Debugger 🐞 • Hacker 👾 🐱‍💻 • Security enthusiast 🤓 • Senior Security Analyst 💻 • Speaker🎙️• Occasional Blogger 📝 & CTFs 🚩 • Poet ✍🏻

शून्य
Joined October 2011
Sameer Bhatt (Debugger) retweeted
Published our high fidelity scanner for node2shell: github.com/assetnote/node2sh… Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
5
77
2
365
18,627
Sameer Bhatt (Debugger) retweeted
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
19
250
29
778
178,701
Sameer Bhatt (Debugger) retweeted
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
88
189
31
1,856
130,993
Sameer Bhatt (Debugger) retweeted
Do you know who illustrated the comic on calif.io/php2shell? Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax. This artist-hacker couple has the best story, stay tuned!
30
140
19
1,175
138,018
Sameer Bhatt (Debugger) retweeted
Team work makes the dream work <3 We wanted to do something a bit different than using LLM's to generate all the pieces from exploit, writeup and art. We decided on a human created comic to offset the LLM usage in our release, that tells the tale with some exaggerated scenarios inspired from a few movies. If you liked the art (or want your own exploit story/comic..) check out her work at ibiscraft.art
Do you know who illustrated the comic on calif.io/php2shell? Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax. This artist-hacker couple has the best story, stay tuned!
44
35
8
330
32,648
Sameer Bhatt (Debugger) retweeted
Today I'm introducing two new open source IoT firmware analysis tools: Moria and Mithril Moria is a firmware extraction tool just like binwalk and unblob, except for one major difference: ZERO external extractor dependencies! No more relying on ancient and unmaintained extraction utilities with numerous bugs / patches. EVERY filesystem extractor has been rewritten in 1st party C++ to be fast and flexible. Mithril is moria's companion. It scans extracted filesystems for secrets and SBOM. Correlates CVEs. Syncs with NVD, EPSS and KEV datasets. Check out my blog post where I kick the tires: brownfinesecurity.com/blog/i…
21
113
7
494
19,964
Sameer Bhatt (Debugger) retweeted
Shodan Membership sale is live until 2026-08-09 00:00 UTC (~48 hours from now): account.shodan.io/billing/me…
76
489
109
1,439
500,896
Sameer Bhatt (Debugger) retweeted
Kudos to @sameer_bhatt5 for finding a bug in Mailpoet and helping us in getting it addressed.
Sameer Bhatt (Debugger) retweeted
🚨 Brutal showing: security researcher Orange Tsai just made $375,000 in 24 hours at Pwn2Own Berlin 2026. He landed both Microsoft Edge AND Microsoft Exchange in back-to-back demos. - Day 1: Chained 4 logic bugs to escape the Microsoft Edge sandbox. Payout: $175,000 - Day 2: Took down Microsoft Exchange in the Server category. Payout: $200,000 Congrats 🥂
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
8
59
2
719
65,534
Sameer Bhatt (Debugger) retweeted
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
25
174
60
1,537
286,057
Sameer Bhatt (Debugger) retweeted
Needle in the haystack: LLMs for vulnerability research I've distilled my experience of sending thousands and thousands of prompts for using LLMs to discover vulnerabilities into a single write-up. These are the conclusions I came to.. (link in comment)
20
184
6
1,031
66,318
Sameer Bhatt (Debugger) retweeted
👼GatewayToHeaven (CVE-2025-13292). I discovered a cross-tenant vulnerability in @GoogleCloud's #Apigee, allowing me to access other organizations' data (and sometimes even plaintext JWTs of end users). Below is the full breakdown of the exploit chain⛓️
12
109
4
554
64,685
Sameer Bhatt (Debugger) retweeted
Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK ($66,000) ysamm.com/uncategorized/2026…
16
109
8
865
46,066
Sameer Bhatt (Debugger) retweeted
We've published a new blog post by RyotaK @ryotkak He discovered 8 methods to bypass safety mechanisms in Claude Code, leading to arbitrary command execution. We recommend updating to v1.0.93 or later to fix this vulnerability (CVE-2025-66032). flatt.tech/research/posts/pw…
3
82
5
251
75,370
Sameer Bhatt (Debugger) retweeted
Ironically, there is nothing more expensive than being poor. You likely had an unhealthy lifestyle that you never noticed because everyone around you had the same. You were stuck in a job that didn't allow you to become who you wanted to be, but you had so many urgent fires to put out, you had no way out. You wasted so much time and energy commuting every day because living hours away from your workplace was all you could afford. Any signs of ambition got shot down by your fellow "crabs in the bucket" who projected their insecurities on you, and who didn't want you to leave them behind. You've been learning the price of so many things, but you now have to learn the value of the things that matter. You had to unlearn all the lies and wrong beliefs that you were fed in a society where average people (with a bit of money) are always confidently wrong. Especially, you once genuinely believed that the game was fair and that "hard work" alone would get you rewarded. You had to relearn how to not live in the constant fear of being taken advantage of, and how to play games that make you thrive as a person, and not just survive. Especially, you had to rebuild your self-esteem, and understand that you can achieve way more than you think, but only if you have the courage to follow an independent path. And finally, you had to cultivate the mental strength to accept the painful fact that you had a very late start, but it doesn't matter, because you can start climbing today, and you will look back in many years with true confidence and a bit of pride, to the sight of everything you had to overcome to build the life you wanted.
33
149
10
935
76,875
Sameer Bhatt (Debugger) retweeted
If you could go back to the very start of your security/hacking/bug bounty journey, what is 1 piece of advice you would share with yourself? #bugbounty #hacking #hacker #security
25
17
3
173
27,339
Sameer Bhatt (Debugger) retweeted
With only 48 hours remaining in a bug bounty event, I used @HacktronAI CLI to perform large-scale analysis of several JDBC drivers. Netting $85,000 in total rewards. This write-up shows how AI-assisted vulnerability research is speeding up the work of researchers and leading to high-impact findings. Read here - hacktron.ai/blog/jdbc-audit-…
13
82
5
336
53,232
Sameer Bhatt (Debugger) retweeted
Amsterdam brought the 🔥! @salesforce + #H13120 = one incredible Live Hacking Event 🇳🇱 Security researchers tackled AI challenges head-on—finding vulnerabilities, sharing insights, and shaping the future of secure innovation. #HackForGood #AISecurity #TogetherWeHitHarder
8
8
2
116
12,777