of the time and most still rated the result as their own call
thats the whole reason my hunting prompts have an independent verification phase and a brutally honest triage gate
if the same agent that found the bug also grades it, u already know the answer
open source, grab it
github.com/mdpsec/bug-bounty…
@AnthropicAI
👑 OFJAAAH → ofjaaah.com retweeted
Give it a try omp.sh/
Thanks @Hacker0x01 Things have been a bit quiet for me this month; I’ve been focused on my companies. But the hackbot continues to work perfectly.
#bugbounty #hackbot
6
114
3,763
👑 OFJAAAH → ofjaaah.com retweeted
We wrote up how to find every PHP service you run, including the ones on odd ports, under sub-paths, inside appliances and containers, and how to patch and verify them.
Commands plus prompts for your coding agent.
We also started SecureTheWeb.org
It checks Chaos for services running an affected version and emails their security@ inbox for free, with the fix.
We are enriching Chaos over the coming months so the next time a bug like this lands, the affected services are mapped fast and remediation starts sooner.
Read: go.projectdiscovery.io/SIC1T…
👑 OFJAAAH → ofjaaah.com retweeted
You can now perform content discovery at 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool here: github.com/assetnote/h3fuzz
Research post here: slcyber.io/research/how-prac…
🚨 PHP RCE "php2shell" — CVE-2026-109618 & CVE-2026-109619 (CVSS 9.8, unauth RCE). Affects PHP 8.2<8.2.35 / 8.3<8.3.36 / 8.4<8.4.27 / 8.5<8.5.12.
5 recon oneliners to hunt it at scale 👇
github.com/KingOfBugbounty/K…
#bugbounty #recon #ofjaaah #bugbountytips
5/ Mass scan by range:
cat ranges.txt | mapcidr -silent | naabu -silent -p 80,443,8080,8443 | httpx -silent -include-response-header -json | jq -r 'select((.header["x_powered_by"]//"")|test("PHP/8\\.(2|3|4|5)";"i"))|[.url,.header["x_powered_by"]]|@tsv'
1
209
4/ Nuclei (community templates):
git clone github.com/Ademking/php2shel… /tmp/p && nuclei -l live.txt -t /tmp/p/ -tags php,version -rl 50 -c 25
1
4
387
3/ Filter vulnerable versions:
awk -F'PHP/' '{print $2" "$0}' php.txt | awk '{split($1,v,".");if(v[1]==8&&((v[2]==2&&v[3]+0<35)||(v[2]==3&&v[3]+0<36)||(v[2]==4&&v[3]+0<27)||(v[2]==5&&v[3]+0<12)))print "[VULN] "$0}'
228
2/ Subs → live → PHP only:
subfinder -d target.com -all -silent | dnsx -silent | httpx -silent -include-response-header -json | jq -r 'select((.header["x_powered_by"]//"")|test("PHP";"i"))|[.url,.header["x_powered_by"]]|@tsv'
373