Singh Aditya retweeted
Rate limiting bypass = easy to find, easy to get rejected if done lazily.
New article covers 9 techniques that actually work (with commands): header spoofing, race conditions, parameter pollution & more. ☕
medium.com/meetcyber/rate-li…
Singh Aditya retweeted
Solid resource 😱 This is one of the most structured open-source prompt packs I’ve seen for bug bounty hunting!
@mdp_sec broke down their entire workflow into 10+ reusable phases:
→ Recon & surface mapping
→ Authenticated access setup
→ Endpoint & vuln-class sweeping
→ Browser-based walkthrough
→ Critical-impact hunting
→ Triage, dedup & validation
→ Independent verification gates
It’s Web2 focused, but the methodology is gold for anyone building AI-assisted security workflows. The evidence-first, phase-by-phase structure is exactly how you avoid hallucinated findings and actually produce reliable results: github.com/mdpsec/bug-bounty…
Singh Aditya retweeted
CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution
PoC: github.com/Boreas37/CVE-2026…
Singh Aditya retweeted
For anyone curious about how an actual POC might work for the recent #PHP vulnerabilities, here is a full report along with POC written in Python. #php2shell github.com/eness/php2shell-C…
Singh Aditya retweeted
Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.
github.com/pentestershell/ph…
Singh Aditya retweeted
Today we are in a security nightmare:
- Railway may have exposed customer environment variables and API keys
- SBI confirmed that customer records ended up on the dark web
- eMudhra's certificate keys were extremely weak (one was literally just the number 4)
- LiteLLM shipped a compromised version that steals credentials and includes a backdoor
- PHP released two critical remote code execution vulnerabilities (PHP2Shell)
- Node.js issued urgent security patches for a Brotli decoder remote code execution flaw, plus TLS and DNS issues and blocked the compromised eMudhra certificates
- Rajasthan gov systems were allegedly linked to the exposure of a large set of identity records
- OpenCode confirmed a breach that exposed AI provider API keys (OpenAI, Anthropic, Google) for a portion of Console users
- Plex Media Server vulnerabilities (Plex2Shell) are being actively exploited in the wild to install malware on unpatched servers
- GitLab fixed a critical CVSS 10.0 unauthenticated remote code execution flaw in its CI/CD regex compiler
Singh Aditya retweeted
they’re calling it the black October lmao.
> node.js: security vulnerability.
> PHP: critical RCE vulnerabilities.
> tensorlake: npm package infected.
> liteLLM: malicious PyPI + Docker releases
> Railway: customer secrets exposed
> zeabur - infrastructure breached.
> OpenCode: AI API keys exposed.
> OVHcloud CLI: official binaries backdoored.
> RankMath PRO: malware inside official plugin.
> TeamUpdraft: customer data compromised.
> ConnectWise: cloud backup identities compromised.
> SubQuery: backdoored npm package.
> GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity).
> eMudhra: certificate authority keys compromised (with downstream impact on Tailscale).
this some complete madness bro. 1/3 of the internet is fucked.
Singh Aditya retweeted
This was my first five-figure payout. It was a 2FA bypass I discovered in a very mature private program. The disclosure has been approved, so here’s the write-up! : mfrhnkhn.medium.com/multi-fa…
This quoted post is unavailable.
Singh Aditya retweeted
#plex2shell
CVE-2026-96652
CVE-2026-96654
CVE-2026-96655
CVE-2026-96656
github.com/code-zm/plex2shel…
Singh Aditya retweeted
Nice :)
http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
shodan.io/search?query=http.…
Singh Aditya retweeted
php2shell - CVE-2026-109618 / CVE-2026-109619 github.com/ikow/php2shell-po…
Singh Aditya retweeted
Bug Bounty Tip: Path Traversal via File Download
Look for:
GET /download?file=report.pdf or GET /export?name=invoice.docx
Test by injecting traversal sequences: ../../../../etc/passwd, ..%2f..%2f..%2fetc%2fpasswd, ....//....//etc/passwd, or absolute paths like /etc/passwd and C:\Windows\win.ini.
If the server returns file contents outside the intended directory, it may indicate Path Traversal, enabling sensitive file read, source code disclosure, credential theft, or full server compromise.
For more tips join our Telegram channel: t.me/bugbountyusa
#BugBounty #PathTraversal #LFI #FileDownload #InfoSec
Singh Aditya retweeted
I Asked How Guests Get Their Identity and Found a Meeting Logic Flaw — by Moaty Mohamed
medium.com/@moatymohamed897/…
Join us on Telegram:
t.me/bugbountywizard
#bugbounty #bugbountytips #bugbountytip
Singh Aditya retweeted
How I Found IDOR in a Travel Agency Application — by Jagadeeshan
jagadeeshan2004.medium.com/h…
Join us on Telegram:
t.me/bugbountywizard
#bugbounty #bugbountytips #bugbountytip
