Binary Exploitation and Pentesting Send us a DM to secure your company
Joined May 2026
- Tweets11
- Following1
- Followers22
- Likes3
Pinned Tweet
Our founder
@ahmtbrt07
has been listed in Tesla's Security Hall of Fame. ✅
The vulnerability chain discovered:
→ Unauthorized data access
→ Privilege escalation via homograph characters
→ Admin-level impact
Low severity findings become critical when chained.
A team that knows this can truly protect your systems.
DM us for a pentest quote
@hexploitio
#bugbounty #pentesting #cybersecurity
Looking to level up your vulnerability research skills?
Don't miss this outstanding new series on Sandbox Escape by our founder, @ahmtbrt07 . Going from core architecture to advanced practical challenges a must read
#bugbounty #ethicalhacking #cybersecuritytips
hello sandbox escape enthusiasts!
i just launched a new series covering Sandbox Escapes from basics to advanced with practical challenges. Let’s dive into the depths of this art together
#bugbounty #sandboxescape #infosec #applesecurity #xpc
in the bug bounty and pentesting world, there’s no room for noise. Only results.
enter hexploit an exclusive network where security researchers share actionable findings, level up together, and turn intel into profit.
elite community. Premium intel. Collective growth.
👇
discord.gg/wp9yFGnKM
#bugbounty #bugbountytips #cybersecurity #ethicalhacking
enter hexploit
not just another Discord server. This is the premier network for bug bounty hunters and pentesters focused on real financial growth.
drop the noise. Share high-value intel. Network with the top tier. Win together.
ready to level up? Secure your spot:
discord.gg/wp9yFGnKM
#bugbounty #infosec #cybersecuritytips
Our founder @ahmtbrt07 has a Buffer Overflow vulnerability published in Meta's FAISS library.
Full technical write-up here:
huntr.com/bounties/c326a409-…
A single overflow can compromise an entire system when exploited right.
A team that knows this can truly protect your systems.
DM us for a pentest quote
@hexploitio
#bugbounty #pentesting #cybersecurity #FAISS
A Buffer Overflow vulnerability I found in FAISS — the open-source library built by Meta (yes, the artist formerly known as Facebook 😂) — has finally been published!
Reported back in Jan 2026, now public. Binary exploitation nerds, dig in
#infosec #pwn #bugbounty #FAISS #Meta
Our founder @ahmtbrt07 breaks down a real-world vulnerability pattern for the next generation of researchers 👇
New to bug bounty? This is a great one to start with.
#bugbounty #cybersecuritytips #ethicalhacking
bugTricks# Session Not Invalidated After Password Change
1- Login with two active sessions (e.g. browser + mobile, two different browsers, or a fresh login in incognito — must be a separate login, not a copied cookie) — simulate victim + attacker session
2- From Session A, capture any profile action (username change, password change, etc.) in Repeater
3- From Session B, change the account password
4- Go back to Repeater (Session A) and resend the same old request
5- If you still get 200 OK and the action succeeds — congrats, the old (attacker) session was never revoked, meaning password change does not kick out other active sessions 🎯
Impact: If an attacker already has a valid session (stolen cookie/token, shared device, etc.), changing the password does not revoke their access — account remains compromised even after the fix.
#bugbounty #ethicalhacking #cybersecuritytips
Sometimes the best news isn't finding a vulnerability — it's proving one can't exist.
After an exhaustive security assessment, our founder @ahmtbrt07 confirmed that SSRF attacks are not possible against our webhook. Here's what we threw at it:
Every IP encoding variant (hex, octal, decimal, mixed)
nip.io / xip.io DNS trickery
HTTP redirect chains (302, 303, 307, multi-hop)
DNS rebinding via our own server
Split-horizon DNS rebinding
Result: All blocked. The webhook stood firm.
Why share a "failure"? Because in security, proving robustness matters just as much as finding flaws. Every test that fails to exploit is a win for our users.
Security testing continues. Stay tuned. 🛡️
DM for pentesting quotes & security consulting
#cybersecurity #webhooksecurity #ssrf #penetrationtesting #redteam
webhook safe :(
1- tried all encoding types and mixed encoding types
2- nip.io etc service testing
3- redirect chain
4- dns rebinding attack (own server)
5- split-horizon dns rebinding
i feel pain maybe next and i need other vuln type tests
#bugbounty #ethicalhacking #cybersecurity #SSRForever
Check out the latest SSRF study by our founder @ahmtbrt07
#bugbounty #cybersecurity #ssrf #ethicalhacking
