Bounty Hunter | Penetration Tester | Cyber Security Researcher
Joined September 2020
- Tweets368
- Following96
- Followers1.6K
- Likes630
Pinned Tweet
I built an AI-powered Burp Suite extension, so I threw an XSS payload at it.
The real test: can it actually detect and analyze the vulnerability without me hand-holding it?
Let’s see.
#burpsuite #ai #security
Un9nPlayer retweeted
SubTracker just got an update!
Built to make reconnaissance faster and more efficient.
Try it here: app.agniops.in
buy 10$ plan for zero rate-limit.
scanned 128 domains get 37,827,334 subdomain.
Run Automate 8 CVEs exploit on VPS.
12,789 only CVEs exploit webhook alert.
Confirmed Exploit 783, Reported 29, 11 Confirmed, 3 Duplicate, rest waiting for response. 38 in draft mail. 2bounty: 1289$🎯
Found a pretty interesting way to enumerate subdomains:
app.agniops.in/v1/search?dom… give: 813
crt.name/v1/search?apex=x.co… give: 781
Gives you a clean list from the domain's certificate data.
Is anyone here with solid hands-on experience exploiting NPM CVEs? I'm looking to build a new automation project. Think of it as a collaboration—we'll build it together and split the earnings fairly. DM me
#bugbounty #CVEs
it's not easy to be honest. whole setup took 2days, automate run 14days, 3 days took to verified the exploit on every domain. then reporting it's a hand pain full task.
If you miss it they implement rate-limit, I suggest you create account then use the API. I automate the some bugs or CVEs also. This one is pretty good because It show when domain is first seen. 🎯 already hit 17 report. CVEs, ATO, Admin bypass, SQL❤️bugs. Don't miss it guy.🎯
Found a pretty interesting way to enumerate subdomains:
app.agniops.in/v1/search?dom… give: 813
crt.name/v1/search?apex=x.co… give: 781
Gives you a clean list from the domain's certificate data.
Found a pretty interesting way to enumerate subdomains:
app.agniops.in/v1/search?dom… give: 813
crt.name/v1/search?apex=x.co… give: 781
Gives you a clean list from the domain's certificate data.
After seeing the GTA 6 leak, I have one suggestion for @RockstarGames :
Hire @Steam security. 😭
They show zero mercy—doesn't matter if your account gets hacked or it's just a $1 indie game leaking.
Speaking from personal trauma. 💀
Built another Burp Suite extension — this one for subdomain discovery.
It’s installable, comes with API support, and I’ve submitted it to the Burp Suite BApp Store.
Until it’s published, I’m testing it in the wild.
github.com/un9nplayer/SubTra…
#burpsuite #extension #subdomain
Built something I’ve been working on: SubTracker.
A lightweight subdomain finder for recon - scan a domain, discover subdomains
Now live on Firefox Add-ons. addons.mozilla.org/en-US/fir…
#CyberSecurity #OSINT #Recon #BugBounty
🤖 Made with AI
That's what I wanted always.. A Subdomain finder extension on browser.🎯 Thanks
🚀 AgniOps SubTracker is now LIVE on Firefox.
Discover subdomains directly from your browser.
→ Fast enumeration
→ AgniOps Intelligence API
→ Free to use
Built for recon, bug bounty & security research.
🔗 Firefox Add-on: addons.mozilla.org/en-US/fir…
#CyberSecurity #BugBounty
Un9nPlayer retweeted
Introducing the AgniOps Subdomain Finder Extension — discover subdomains directly from your current browser tab.
→ Fast enumeration
→ AgniOps Intelligence API
→ Free to use
Discover the attack surface. Faster.
#CyberSecurity #BugBounty
Try first then trust it, Believe me that will be your first Subdomain finder top #1 in list. Max time 5sec to find 10L subdomain. Both web or CLI available.
Get Free API to use on CLI.
github.com/un9nplayer/SubTra…
Un9nPlayer retweeted
🚀 Launching SubTracker today.
A fast, lightweight subdomain discovery tool for recon and asset discovery.
🔗 github.com/un9nplayer/subtra…
Built with Go. Feedback welcome 🙌
#cybersecurity #bugbounty #golang #opensource
Un9nPlayer retweeted
Un9nPlayer retweeted
Watch us open the camera and uncover the anonymous identity behind Tor browser:
We published the writeup for the browser RCE in IonStack. Mythos reported 271 bugs in Firefox 150 but still missed this one. And the Tor Browser is also affected by CVE-2026-10702.
Update your Tor!
Subdomain finder instantly! Unlimited search.
I'm working of API Also. API Coming Soon.
🚀 We just launched our FREE Subdomain Finder.
Built for:
• Bug bounty hunters
• Pentesters
• Security teams
• Developers
Try it now:
app.agniops.in
Your feedback will help shape what's coming next.
#CyberSecurity #BugBounty #Recon #OSINT #InfoSec #Pentesting
Be Careful something big cooking up for all of you. In security, it's just a goodluck warning hope you ready to face it.
Hint: Within 20days be active.
@ndtv On Air Live Hijacking.
@DelhiPolice @zomato @Swiggy @OfficialDMRC @CPDelhi @ndtv @ndtvindia
Un9nPlayer retweeted
Wtf, Kimi k3 found 0-day in latest Redis Only in 27 minutes,
also got near zero-click arbitrary command execution in Telegram Desktop & iOS.
Kimi didn’t just find the bug it built working authenticated RCE exploits for multiple Redis versions, including one that bypasses the fix in 8.8.0.
It also achieved near zero-click arbitrary command execution in Telegram Desktop & iOS (ASLR pinned).
The researcher even said it found real vulns in latest Chrome and WeChat.
I use kimi for AI-driven vulnerability research, it really work