@yeswehack

Offensive Security & Exposure Management Platform 🎯 https://xitter.cf/t.co/57gODBq2WZ 👾 https://xitter.cf/t.co/ICc6RyhJTp 💡 https://xitter.cf/t.co/KNYxhkKuzt

 World
yeswehack.com
Joined July 2012
  • Tweets9.4K
  • Following3.4K
  • Followers43.4K
2KMedia
¡Sumate a @BancoGalicia Super Live Hacking Event! 🔥 En colaboración con Banco Galicia y @yeswehack organizamos un exclusivo evento de hacking en vivo durante la EKO Buenos Aires 2026. 🚀 🚩 ¿El objetivo? Banco Galicia. Los participantes van a tener la oportunidad de poner a prueba su seguridad, buscar vulnerabilidades y demostrar sus habilidades de bug hunting sobre un scope especialmente preparado para el evento. Durante el evento, no solo te vas a sumergir en el hacking, sino que también vas a poder colaborar con otros bug hunters, e interactuar con expertos en seguridad de Banco Galicia y YesWeHack. Y, por supuesto, habrá jugosos bounties y mucho swag para quienes encuentren bugs. 🤓💪 👀 La competencia estará abierta a los asistentes presenciales durante el miércoles y jueves de la EKO, pero todavía no podemos contarte todo. En los próximos días vamos a revelar las fechas, horarios, dinámica y todos los detalles para que puedas sumarte.
7
1
21
1,529
YesWeHack ⠵ retweeted
YesWeHack ⠵
@yeswehackSep 3
Our Bug Bounty Bulletin – featuring a research roundup, new hacking opportunities, technical advice & hunter Q&As – is now available on X! Inside: high-calibre research from @albinowax @t0xodile @garethheyes @olivier_boschko @citizenlab & more 👇

Bug Bounty Bulletin #21 – and the first on X!

Article · @yeswehack
1
5
54
4,796
We're thrilled to welcome @yeswehack as a Silver Sponsor of Bug Bounty Village at DEF CON 34! Their ongoing support helps us create a space for hackers to connect, learn, and push boundaries. #defcon #bugbounty #bbv #bugbountyvillage
2
12
1,250
YesWeHack ⠵ retweeted
CryptoCat@_CryptoCatFeb 17
My writeup for the "RubitMQ" challenge by @Brumens2 (@yeswehack) 🐇 cryptocat.me/blog/ctf/monthl…

Ruby Object Injection to RCE via Oj Deserialization | YesWeHack Dojo: RubitMQ | CryptoCat's Blog

YesWeHack Dojo #48 writeup: exploiting unsafe Oj.load deserialization to inject a Node gadget and achieve command execution via find -exec.

cryptocat.me
3
5
23
2,781
🚨Bug bounty opportunity for ethical hackers: #OpenProject has launched a public bug bounty program via @yeswehack, supported by the European Commission. Learn how to participate and help secure open source: openproject.org/blog/bug-bou… #OpenSource #BugBounty #DigitalSovereignty
Man sitting in front of screens showing a developer console and OpenProject, with text overlay 'Bug bounty

ALT Man sitting in front of screens showing a developer console and OpenProject, with text overlay 'Bug bounty

4
2
7
1,079
YesWeHack ⠵ retweeted
RMC
@RMCInfo18 Dec 2025
📱 Des hackers piratent le ministère de l’Intérieur : des fichiers sensibles volés 🎙️ "Ça peut arriver partout", indique Pierre-Paul Giannetti, Consultant sécurité offensive YesWehack. "Ces mécanismes d'attaque ne sont pas nouveaux" #ApollineMatin
4
2
6
1,869
YesWeHack ⠵ retweeted
Swissky@pentest_swissky14 Dec 2025
Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere - @yeswehack yeswehack.com/fr/learn-bug-b…

Limitations are just an illusion - advanced server-side template exploitation with RCE everywhere

Some novel techniques for exploiting server-side template injections (SSTIs) with complex payloads that leverage default methods and syntax from various template engines. No quotation marks or extra...

yeswehack.com
10
40
5,009
Android Recon for Bug Bounty Learn how to extract APKs, find hidden endpoints & secrets before exploitation using tools such as: APKeep, APKTool, apk2url, jadx-gui, MobSF, MARA, Drozer yeswehack.com/learn-bug-boun… via @yeswehack
3
90
494
26,351
Check out this great article by @yeswehack on google dorking: yeswehack.com/learn-bug-boun…

Recon series #5: A hacker’s guide to Google dorking

An explainer for leveraging Google dorking (or hacking) techniques, which offer a simple, passive way to uncover crucial intel for potential vulnerabilities.

yeswehack.com
8
32
3,397
YesWeHack ⠵ retweeted
Icare@Icare133727 Nov 2025
new cve on Keycloack access.redhat.com/security/c… @truffzor @yeswehack
1
1
1
38
4,045
YesWeHack ⠵ retweeted
Swissky@pentest_swissky23 Nov 2025
The minefield between syntaxes: exploiting syntax confusions in the wild - @yeswehack yeswehack.com/learn-bug-boun…

The minefield between syntaxes: exploit syntax confusion in the wild

Learn syntax confusion techniques using filename*, file://host:port, and PHP parse_url to bypass filters, poison caches and escalate SSRF.

yeswehack.com
10
31
4,131
How to build Android Bug Bounty lab Guide to configuring emulators, real devices, proxies, Magisk, Burp, Frida by @yeswehack yeswehack.com/learn-bug-boun…
3
120
1
644
35,769
The best thing I've read in months. Outstanding research.
YesWeHack ⠵
@yeswehack23 Oct 2025
Replying to @yeswehack
Find the full article here ⤵️ yeswehack.com/learn-bug-boun…

The minefield between syntaxes: exploit syntax confusion in the wild

Learn syntax confusion techniques using filename*, file://host:port, and PHP parse_url to bypass filters, poison caches and escalate SSRF.

yeswehack.com
2
11
1
100
27,694
HackerNotes TLDR for episode 145! — blog.criticalthinkingpodcast… ►⠀Syntax Confusion: Two or more components in a system may interpret the same input differently due to ambiguous or inconsistent syntax rules. Learn more in @yeswehack's new blog: The Minefield Between Syntaxes: Exploiting Syntax Confusions in the Wild (yeswehack.com/learn-bug-boun…) ►⠀The Note GOAT: Download @gr3pme's note templates: ⠀•⠀General Template - terrific-dart-70e.notion.sit… ⠀•⠀JS Monitoring Template - terrific-dart-70e.notion.sit…

[HackerNotes Ep. 145]: Gr3pme's Secret: Bug Bounty Note Taking Methodology

A 'by Hackers for Hackers' podcast focused on technical bug bounty content.

blog.criticalthinkingpodcast.io
4
1
42
4,112
YesWeHack ⠵ retweeted
Clubic
@Clubic18 Oct 2025
Guillaume Vassault-Houlière présente les hackers éthiques de YesWeHack (cc @yeswehack) 🎥 🎙 C'était aux Assises de la cybersécurité (cc @Les_Assises) #YesWeHack #ethicalhacking #hackeréthique #cyber #cybersecurity
1
5
2,233
YesWeHack ⠵ retweeted
Amr Elsagaei
@amrelsagaei1 Oct 2025
Still amazed at how fast things move on @yeswehack Reported a bug this morning → accepted within 1 hour → fix pushed another hour later! Incredible turnaround 👏
3
2
23
4,505
YesWeHack ⠵ retweeted
Ali@s@_Ali4s_29 Sep 2025
Thank you @yeswehack, swag pack received! You guys are the bosses! #BB #DOJO
3
1
24
2,283
YesWeHack ⠵ retweeted
CryptoCat@_CryptoCat21 Aug 2025
My writeup for the July Dojo challenge on @yeswehack - CCTV Manager 🎥 1️⃣ Predict the correct token to access the CCTV manager (insecure time-based PRNG) 2️⃣ Exploit the yaml.load() function to achieve RCE Read the full writeup and PoC script ➡️ book.cryptocat.me/ctf-writeu…
CCTV Manager (YWH July Dojo)

ALT CCTV Manager (YWH July Dojo)

1
6
50
3,938
Good writing here by @yeswehack. When I get nostalgic on recon, I often 'dig' into the past using some variation of what's mention in the article, though my approach is more manual than tools (by simply spending more time on wayback machine). yeswehack.com/learn-bug-boun…

Excavating hidden artifacts with Wayback Machine, archive-recon tools

Learn and leverage the lessons of internet history: on the merits of archive-based recon plus some useful commands and tools for performing these techniques.

yeswehack.com
2
23
105
7,081
YesWeHack ⠵ retweeted
leHACK@_leHACK_25 Jun 2025
🇬🇧🔓 Hack live, earn real 💰 @YesWeHack’s Live Bug Bounty is back @ leHACK! 🗓️ June 28–29 | @ Le Loft 🎯 Exclusive target, open to all attendees 🎟️ billetweb.fr/lehack-2025-the… 🕹️ yeswehack.com/page/yeswehack… #leHACK #BugBounty
1
1
16
2,205
Load more