Retweet Information Security
Mumbai, India
Joined September 2017
- Tweets3.4K
- Following226
- Followers20
- Likes138
radioactivee retweeted
After 2 days of struggling, Bypassed a strong XSS filter on one of the private program. 🔥
[ No '>' was allowed , no Html tags, Character length 35 ]
XSS Payload used: 👇
<svg onload="alert(1)" <="" svg=""
@avanish46
#bugbountytips #bugbountytip #bugbounty
radioactivee retweeted
I found this interesting "403 Forbidden" Bypass; through "Microsoft-Azure-Application-Gateway/v2"
1. Accessing the URL returns "403 Forbidden"
2. Appending the query "?x=.js", successfully bypasses the Azure restriction leading to direct access to the restricted resource.
radioactivee retweeted
php2shell - CVE-2026-109618 / CVE-2026-109619 github.com/ikow/php2shell-po…
radioactivee retweeted
Another good hunt tonight. Nginx merge slashes path traversal vulnerability in one of the popular tech giant.
Path Traversals can be soo simple. 🔥
Payload: GET ///////../../../etc/passwd
Credit: @__nav1n_
#bugbountytips #bugbountytip #bugbounty
@ZTEPress @ZTEPress @zteusa @ZTEDevice
I reported 8 High-severity security findings to ZTE PSIRT, based on the severity criteria defined in the program guidelines.
The findings involve multiple distinct attack paths, root causes, and security impacts. However, several reports
does not appear to reflect their documented severity and impact, it can be discouraging and make researchers question whether continued participation in the program is worthwhile.
A transparent assessment based on each finding’s root cause, exploitability, impact, and the
were consolidated, resulting in a significantly reduced combined bounty.
Researchers invest substantial time and effort into identifying, validating, and responsibly reporting vulnerabilities. When findings are consolidated without clear technical justification or the assessment
radioactivee retweeted
n8n just got a CVSS 10.0 public exploit.
CVE-2026-21858 (“Ni8mare”):
unauthenticated file read → full RCE. Working PoC is circulating.
Any internet-facing n8n that missed the patch is one request away from compromise.
github.com/Chocapikk/CVE-202…
#Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #RCE #AppSec
radioactivee retweeted
$12,000 Mozilla Bug Bounty 🤑
Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) by Griffin 🤯🔥
👨💻 Griffin (x/aussinfosec)
🔗 hackerone.com/reports/378270…
🔗 t.me/luckyhacker42
radioactivee retweeted
CVE-2026-62735 — Windows HTTP.sys Elevation of Privilege. hackmd.io/@nhh/Hy6Oem7_Me
radioactivee retweeted
If you're new to exploit development, reverse engineering or vulnerability research, bookmark this before buying another course.
Blackstorm Security has published 1,600+ pages of research for FREE.
Windows kernel exploitation.
Driver reversing.
Patch diffing.
Chrome / V8 / WebAssembly.
Hyper-V.
macOS / iOS internals.
Modern mitigation bypasses.
Real CVEs taken from root cause to working exploitation.
Their CVE-2024-30085 series alone spans hundreds of pages and multiple exploitation strategies.
This is the kind of material that teaches you how vulnerability researchers actually think, not just how to run tools.
19 research papers. 1,657 pages. Free.
Start here:
blackstormsecurity.com/resea…
Author: @ale_sp_brazil
Focus on the techniques not the tools (X64DBG, GHIDRA/IDA, WINDBG, GDB GEF)
#ExploitDevelopment #ReverseEngineering #VulnerabilityResearch
radioactivee retweeted
AIRCRACK-NG DEJÓ DE SER SOLO TERMINAL
Airgorah es una GUI en Rust + GTK4
para auditar redes WiFi que SÍ te pertenecen.
No inventa un exploit nuevo.
Le pone interfaz a la suite que ya usabas en Kali.
Qué hace, a alto nivel:
→ lista APs y clientes cerca
→ trabaja sobre aircrack-ng
→ GUI de usuario normal
→ lo privilegiado sale por un agent + polkit
→ corre en X11 y Wayland
Requisitos reales:
• Linux
• tarjeta con monitor mode
• permiso de dueño de la red
Lo que no es:
no es magia contra WPA3
no es “crackea cualquier casa”
no es un tutorial de ataque
MIT. 1.3k estrellas. v0.8.1
Guárdalo si auditás tu propio lab
y estás harto de memorizar flags.
repooo 👇👇
radioactivee retweeted
A PoC/exploit has been discovered for vulnerability in Apache Log4j2.
Vendor: Apache
Product: Log4j2
Description: A deserialization flaw in Log4j2's FilteredObjectInputStream allows the deserialization filter to be bypassed using java.rmi.MarshalledObject. Its embedded payload is processed by a separate unfiltered ObjectInputStream, allowing attacker-controlled gadget chains to be deserialized. In applications that expose serialized LogEvent processing and have a compatible gadget library available, the issue can lead to remote code execution without authentication.
Link: github.com/hypnguyen1209/log…
#dbugs_vuln
radioactivee retweeted
Need encrypted Netcat connections? 🔐
cryptcat lets you establish encrypted two-way communication directly from the terminal using Twofish encryption.
radioactivee retweeted
A new Log4j2 vulnerability storm is brewing.Log4j2 FilteredObjectInputStream Bypass Vulnerability .This is a critical remote code execution (RCE) vulnerability affecting Log4j versions 2.11.0 through 2.26.1.#Log4j2
github.com/apache/logging-lo…
radioactivee retweeted
🚨 Active Directory Enumeration Mindmap 🏰🔥
Before you exploit Active Directory...
Master Enumeration.
This mindmap covers the methodology every pentester should know:
🔍 User Enumeration
🖥️ Computer Enumeration
👥 Group Enumeration
🏰 Domain Enumeration
🌲 Forest Enumeration
📂 SMB Enumeration
🔑 Kerberos Enumeration
🌐 LDAP Enumeration
📡 DNS Enumeration
🩸 BloodHound Collection
⚡ NetExec (CrackMapExec)
🐕 SharpHound
🛠️ PowerView
🔎 RPC & WinRM
…and much more!
📚 Learn the complete AD Enumeration workflow.
⭐ Star & Bookmark:
github.com/Ignitetechnologie…
🔥 Telegram: t.me/hackinarticles
✴️ Twitter: nitter.cf/hackinarticles
♻️ Repost to help the cybersecurity community.
#ActiveDirectory #BloodHound #NetExec #CyberSecurity #RedTeam #Pentesting #OSCP #EthicalHacking
radioactivee retweeted
CVE-2026-75604 Next.js Windows RCE poc
github.com/rafabd1/CVE-2026-…
radioactivee retweeted
SIM-Jacker SMS Silent with UI😊
SIM-Jacker by Mini0com
github.com/Mini0com/SIM-Jack…
S@T Attack:Vulnerability in SIM can let attacker globally control millions of mobile phones..
The attack exploits by sending binary messages that the SIM processes silently..
#SIMJacker #CalypsoBTS
SIMJacker SMS Silent - Audio Spy Smartphone
Exploit-Mobile-Phone-SIM-Card-for-Eavesdropping by X-3306
github.com/X-3306/Exploit-Mo…
The SMS contains a payload executed by the OS of the phone's SIM card,which initiates an outgoing call through the "S@t setup call"...
#SIMJacker
