an engineer by god's design.
pulling dreys
Joined August 2020
- Tweets818
- Following179
- Followers820
- Likes2K
Pinned Tweet
If you learn how to "go deep" in bug bounties before learning how to "go wide", you will have the ability to go deep into every asset you find when going wide. It just makes sense #bugbounty
p4 retweeted
Quick tip for new bug hunters: don't focus on AI agents. And If a hunter shares his exact agent setup, everyone just gets the same results and duplicate bugs. Nobody gives away their whole blueprint; they only share small tips.
p4 retweeted
Pwnbox is now officialy on Github too^^. If you like Pentesting, Reversing, Active Directory and more, including privacy and Zero Log config without needing to rice everything, try Pwnbox.
github.com/kernelstub/Pwnbox
p4 retweeted
As you guys know, I'm working on Talos, but the infra costs are getting pretty expensive and I can't really afford to cover it all myself.
So far, Talos has discovered 1 QEMU guest escape, 1 QEMU webserver RCE, 3 Ghost CMS RCEs, 4 Mustache.js RCEs, 1 Handlebars.js RCE, 2 Linux LPEs, 1 MariaDB RCE, and 1 Apache httpd RCE and a couple more.
If you're able to donate towards the infra, I'd really appreciate it. Anyone who helps out will get early access to try some of the scans.
XMR
4B1kJ1pRDT9TNEptAYA3ukXECmy4FeTP9Xh6FfPRU3Ld2gibvhwVWZkNcEdoVEsbq11R9TWvoKiFVSqBpBqzWSnKLWxHkmS
BTC
bc1qfchhysft0t5f0stvwcnw5lgznd7hssgkwv6pc5
ETH
0xcB78C57597CB94EDCc4F763BC6bb61f660f9B8ba
LTC
ltc1qtvfmk0ce9wgv8dp88qzhytnyj2f55a2qmunxgj
SOL
CocvM9rDAS998tN4bqD4GdFHJrgBWSB2r5zMH1xyupRS
p4 retweeted
How I Could've Accessed 17 Trillion Microsoft Records
blog.faav.net/how-i-couldve-… :)
I'm seeing a lot of my good friends do well for themselves. @dreyand_ @kirareysV2 @sin99xx @shreyas_chavhan @kuroOowannafly @AyushSingh1098 @neganspl01t @Bewgsyy @0xmicho1 @T3PO0 @Dr4g0n369 @Yassh_twts @efaav @__jkbrah__ @robotics8n and more yk who you are. Life is Great.
p4 retweeted
Just reported probably the most complex client-side ATO chain I’ve found in my career to @GoogleVRP (plus a few other cool vulnz!), can’t wait to write about it :)
devving exploits like this used to take me weeks, now we’ve cut it down to just a couple of days, wild times :P
p4 retweeted
Happy to be a part of the goated @zenith256 team -- you know where to reach out if you need an audit 😛
A gold medal, CISA acknowledged CVEs, and a pentest for Kanye West.
Meet Zenith auditor, @dreyand_.
From CTF beginnings to finding bugs in AT&T, Spotify, and the U.S. Department of Defense, let’s see what makes DreyAnd one of the best security researchers in the space.
p4 retweeted
i'm taking a pause from hacking to resume building bugbountyhunter.com. i regret closing it down and I shouldn't of done it. everything will be back online EXACTLY as it was very soon and i've got some big plans for the future. and yes, that includes zseano methodology v2 ;)
he started in 2025 and pwned every feature of a public programs MAIN APP. im proud of my boy but this just goes to show, anything is possible with the right mindset. keep up the great work twin. 🕷️🙏🏾
ok so my report detailing a PII disclosure was hit with a reply from the security team that says: "the report does not lead to a security risk or exposure of customer/PII". what is this about? @Hacker0x01