@RandomDhiraj

Security Researcher, Learning & Fuzzing! (https://xitter.cf/t.co/d2iL7Rqmvv)

 nowhere
inputzero.io
Joined June 2015
  • Tweets597
  • Following134
  • Followers3.4K
129Media
w00t! Microsoft Patch Tuesday included my (CVE-2026-83872). msrc.microsoft.com/update-gu… #infosec
1
275
w00t! Microsoft Patch Tuesday included my (CVE-2026-69619). msrc.microsoft.com/update-gu… #infosec
1
6
349
Here is my write-up on the LPE vulnerability in Check Point Harmony P81 (macOS). somelab.ai/harmony-sase-help… #infosec
4
22
1,740
C2 over... Google Calendar and AWS X-Ray? @RandomDhiraj built MeetC2 and XRayC2, two frameworks that hide command and control inside services your defenders will never think to block. Encrypted, trusted, and hiding in plain sight. 🔎
2
8
1,261
Model quality matters but context is king. While everyone’s hyped about Mythos finding a 27-year-old bug, I tried a similar workflow with current available models. somelab.ai/openbsd-ftpd #infosec #AI
1
3
7
976
more replies
VirtualBox xHCI: eight bytes allocated, 8192 bytes copied (CVE-2026-46974). somelab.ai/virtualbox-xhci-i… #infosec #AI
1
1
237
VirtualBox CCID: four bytes in, 255 bytes read (CVE-2026-47043). somelab.ai/virtualbox-usb-ca…
78
Replying to @RandomDhiraj
Congratulations, @RandomDhiraj!
1
3
499
w00t w00t!🎉
3
1
46
4,287
w00t! Microsoft Patch Tuesday included my (CVE-2026-54124). msrc.microsoft.com/update-gu… #infosec
1
2
9
1,286
Here is my write-up on (CVE-2026-12374) LPE in Cato Networks client for macOS via XPC auth bypass + TOCTOU. somelab.ai/cato-securestore-… #infosec #AI
4
14
1,830
I made a POC on how to abuse git's `filter.<name>.clean` helper for initial access. github.com/RootUp/git-clean-… #infosec #redteam
1
5
22
1,832
Dhiraj retweeted
lablab.ai
@lablabaiMay 7
AI teams and security teams should be finishing each other's sentences. Join @RandomDhiraj, Security Manager at @Derivdotcom and @czech_pawel, @lablabai Co-Founder & @Surgexyz_ CEO as they share exactly how to make it happen LIVE.
1
3
8
1,634
Part-2, Here is the write-up for my recent work RCE in AWS Kiro IDE (CVE-2026–5429). medium.com/@dhiraj_mishra/pa… #infosec #AI
2
8
825
.@p1ngfl0yd & me would be running 2-day training program on fuzzing at DEFCON this year. Sign-up for the early bird discount - (training.defcon.org/collecti…) #infosec #fuzzing #defcon
3
7
500
Found command injection via `file://` URI handling in VIM. Fixed Commit - github.com/vim/vim/commit/3e… #infosec
1
1
4
551
Not from AI, just read the existing advisory/patch from VIM (github.com/vim/vim/security/…) replaced `scp://` URI to `file://`.

OS Command Injection in netrw affects Vim < 9.2.0073

OS Command Injection in netrw affects Vim < 9.2.0073 ==================================== Date: 27.02.2026 Severity: Medium CVE: CVE-2026-28417 CWE: Improper Neutralization of Special Eleme...

github.com
1
1
265
Load more