@sshbounty

fixing printers and Learning how to code, hack :)

Joined August 2022
  • Tweets955
  • Following347
  • Followers342
14Media
Yay🥳, I was awarded $750 bounty on @Hacker0x01! #TogetherWeHitHarder It's my first ever bounty. It took me 2 years to get my first payout. Yeah,it took me that long to get a reward and I am so glad I did it. A little tip for those who are struggling with bug bounty hunting A 🧵
49
94
7
555
Highlights from my feeds this morning. Good security research is so hot rn - blog.doyensec.com/2026/10/13… - blog.trailofbits.com/2026/10… (GOOD HARNESS!) - daniel.haxx.se/blog/2026/10/… Background on the curl vuln - blog.quarkslab.com/myreport-…
4
33
1
256
12,734
It’s been a minute… two years, to be exact 😅 I’m finally bringing my YouTube channel back! The plan is to post a new video every other Wednesday at 2 PM Qatar time (7 AM EST). We’ll pick up where we left off and finish the Business Logic Vulnerabilities labs before moving on to the next topic. Make sure you’re subscribed so you don’t miss the new videos! YouTube channel: youtube.com/@RanaKhalil101
3
4
54
3,373
My First Article, if you like it retweet ♥, ill do more ♥

The Amazing Shodan

Article · @GodfatherOrwa
10
127
2
533
15,146
I had a wonderful time speaking at RomHack 2026! 🇮🇹 This was my first camp-style conference, and I really enjoyed the experience. It was great to be part of such a welcoming community and connect with so many people passionate about cybersecurity. A big thank you to everyone who attended my talk and to everyone who came up to say hi throughout the conference. It was lovely meeting you all and having the chance to chat! 😊 Thank you @cybersaiyanIT for a great experience!
2
10
120
4,027
Full disclosure next week.
26
22
1
471
22,208
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
137
221
86
2,821
571,298
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agentic… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/p…

Agentic Hacks, Real Proofs: Inside Google's PageBreak Project

Security landscape in 2026The application of Large Language Models (LLMs) to security scanning has revolutionized the vulnerability management landscape. But, it has als…

blog.google
22
198
9
1,209
98,669
rahmetu retweeted
Faav
@efaavSep 25
How I Could've Accessed 17 Trillion Microsoft Records blog.faav.net/how-i-couldve-… :)

How I Could’ve Accessed 17 Trillion Microsoft Records

How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.

blog.faav.net
69
275
50
1,740
254,668
rahmetu retweeted
shubs
@infosec_auSep 26
one of my engineers reached out to me about how they struggled to find satisfaction in their work in the age of AI. I asked them if I could publish our brief exchange, and they agreed. I know people are feeling similarly, so maybe they can relate. shubs.io/do-we-still-enjoy-s…

do we still enjoy software engineering in the age of AI?

A few weeks ago, one of the software engineers I manage sent me a message about how they have been struggling to find satisfaction in their work ever since AI has eroded much of the creativity and...

shubs.io
12
81
5
434
41,606
fbi job portal defaced and compromised? oh yeah, it's a silly tuesday
51
312
24
4,181
140,621
''No Username. No Password. Just a Header — A $3,000 Authentication Bypass'' #infosec #pentest #redteam #blueteam medium.com/@0xalr/no-usernam…

No Username. No Password. Just a Header — A $3,000 Authentication Bypass

First of all, Alhamdulillah. Every finding teaches something new, and this one reminded me that sometimes the most critical vulnerabilities…

medium.com
1
75
2
526
55,467
Anthropic Caught Hackers Doing This So I Rebuilt It in a Few Hours 👉🏼 youtu.be/qCairuRHtD0
2
30
302
15,799
rahmetu retweeted
s1r1us
@S1r1u5_Sep 18
"3 random dudes” 1. hacked apple, again and again. httpvoid.com/Apple-RCE.md httpvoid.com/Hello-Lucee!-Le… httpvoid.com/Hacking-Apple-w… 2. your github enterprise is our github enterprise. httpvoid.com/GitHub-Enterpri… 3. get a discord message from me, get pwned. hacktron.ai/blog/discord-rce youtube.com/watch?v=R3SE4VKj… 4. oh yeah, at one point we basically had shells across the electron ecosystem. check the DEF CON research. media.defcon.org/DEF%20CON%2… 5. your supabase database is my database. hacktron.ai/blog/supapwn 6. we got the posthog prod database. hacktron.ai/blog/posthog-rce 7. react2shell? vercel paid us $170k for helping secure their waf. hacktron.ai/blog/react2shell… 8. your palo alto vpn is my vpn. hacktron.ai/blog/cve-2026-02… 9. ai ides? we got shells for you, antigravity hacktron.ai/blog/hacking-goo… 10. windsurf rce. youtube.com/watch?v=23Mz7qcR… 11. turning cluely into malware. hacktron.ai/blog/hacking-clu… 12. ai browsers? sure, uxss: your perplexity browser is my browser. hacktron.ai/blog/perplexity-… 13. openai atlas too. kinda uxss hacktron.ai/blog/hacking-ope… 14. hey, it’s not even our first time hacking discourse. projectdiscovery.io/blog/dis… 15. adobe coldfusion: pre-auth rce. because apparently we needed another one. projectdiscovery.io/blog/ado… there’s a lot more. go dig. anyway, yes: “3 random dudes.” and @HacktronAI is full of more random dudes like these.

Finding 0day to hack Apple

Getting started We started hacking on Apple after the infamous blog post by Sam, et al. The goal was to focus on critical findings such as PII exposure or getting access to Apple’s servers/internal...

httpvoid.com
70
238
27
2,085
181,712
Five years ago I quit a job I loved at Bugcrowd to start my own thing. I wrote "I am scared" in the announcement blog, because I was. Going from hacker to founder taught me a few things. Employment is trading freedom for predictability. Technical skill is maybe 20% of running a business and the rest is sales, cashflow, and getting comfortable with not knowing what happens next. The obsessive streak that makes you good at hacking doesn't go away when you start a company. It becomes the entire job. I didn't know if it would work. I did it anyway.
13
4
94
5,981
rahmetu retweeted
Bee 🐝
@securibeeSep 8
Typical @securinti 🤯
Inti De Ceukelaire@securintiSep 8
how i hacked 320+ companies that replaced their cs team with "smart" ai agents: 1. drafted a gdpr request to support@ 2. changed the FROM header from my e-mail to yours (spoofing) 3. put myself in CC 4. ai agent responds with YOUR data to BOTH of us 😈 more tricks: @intigriti
1
2
831
i had AI read all 1,520 bug bounty reports i've submitted since 2014 and told it not to protect my feelings. Three things i didn't want to hear: - the bugs that built my career don't exist anymore - my dupe rate went UP over 12 years - 685 of those reports never paid me a dollar 👉🏼youtu.be/wKodzXgXbWg
21
16
2
321
33,312
how i hacked 320+ companies that replaced their cs team with "smart" ai agents: 1. drafted a gdpr request to support@ 2. changed the FROM header from my e-mail to yours (spoofing) 3. put myself in CC 4. ai agent responds with YOUR data to BOTH of us 😈 more tricks: @intigriti
35
121
20
1,429
135,665
hehe
22
😂😂😂
9
2
103
10,634
rahmetu retweeted
careful
@pgpAug 24
leaking Microsoft employee secrets through diagnostic data: careful.net/blog/powerlift/

leaking Microsoft employee secrets through diagnostic data | careful.net

a collaborative hunt: finding access tokens, Copilot chat logs, and other private information inside Microsoft employee diagnostic data

careful.net
4
15
2
75
12,771
Load more