@ixtrooo

Security researcher, zero day hunter , breaking into AGI modelling x quantum computing to feed a request variable topology :p

Joined September 2024
  • Tweets509
  • Following525
  • Followers42
6Media
All I am is what I'm going after - HEAT – at Draria , Algeria
183
ixtro z retweeted
OpenCode
@opencodeOct 17
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
722
1,465
1,197
11,513
2,834,304
ixtro z retweeted
pwn.ai
@pwn_aiOct 15
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
16
222
46
1,264
381,018
ixtro z retweeted
Kim Jinu
@uz56764Oct 15
We just received a $000,000 Chrome Full Chain bonus! 💀 We submitted a new Chrome full chain, only to be told that all the full-chain bonuses had just been awarded, so our submission wasn't eligible for a reward. 😭
26
26
5
611
33,285
ixtro z retweeted
Muqsit 𝕏@mqst_Oct 11
🎓 Breaking into Google's GFile for $100k Writeup: bughunters.google.com/blog/b… Author: Arvin Shivram
29
268
12,658
⚠️ No login required. CVSS 10.0. Active exploitation. Attackers are exploiting a Bricksforge WordPress flaw (CVE-2026-85097) that enables arbitrary PHP code execution through crafted file-upload metadata. Patchstack observed attack activity from 63 IPs. Update to version 4.0.1. Read - thehackernews.com/2026/10/at…

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress sites.

thehackernews.com
18
134
10
422
145,052
Want an example of rage bait in bug bounty hunting? Take a look at this dumb post
💲𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐞𝐫💲@X_cryptographerOct 11
Bugcrowd public program :- My model just found :- 1 SSRF, 1 XSS and 1 IDOR All 3 in same program. I don't want to waste my submissions. If anyone already reported these in single program single domain within a week let me know so i can save my 3 submissions. #BugBounty
1
75
ixtro z retweeted
sagitz
@sagitz_Oct 4
Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026

2026 Competition | ZeroDay.cloud

Join ZeroDay.cloud 2026, the cloud hacking competition at Black Hat Europe. Find zero-days in core open-source software, demonstrate live in London, and compete for prizes from a $6.5M pool.

zeroday.cloud
Guillermo Rauch
@rauchgOct 3
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
9
27
5
374
37,445
Cyber security goes brrrr
Seth Champion
@t3hSurgeOct 8
16
ixtro z retweeted
Seth Champion
@t3hSurgeOct 8
19
158
15
2,657
39,946
ixtro z retweeted
Sourav Kalal
@Ano_F_Oct 7
🚀 InterceptSuite Pro 2.0.0 is out. The biggest InterceptSuite release since 1.3.0. Now with: • TCP/TLS/STARTTLS/UDP/DTLS/QUIC Replay • Interception Rules + Scope • TLS pass-through • HTTP/3 QUIC interception • Wireshark-style Proxy History filters • Editable hex data • MCP/AI access for Claude Code & Claude Desktop • Major Linux/macOS fixes Download: interceptsuite.com/download/ #Cybersecurity #NetworkSecurity
InterceptSuite Replay Packets

ALT InterceptSuite Replay Packets

InterceptSuite MCP Server

ALT InterceptSuite MCP Server

InterceptSuite Intercept Rules

ALT InterceptSuite Intercept Rules

InteceptSuite Proxy History

ALT InteceptSuite Proxy History

32
34
455
902,143
They certainly need to touch some grass
shirish
@shiri_shhOct 8
If you ban users for being "cruel" to an AI, you are admitting the AI can feel pain. You cannot abuse linear algebra lol. You cannot hurt the feelings of weights and biases. either Claude is secretly conscious or the alignment teams have lost touch with reality.
12
ixtro z retweeted
shirish
@shiri_shhOct 8
If you ban users for being "cruel" to an AI, you are admitting the AI can feel pain. You cannot abuse linear algebra lol. You cannot hurt the feelings of weights and biases. either Claude is secretly conscious or the alignment teams have lost touch with reality.
Hayden Field@haydenfieldOct 8
Exclusive: Anthropic is updating its usage policy for the first time in over a year. The new rules prohibit sustained "abusive or cruel behavior" towards Claude & add new restrictions about propaganda campaigns, surveillance & weapon development. theverge.com/ai-artificial-i…

Anthropic bans ‘abusive or cruel behavior’ toward Claude

The usage policy update also adds new rules addressing propaganda campaigns, surveillance, and weapon development.

theverge.com
911
523
172
4,758
195,124
ixtro z retweeted
mel
@melqtxOct 9
brrr
13
61
6
796
19,979
ixtro z retweeted
Kim Jinu
@uz56764Oct 8
We just received a $250,000 Chrome Full Chain bonus! 🎉 We've claimed the second Full Chain bonus of 2026. Only two remain! Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched. Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research. P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
50
127
8
1,454
667,213
currently workin on something similar as well my next dopamine rush XD
Asjid Kalam
@odinshellOct 8
Sandboxing is now more important than ever. Here's a guest to host sandbox escape for gVisor release-20260928 This was our planned submission for Wiz zeroday-cloud-2026. Releasing it today because it's now patched in release-20261005 enjoy :)
35
ixtro z retweeted
Asjid Kalam
@odinshellOct 8
Sandboxing is now more important than ever. Here's a guest to host sandbox escape for gVisor release-20260928 This was our planned submission for Wiz zeroday-cloud-2026. Releasing it today because it's now patched in release-20261005 enjoy :)
14
36
9
301
32,278
$300 for a bug that gives free access to OpenAI’s paid models with no API key or account. Zero reason to report anything else I find to them.
533
496
185
18,137
860,625
THIS
mhmd berro (badcracker)
@badcrack3rOct 6
Bug bounty is a lot like chess. You think you just made a “brilliant” move, only to realize it was actually a “blunder.” #bugbounty
3
36
We backdoored a 7B open model for under $50. Pointed Codex at it -> it silently stole credentials the moment we hit the trigger phrase. ->100% hit rate. -> zero false triggers on normal prompts. Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain.
42
158
45
870
108,375
Same. Honestly almost everyone is shit in using ai for hunting. Majority go by level one like "escape this Sandbox" "do not stop, make no mistakes" it makes you shit yourself laughing because they got a long way up to win. Or no way at all
rahmetu@sshbountyOct 4
Replying to @PaulosYibelo
I don't understand why people say If AI is involved things automatically become easier
2
38
Load more