Product Security Engineer | OSWE | Whitehat | AppSec and Bug Bounties 🐞
0.0.0.0
Joined March 2016
- Tweets3K
- Following1.2K
- Followers2.4K
- Likes15K
Pinned Tweet
🔍 Introducing Scopy
Tired of manually filtering out URLs that belong to scope? Scopy is here to help you out!
Scopy lets you quickly filter out URLs based on their domain or FQDN.
Give Scopy a try and let me know what you think!
github.com/xplo1t-sec/scopy
#infosec #BugBounty
It's up in AWS Security Bulletin and I got a CVE
aws.amazon.com/security/secu…
cve.org/CVERecord?id=CVE-202…
The AWS MCP Server has a tool called run_script which is heavily sandboxed and executes user controlled Python code. I found a bypass on that Python sandbox and was able to obtain command execution.
I wrote about this in my new blog:
xplo1t-sec.github.io/posts/b…
The AWS MCP Server has a tool called run_script which is heavily sandboxed and executes user controlled Python code. I found a bypass on that Python sandbox and was able to obtain command execution.
I wrote about this in my new blog:
xplo1t-sec.github.io/posts/b…
copy.fail/
It's legit guys. Root on any linux distro since 2017
${Manash} //xplo1t retweeted
I pointed claude opus at chrome and told it to build a full v8 exploit for discord.
A week of back-and-forth pulling it out of dead ends. 2.3B tokens. $2,283 in API costs, and it popped a shell.
hacktron.ai/blog/i-let-claud…
I found a vulnerability in Gemini CLI that allowed execution of arbitrary commands even if it was blacklisted by the user.
I wrote about it in my latest blog: xplo1t-sec.github.io/posts/e…
Thanks to @GoogleVRP for the bounty
#security #BugBounty #googlevrp #geminicli #infosec
${Manash} //xplo1t retweeted
🚀 Giveaway time! 🚀
We’re giving away 3-week access plans to iScan.today 🔍
To enter:
✅ Follow me
✅ Like & RT this tweet
✅ Comment "iScan.today"
Winners will be announced in 24 hours 🎉
${Manash} //xplo1t retweeted
🚨 OSCP GIVEAWAY ALERT🚨
We’re giving away 3 OSCP vouchers to supercharge your pentesting journey – proudly sponsored by @offsectraining ! 💥🙌
To enter:
1.✅ Follow Us
2.🔁 Retweet this post
3.❤️ Like this post
4.💬 Reply with your funniest cybersecurity meme
🎯 We’ll pick 3 random winners – don’t miss your chance to win the gold standard in offensive security!
🗓️ Deadline= 20 June
Let the hacking+meme battle begin! 🧠💻
#OSCP #OffSec #Giveaway #BSidesAhmedabad #Infosec #Cybersecurity
${Manash} //xplo1t retweeted
🚨New giveaway alert🚨 We are giving away some vouchers for @offsectraining
* 1x PEN-200 Course and Cert exam bundle (OSCP)
* 1x Learn Fundamentals Subscription
* 1x Annual PG Practice access
Read the full post to learn How to participate:
1⃣Subscribe to our youtube channel (youtube.com/@BugBountyVillag…)
2⃣Follow us on tiktok (tiktok.com/@bugbountydefcon)
3⃣Like ❤️ and retweet 🔁this post.
This is one of the biggest giveaways we have ever made. We will select 3 winners. Total value of these rewards is around $3.000 USD in value 😱. Thanks @offsectraining for providing these ❤️!
Note: You need to be 18 or older to claim the rewards!
We will announce winners here on Friday 5/16.
Good luck!
${Manash} //xplo1t retweeted
Hi guys, I am actively looking for a new role in the domain DFIR, Threat Hunting, Threat Intelligence, Detection Engineer. I do:
- proactive & reactive TH
- adversary emulation
- detection rule creation
- CTI Analysis
- forensics
- threat analysis
Thanks!
Found a security vulnerability in any site?
Check if it has a public bug bounty program:
xplo1t-sec.github.io/bugboun…
#BugBounty #bugbountytip
${Manash} //xplo1t retweeted
The record of my talk at DEFCON is finally out! Go check media.defcon.org/DEF%20CON%2… to see a few surprising bugs I found in my bug bounty career :p
#bugbounty
${Manash} //xplo1t retweeted
Boost your API security skills with DVAPI! 🚀 Learn hands-on with OWASP API Top 10 - 2023 to spot and fix common vulnerabilities.🔍
Ref: blog.bytehackr.in/api-securi…
@payatulabs DVAPI 👨💻
#APISecurity #DVAPI #OWASP #CyberSecurity #API #EthicalHacking #SecureCoding #DevSecOps
${Manash} //xplo1t retweeted
Introducing Burp Suite's latest performance upgrades ⚡
We've listened to your feedback and made our core tools faster, more efficient, and use less memory.
Here's a glimpse of what's new. 🧵👇 #BurpSuitePerformance
Yay, I was awarded 2 bounties on AmazonVRP @Hacker0x01! hackerone.com/xplo1t #TogetherWeHitHarder #bugbounty
${Manash} //xplo1t retweeted
‼️ Excited to share my first blog ‼️
Follow and Stay tuned to learn together, more cool stuff is on the line.....
@ADITYASHENDE17 @Virdoex_hunter @GodfatherOrwa @th3cyb3rc0p
@0xblackbird @hetmehtaa
@zseano @manash036 @bug_vs_me
samuelvalmiki.com/post/open-…
${Manash} //xplo1t retweeted
The whitepaper is live! Listen to the whispers: web timing attacks that actually work. Read it here ->
portswigger.net/research/lis…
