Mamadou Abdoulaye retweeted
$5,000 PortSwigger Bug Bounty 🤑
Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handling by Masahiro Kawada 🤯🔥
👨💻 Masahiro Kawada (x/Kawakatz)
🔗 hackerone.com/reports/371227…
🔗 t.me/luckyhacker42
Mamadou Abdoulaye retweeted
GitLab has apparently taken down the Nightmare-Eclipse account just days after the researcher moved there following the GitHub ban.
The drama started after Nightmare-Eclipse released several Windows exploits and Defender bypass tools, including BlueHammer, RedSun, and UnDefend. GitHub removed the account earlier this week over concerns that the tools could be misused and weaponized.
Security company Huntress says some of the tools have already been seen in real-world intrusion cases, showing how quickly proof-of-concept research can end up being used in actual attacks.
Mamadou Abdoulaye retweeted
CVE-2026-26215 - Unauthenticated RCE in manga-image-translator (9.3k stars)
Two FastAPI endpoints call pickle.loads() on raw HTTP bodies. Auth exists but defaults to an empty string, which is falsy in Python, so the check never runs.
First reported by sud0why in May 2025, auto-closed by a stale bot. Still unpatched.
chocapikk.com/posts/2026/man…
Mamadou Abdoulaye retweeted
This is more than a session; it’s a front-row seat to real pro hacking techniques!
Save the Dates:
30th August – Mallam Challenge discord.com/events/127878492…
6th September – Ifowosowopo Challenge
discord.com/events/127878492…
Don’t miss out. Come. Learn. Level up.
#AfriHackBox #CTF
Mamadou Abdoulaye retweeted
Hello guys,
I've already talked about WPProbe, my tool to fingerprint WordPress through its REST API.
This time, I'm sharing some behind-the-scenes: the idea behind it, and a few struggles I had along the way.
Not that complex, but worth the effort.
📝 chocapikk.com/posts/2025/wpp…
Mamadou Abdoulaye retweeted
🚨 [CVE-2024-56145] Exploit released! 🚨
I’ve successfully reproduced the Craft CMS RCE vulnerability, thanks to the outstanding research by @Assetnote.
Details, PoC, and setup instructions:
🔗 github.com/Chocapikk/CVE-202…
Learn more:
📖 assetnote.io/resources/resea…
🙏 Huge thanks to Assetnote for this amazing work! 🙌
Mamadou Abdoulaye retweeted
exploit + lab setup for CVE-2024-45519
github.com/Chocapikk/CVE-202…
🚀 Explore my latest post on TryHackMe! 🛡️ I recently took the time to dive into the "Publisher" machine on TryHackMe,
🔗 Discover the post here: 0xabdoulaye.github.io/posts/…
#cybersecurity #TryHackMe #CTF #RCE #PrivilegeEscalation #Infosec
Mamadou Abdoulaye retweeted
CVE-2024-36401
github.com/Chocapikk/CVE-202…
🚨Alert🚨CVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability
🔥PoC: github.com/mbadanoiu/CVE-…
📊90K+ Services are found on hunter.how
Hunter Link: hunter.how/list?searchVal…
👇Search Qery
Hunter:/product.name="Apache Superset"
FOFA:app="APACHE-Superset"
🚀 Just published a new article on Password Cracking!
Dive into practical techniques for tackling password cracking challenges with tools like John the Ripper and Hashcat. Essential for any Red Team member or CTF competitor
Link: blackcybersec.xyz/posts/pass…
#InfoSec #CTF #RedTeam
🚀 Just published a new article on Password Cracking!
Dive into practical techniques for tackling password cracking challenges with tools like John the Ripper and Hashcat. Essential for any Red Team member or CTF competitor
Link: blackcybersec.xyz/posts/pass…
#InfoSec #CTF #RedTeam
Mamadou Abdoulaye retweeted
IZICHANGE Special Giveaway
🎁 $1,000 à réclamer ! $20 chacun
🕹️Suis @IZIchange
🕹️Retwitte & Tag 3 amis
🕹Rejoins t.me/izichange
🕹 Soumets ce formulaire : bit.ly/4bd0TgG
#Izichangechallenge #Izichangegiveaway
I just pwned Intuition in Hack The Box! hackthebox.com/achievement/m… #hackthebox #htb #cybersecurity
Mamadou Abdoulaye retweeted
LiveHack ✨
Episode 9 : Ruby interpreter exploitation
Date & Time : 14th April 08 PM UTC+1
Hacker : @f00fc7c800
#LiveHack #bugpwn #Hacking #RE #VulnerabilityResearch #Exploitaion






















