Ethical Hacker Synack SRT • OSCP • OSWE • H1 DM “HACK” for 1-1 coaching
Remote
Joined November 2017
- Tweets7.2K
- Following143
- Followers1.4K
- Likes4.8K
Pinned Tweet
3 most underrated Public Programs for Bug Hunting:
1. AT&T
2. Epic Games
3. 1Password
What’s your fav?
To those who are wondering, how to choose a Bug Bounty program,
@0xConda has made a great insight here:
teapawt.net/0xconda/status/2115460…
I like these 4 writeups for Bug Bounty:
ORACLE DB: synack.com/exploits-explaine…
Apple: samcurry.net/hacking-apple
Chained: infosecwriteups.com/escalati…
FB: blog.orange.tw/posts/2020-09…
What are your favorites?
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
Bug Bounty IDOR edge case bypass:
id=attacker_id → id=victim_id
❌403 Forbidden
id=attacker_id → id[] = [ attacker_id , victim_id ]
200 OK✅Bypassed
{
"attacker_details": ... ,
"victim_details": ...
}
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
Mehul Panchal retweeted
Bug bounty has definitely changed.
I used to spend hours analyzing HTTP requests, switching back and forth between Firefox and Burp Suite.
Now, I open my terminal, point my AI skills at a target, intercept and analyze HTTP traffic using Burp Suite MCP, and offload heavy tasks to my HackBot running on a VPS.
But here’s the thing: AI doesn’t replace your hacking skills. It scales them.
The goal is to get really good at manual hacking first, then use AI to automate and scale what you already know.
Not the other way around.
You don’t start by building a HackBot and expecting it to hack for you when you don’t even understand what it’s doing.
Learn to hack first. Automate second. Scale third.
Keep hacking! ✌️
I learned about these 6 web frameworks for successful Bug Bounty:
1. Java Spring Boot
2. C# ASPNET Core
3. Python Django
4. NextJS
5. Python FastAPI
6. ExpressJS
What's your fav?
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
My 7 fav programming languages in Bug Bounty:
1. Bash - Quick automation
2. Python - Complex automation
3. Java - Mobile app code review
4. Javascript - Client-side code & Thick client code review
5. C/C++ - Exploit Dev
6. DotNet/C# - All MS stuff
7. Perl - Text Magic
I hate email newsletters, so I send telegrams.
t.me/+pFZIFQmZbT1hMjJk
Next time you are looking for a security audit.
Make sure the founder of that vendor firm is a competent hacker.
It’s better this way than to find yourself in a cryptographic failure.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
I like these 2 light OSS LLMs for Bug Bounty:
- Qwen3.5:4B
Context analysis and brainstorming
Give it internet tool, it will become a ninja.
- Phi4-mini:3.8B
All round friend.
These heat your hardware, but you get to use furious LLMs locally.
I hate email newsletters, so I send telegrams:
t.me/+pFZIFQmZbT1hMjJk