xAbraham @Exploit_000
Security Researcher | Bug Bounty Hunter | Competitive Programmer Joined March 2024-
Tweets85
-
Followers107
-
Following130
-
Likes1K
@ParthShethia25 I found out about this recently too
ESI Injection is nastier than people think. If a CDN (Varnish, Squid, Akamai) parses ESI tags and your input lands unescaped in the response, you get: → SSRF → XSS filter bypass → HttpOnly cookie theft Research:🔗 yapro.ru/uploads/users/… Video:🔗 youtu.be/Df42-CfJF8k
Closed as an internal duplicate, but still a win ,learned a few new techniques along the way. Always something to take away from every report. 🫠
Just reported an AI security bug 🐛🤖 A simple prompt exposed the AI agent’s internal system instructions, tools, logic & execution details etc. One innocent prompt → way more than the user was supposed to see. 👀🔥 #BugBounty #AI #CyberSecurity
Just reported an AI security bug 🐛🤖 A simple prompt exposed the AI agent’s internal system instructions, tools, logic & execution details etc. One innocent prompt → way more than the user was supposed to see. 👀🔥 #BugBounty #AI #CyberSecurity
My first bug bounty write-up is live! 🚀 A simple Stored XSS led to: → JS execution → CSRF token exposure → Authenticated actions Full methodology + impact 👇 medium.com/@hackwithabrah… #BugBounty #AppSec #CyberSecurity
Found > responsibly reported an API authorization flaw GET /rest/v1/setting/users? → 403 UI blocks, internal API allows: PUT /rest/v1/user/{id} → 200 Weak authorization let a lower-privileged role bypass the restriction #BugBounty #AppSec
Found and reported a subtle API access control flaw 🔒 /service/v2/users/{USER_ID} → Admin-only 🔓 /service/v2/users/ → returns PII for all users in the tenant Removing a path parameter shouldn't remove the authorization boundary. 🤔 #BugBounty #AppSec #CyberSecurity
@intigriti Happy 10 years, Intigriti! 🎉 My first bounty started with you. Cheers to many more! <3
الحمد لله 🤍 Finally got paid for a Critical (9.1) report today.👀 What made this one fun wasn't a single bug,it was chaining multiple seemingly low-impact issues into a full compromise. I'll be dropping the full write-up soon 🔗 #BugBounty #AppSec #CyberSecurity
I was just solving labs on 🙂 @PortSwigger
When you have an exam tomorrow but you can't stop Web Security Academy
@FilexMbogo58723 @garethheyes Five seconds on Google!!
Huge thanks to @garethheyes . If you want to build confidence with WAF bypasses and better understand client-side vulnerabilities, this book is a must-read. I recently got rewarded for a Stored XSS, and the knowledge from this book definitely helped. Highly recommended!
H jjj @h_jjj30098
1 Followers 97 Following
Hamaza5555 @hamaza5555
26 Followers 1K Following
شركة سايرس @syrus_sa
21K Followers 8K Following دعاية واعلان - خدمات للأعمال - بيع و شراء السلع بالتجزئة
Managed Server @Managedserverit
315 Followers 3K Following Forniamo Hosting ad alte performance per WordPress / WooCommerce / Prestashop / Magento. Oltre 200M di pageviews al mese e picchi di 250K online in realtime.
Dikshant @Bboydikshant14
650 Followers 4K Following some people do it & some people really really do it.....!
☆Arookiech⚡️☆ @Mhiztabjay
678 Followers 2K Following Security Researcher | Bugbounty |☆A step closer to that point 📍| 0x01☆Dios☆own | Jesus Christ the same yesterday, today and forever more
NH Limon @nh___limon
517 Followers 3K Following Bug Bounty Hunter | Security Researcher | CSE Student
00731.eth @hbsrc
321 Followers 5K Following 🎭AgILt4C6M3pOgDgwZ72YduY+wOXTeu46dk1OwF6AdekUI🎭 https://t.co/15tXaRBhVN https://t.co/HJnJVXzHQE…
heartless @notalone8787
49 Followers 2K Following
OM PRAKASH @MarwalOm14313
51 Followers 2K Following cyber security expert and legal Consulting and strategist श्री 1008 नारायण दास जी महाराज त्रिवेणी धाम
pablo palma @pablopalmappr
16 Followers 799 Following
zzzZ @WkendXu
34 Followers 930 Following
Un ntik @untilthephiloso
25 Followers 1K Following
Parth @ParthShethia25
30 Followers 457 Following got into security coz 14yo me got influenced by lucky patcher.
UncleOneday. @0xUncleOne
1 Followers 33 Following
yiming zhang @kerjo_007
2 Followers 81 Following
r3 @MmmAaa96635
1 Followers 71 Following
amiri:hosi @AmirHossei56204
4 Followers 147 Following
JarOCA @Superd4rk999
13 Followers 1K Following Cyber_Security_Re-searcher || Ai Re-searcher || AI-Sec|| Malware Analysis II iOS || Pwn || 0SINT || Project AI-StrikeSec || 0ldAccounts Suspended
CODESA @sibo5sec
9 Followers 385 Following | Security Researcher & Bug Hunter 🛡️ GET /api/v1/user?id=sibo HTTP/1.1 |
ROHAN PRASAD @Linux_user101
0 Followers 43 Following
Yasin @YasinPkd
6 Followers 795 Following
MindflayerX @MindFlayerV
24 Followers 1K Following
1xd_542586 @testtwit123fd
317 Followers 5K Following Head of Threat Intelligence Team | Security Analyst | APT | AI Application | Malware Analysis | Global Security Market&Product, call me 1xd.
diyar @diyar_mhammed
726 Followers 3K Following
zahra @AlyZhra21373
38 Followers 2K Following
TanmayLP @TanmayLP7
375 Followers 3K Following LPT (Master) | CPENT | CEH Security (Web | API | AI) जे जितकं, जेव्हा जसं ते तितकंच, तेव्हाच तसंच ||
Morteza Haghiralsadat @smhboc
8 Followers 718 Following
H∆©K£₹ @12ak30gs
72 Followers 2K Following
omeiza (💻,🧑�... @0xOmeiza
868 Followers 3K Following saiyan. christian. security (web, blockchain). i play alot.
Ayush Rai @itzs_ayu18
2 Followers 24 Following
Jenish Sojitra @_jensec
25K Followers 628 Following Blending AI with Offensive Security Research and Bug Bounty. Creator of https://t.co/0N9TViC20w
🇷🇴 cristi @CristiVlad25
57K Followers 863 Following
JS0N Haddix @Jhaddix
181K Followers 7K Following CEO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec
Assetnote @assetnote
11K Followers 0 Following Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure.
Zen @zen_browser
29K Followers 7 Following Welcome to a calmer internet. → 🔗 https://t.co/PRmlkqyLSo → 💚 https://t.co/mBbJVZWEFW → 📦 https://t.co/zFmm8WpHrl
Khalid ibne jaman Sun... @khalidibnejaman
5 Followers 293 Following
Kunal Kamra @kunalkamra88
2.6M Followers 515 Following For enquires & collaborations Email - [email protected]
NeoPolymath @ne0polymath
7 Followers 2 Following Probability of gain collapses to zero in the absence of work-function input | 14 y/o |
Ian Carroll @iangcarroll
25K Followers 1K Following Founder at @SeatsAero. Travel/points, application security, security research, etc.
PentesterLab @PentesterLab
209K Followers 0 Following Don’t just learn tools and payloads. Learn why vulnerabilities exist. Hands-on web hacking, security code review, and real-world CVE labs.
SinSinology @SinSinology
13K Followers 778 Following Pwn2Own 20{22,23,24*2,25*3,26*3}, i look for 0-Days but i find N-Days & i chase oranges 🍊
TrendAI Zero Day Init... @thezdi
90K Followers 18 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
The XSS Rat - Proud X... @theXSSrat
169K Followers 1K Following Bug bounty profiles: https://t.co/3Uz5K130ah https://t.co/rzbqV5AmZ2 https://t.co/CDlzXdNvPB
Jonathan Bouman @JonathanBouman
7K Followers 604 Following Medical Doctor (GP) & Security Researcher
James Kettle @albinowax
85K Followers 106 Following Director of Research at @PortSwigger. Startup advisor. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
Arshad Madani @ArshadMadani007
343K Followers 6 Following President Jamiat Ulama-i-Hind | Principal Darul Uloom Deoband | Vice President All India Muslim Personal Law Board
Abdelrhman Allam @sl4x0
6K Followers 644 Following full-time bb hunter; husband; breaking things for living; offensive AI imposter;
Intigriti @intigriti
217K Followers 671 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
Faiyaz Ahmad @thehacktivator
6K Followers 102 Following Bug Bounty Hunter | YouTube Content Creator @BePracticalTech
Lupin @0xLupin
19K Followers 797 Following Roni Carta alias Lupin. Founder & CEO @depi_. R&D. Red Teamer. Bug Hunter. Musician 🤘
Red Sentry @redsentry_tech
2K Followers 8 Following Human-led pentesting that helps organizations prove security, not just compliance. Secure. Validate. Improve.
Muslim IT Cell @Muslim_ITCell
24K Followers 78 Following By Muslims, For Muslims | Digital Resistance | Unafraid.
Coffin @lostsec_
32K Followers 225 Following ʜᴇʟᴘɪɴɢ ᴏʀɢᴀɴɪᴢᴀᴛɪᴏɴꜱ ꜱᴛᴀʏ ꜱᴇᴄᴜʀᴇ ᴛʜʀᴏᴜɢʜ ʙᴜɢ ʜᴜɴᴛɪɴɢ, ᴏꜱɪɴᴛ ᴀɴᴅ ꜱᴇᴄᴜʀɪᴛʏ ʀᴇꜱᴇᴀʀᴄʜ | ᴡʀɪᴛᴇᴜᴘꜱ: https://t.co/39DXITYobD | ᴄᴏᴍᴍᴜɴɪᴛʏ: https://t.co/otIBnWOeua
xit! 🇮🇳 @xitsec
4K Followers 249 Following Security Engineer !| Bug bounty hunter !| Pentester | whitehat @Immunefi | bugcrowd | hackerone | @Hackenproof Security Researcher #valorant ♥️
Standoff Bug Bounty @StandoffBB
3K Followers 53 Following Welcome to Standoff Bug Bounty — where hackers and businesses join forces, and everyone wins. Start the hunt 👇
𝕏 Bug Bounty Write... @bountywriteups
40K Followers 4K Following 🔍 Bug Bounty Hunter | Content Creator | Sharing cybersecurity write-ups & resources | AI | | by @piyush_supiy #bugbounty #bugbountytips
Josip Franjković @JosipFranjkovic
5K Followers 1K Following I am an average Joe who enjoys breaking websites. My security blog: https://t.co/dtvxa0rjfw
Yusuf Elw @elovneq
281 Followers 14 Following
Abdullah Nawaf (Hacke... @XHackerx007
9K Followers 510 Following Hackerx007 Bug hunter FB/Twitter/Mail.ru HOF 41 Bugcrowd rank 11 Bugcrowd P1 rank with 226 p1 :) In love with P1 ;)
Security BSides Ahmed... @bsidesahmedabad
10K Followers 880 Following India’s Longest Running Security BSides Conference ; 7th Edition: 26-27 September 2026🗓️📢
Profundis.io @profundisio
2K Followers 0 Following Mapping the internet - turning DNS/host/Certs/Whois data into intel for internal & sec teams, OSINT & bug-bounty hunters. Automated recon & real-time alerts.
NetworkChuck @NetworkChuck
273K Followers 841 Following Believer. Beard. Coffee. Tech. Youtube. Check the link in my bio to see my latest video!
Mohsin Khan @tabaahi_
20K Followers 419 Following 26 | Bug Bounty Hunter @bugcrowd & Pentester at @inspectiv
Muhammad Waseem @wgujjer11
4K Followers 1K Following Cybersecurity Analyst | Ethical Hacker | Secure @nasa | #CyberSecurity # https://t.co/CQ6atODBx8
Censys @censysio
13K Followers 1K Following Censys is the authority in Internet intelligence & insights. Delivering the most comprehensive, accurate, and up-to-date global map of Internet infrastructure.
HackenProof @HackenProof
40K Followers 2K Following Expert bug bounty and crowdsourced security marketplace · 400+ programs · $ 26M + paid in bounties · 85k+ ethical hackersYou might like
