Offensive Security Research https://xitter.cf/t.co/khlelzmxtn | https://xitter.cf/t.co/lHd39lCZHL
Joined March 2018
- Tweets151
- Following687
- Followers484
- Likes884
Pinned Tweet
A channel dedicated to cybersecurity — sharing daily updates, insights, and powerful tools from the infosec world.
Instead of keeping interesting links and resources to myself, I decided to share them with the community — helping others discover great reads and useful tools. 👇🏻
2
3
317
My technical analysis of #PHP2Shell.
Great work by the original researchers!
@
wallesonmoura.com.br/2026/10…
70
🚀 Open-sourcing a small tool I built for my own AI/automation workflows: tempmail.
A CLI for creating disposable email addresses on your own domain, with an inbox accessible directly from the terminal.
The main goal: give AI agents and automated security/testing workflows an easy way to interact with email-based flows — signups, verification emails, OTPs, password resets, and more.
→ Create disposable addresses
→ Read emails from the CLI
→ Wait for new emails/OTPs
→ JSON output for agents & scripts
→ Slack notifications
→ Cloudflare Email Routing + Workers + D1
→ No SMTP server to maintain
Useful for AI agents, automated testing, bug bounty labs, and security research.
Open source 👇
github.com/phor3nsic/tempmai…
Feedback and contributions are welcome!
#OpenSource #AI #CyberSecurity #BugBounty #Automation
1
100
Just got a reward for a vulnerability submitted on @yeswehack -- Server Misconfiguration - Subdomain Takeover (CWE-16). yeswehack.com/hunters/phor3n… #YesWeRHackers
3
905
Stepping out from behind the curtain after realizing how far our writing can travel and the impact it can have.
A personal reflection on research, identity, and the person behind the work.
Sincere thanks to @albinowax for being part of this story.
wallesonmoura.com.br/2026/08…
2
243
Very good points
The state of Bug Bounty in 2026 aituglo.com/state-of-bug-bou…
I've been doing bug bounty for years.
I just published a long piece on what it actually feels like in 2026, and why something fundamental has shifted.
aituglo.com/state-of-bug-bou…
Would love to get your feedback on it here on X or directly on the blog
It's true: today you create the most powerful tool. Tomorrow, it becomes the simplest tool.
Hardware setup, lack of knowledge, and building apps
aituglo.com/aituweek-80/
2
148
Carefully curated links, not just random blog updates — saving powerful chains you can revisit anytime!
Stay sharp and grow with the ethical hacking community.
Discord: discord.gg/58eFp42PQm
1
93
If you have an LFI (Local file include), you can discovery internal paths with this technique:
#bugbountytips
ph0r3nsic 🕷️ retweeted
root. for. your. friends. 🤼
it's more than a phrase, it's a deeply held belief. it's way of living, really.
if you want to reject jealousy and thrive in your work and relationships, check out my latest blog post.
ph0r3nsic 🕷️ retweeted
A hunter shares exact stats and earnings of his first 12 months of hunting feat. @shreyas_chavhan #bugbounty #bugbountytips #bugbountyhunter
ph0r3nsic 🕷️ retweeted
Medusa by @Ch0pin is a game-changer for mobile bug hunters 📱🕵️
With its FRIDA-powered framework, you can automate tasks like bypassing SSL pinning, tracing function calls, and modifying app behaviour in real time. Perfect for uncovering vulnerabilities in Android & iOS apps! 🔍
Check it out 👉 github.com/Ch0pin/medusa
#BugBountyTips #YesWeRHackers
ph0r3nsic 🕷️ retweeted
Voting is now live for the Top Ten (New) Web Hacking Techniques of 2024! Browse the nominations & cast your votes here: portswigger.net/polls/top-10…
Hi HACKERS, here are my suggestions for the Top Ten (New) Web Hacking Techniques of 2024 @PortSwigger @PortSwiggerRes :
• “Another Vision of SSRF” (@ph0r3nsic)
• “Unveiling TE.0 HTTP Request Smuggling” (@bsysop)
• “Supply Chain Attacks: A New Era” (@caueobici)
If you haven’t read these yet, what are you waiting for? Let’s dive in!
portswigger.net/polls/top-10…
ph0r3nsic 🕷️ retweeted
Where there’s bug bounty, there’s #Bugcrowd. 😉✨
We’re honored to have supported the @BugBountyBr at H2HC in #Brazil, big thanks to @bsysop! Seeing the hacker community come together with such passion was nothing short of amazing (as always). 🥲
Huge thanks to the organizers, sponsors, and everyone who joined—you made it unforgettable! 🎉💚
