tech 049 @049Tech
hacknotcrime Bengaluru, India Joined July 2020-
Tweets516
-
Followers81
-
Following1K
-
Likes5K
With a tiny team, pre-seed, we've managed to create a tiny model that has cracked into the top 10 on cybergym! You can run this model yourself on cheap hardware! Absolute game changer for data sovereignty, and we're just getting started. Watch this space 👉 @SubmersionAI!
Made over $25K hacking marketplace app permission issues across various bug bounty programs. Here's my latest writeup on how a malicious app might take over a GitHub repository: jeetbhdr.github.io/github-graphql… #bugbounty
I've decided to finally release my vulnerability hunting methodology that I've been using for several months now, both in testing as well as live engagements with great success. I was inspired by (and huge congrats to) the @Blackfrost_AI team open-sourcing Cyber-Frost Harness, their reproducible security-agent runtime with procedural skills, an evidence ledger, and isolated Docker targets for red/blue/purple work. 🎉 If you like the Cyber Frost Harness, and want some out of the box vulnerabilty hunting and POC development kit to go along with it - check out my VulnHunter. It's already loadable: their harness reads standard SKILL.md skills. Point skill_dir at VulnHunter's (or run its installer), and the hunting, falsification, and PoC disciplines load immediately. Repo: github.com/nealbridges/Vu… CREDITS: This is fork of @CapitalOne original repo. I simply took it a step further on POC development and model agnostic. I'm also actively developing in my forked repo as I make more changes to it and welcome the contributions from the community as well. I think I'm doing the whole "respect who you give credit to" drama, and I asked my model to double and triple check it. So i can blame the model if its wrong. Otherwise, dont put me on blast on X if i suck at credits. /s Looking forward to developing on this further with the community.
I wrote about securing your CI pipelines on GitHub Enterprise without expensive third-party tools. Own your security, don’t let a tool decide whether you’re secure. Set your own rules 🪂 mpgn.fr/securing-your-…
Found the best resource to learn Harness Engineering. 😭 walkinglabs.github.io/learn-harness-…
Bypassing Secure Boot via Unbounded RLE8 Splash Images in U-Boot (CVE-2026-71972) pop.byteray.co.uk/advisory/BYTER…
Bengaluru YC Startups: Founder & Company Email List : docs.google.com/spreadsheets/d… → Bookmark it and repost for others !
Writeup: Explorando uma chain de SSRF para vazar chaves internas e assumir o controle do GitHub Enterprise Server sybr1d.xyz/posts/ghes-man…
Reversing an Android sample which uses Flutter #Android #BugBounty #Cybersecurity cryptax.medium.com/reversing-an-a…
Added more training to the AI-CTF (it won't be fast but you can run this on a halfway decent laptop) - github.com/mubix/ai-ctf It teaches prompt injection and other paths prompt injection can take. All the answers are in the repo so it isn't about getting the flags but learning.
Good series on Pwning AI Agents Part 1: Exploiting AI Coding Agents m10x.de/posts/2026/04/… Part 2: RCE and Data Exfiltration m10x.de/posts/2026/06/… Part 3: Read Only Bypass m10x.de/posts/2026/07/… Part 4: Exploiting MCP Hosts with a Malicious MCP Server m10x.de/posts/2026/08/…
Guys, I built a super fast Android decompiler called ASC. It completely replaced Jadx MCP for me and lets me analyze 10+ APKs in parallel. And this week my Agent use ASC found 2 RCE in Honor and Xiaomi! This tool now accepted by BlackHat EU Arsenal github.com/MG1937 #BHEU
My tweets haven't gone viral in a while now, so I must drop this banger: reburp And yes, it's a game changer in applicative pentest and bug bounty. Following me was worth it. Know how BurpSuite's API does not expose all that burpsuite can do in the UI? and how their MCP isn't better? it lets you read findings but can't do the workflows. reburp is a small burp extension that uses the extension's access to the internal Montoya API object to re-expose it over a localhost OpenAPI REST API to bridge all that a burp extension can do, to your AI agents in seconds ! Your agent can now use burp's: - active scan, stop/start scans, fuzzing, turbo intruder - iterate entire sitemap tree - websockets - use tools like Generate CSRF PoC - use other extensions e.g. Autorize - Create custom Bambda rules and custom scanners My favorite: you can explore burp features you haven't found in the UI even after 10 years using it github.com/forefy/reburp
今天不发推文，我们决定开源近期自研的进攻型 Agent 工具——该工具在腾讯实测跑分中位列第三，红队/SRC/CTF三大场景； 项目地址：github.com/Yean-Sec/Strik…， 跑分地址：tsecbench.zc.tencent.com/#leaderboard
Good read here... "Source-to-Sink Analysis" notes.asifnawazminhas.com/source-code-re… #BugBounty #CyberSecurity
@nmatt0 I personally use this github.com/rderaison/brom…
Interesting read stencil.so/blog/harness-p…
🟧 Cloudflare Zero-day: Accessing Any Host Globally Blog: fearsoff.org/research/cloud… Author: @FearsOff
I missed this until just now - shout out to @Jhaddix and @arcanuminfosec We've got free labs to train you up on AI Red Teaming. Check out bot-tricks.com and read the whole article here for more: 71 FREE AI Security Labs executiveoffense.beehiiv.com/p/free-ai-secu… via @Jhaddix
forefy @forefy
1K Followers 553 Following Over a decade of security research and engineering channeled into securing emerging threats ㅤ CTO @audit_wizard 🧙♂️🪄🪄 ㅤㅤㅤㅤㅤㅤㅤ Co-Founder @hackstackapp
Chris @_chris_grantham
8 Followers 478 Following
Stephanie Flowers @stephanieflow60
21 Followers 547 Following 💋 Los Angeles nights ✶ Scorpio thoughts ✶ 20 ✶ dreamy details ☾
Fida Masood @FidaTanoli
131 Followers 1K Following
Metrica Factor x @x_metrica289
0 Followers 74 Following Desarrollando la pentalogía científica Factor X. Investigación independiente: Métrica Lezcano (Ángulo 50°), 77 Hz y el Teorema de la Incubación. recta Negativa
dig8italX @dig8italX
181 Followers 6K Following dig8italX, the leading artificial intelligence firm that specializes in creating customized AI solutions for businesses.
Jon Pardi @J0nPard1
2K Followers 3K Following Official Twitter page of Jon Pardi. New Album 'Honkytonk Hollywood' out now
Frozt Nova @FroztNova127
1K Followers 2K Following Bug hunter https://t.co/nKsZi9MB64 https://t.co/PJXHC6C4fi https://t.co/lyDCJaFahc
Worlds Affairs @worlds_affairs
12K Followers 6K Following 🌍 Geopolitics through an Indian lens | 👨💻 Accidental Engineer 💻 🇮🇳 | Not a Edtech Account | Political Neutral ,No BJP , No congress , Only INDIA 🇮🇳
Pavan Kumar @PavanKumar___12
0 Followers 4 Following
SabrinaFrank @l50q5S6CNHdrox
98 Followers 2K Following
Smoohoob @SmoohoobMucV
84 Followers 3K Following
foryou @foryou23737876
2 Followers 71 Following
emilahloiolas @emilahloio3603
18 Followers 249 Following Pope god mad i shall be examined them i am so exactly awe the.
Hasan @Hasan1434560
1 Followers 58 Following
Sethese @Sethese128236
15 Followers 202 Following Mong bạn sẽ bớt tổn thương , Bạn vẫn có thể bắt kịp khi bạn đột nhiên tỉnh dậy
Bruno🌏 @petexbruno
3K Followers 6K Following Creator 🦹♂️♻ || MC🎤 || Forex Trader 📊|| Civil engineer 👷♂️|| Lobister student 😀 ||30BG🤸|| Advocate for good governance🤔
0xLite@Ha @AzyzChayeb
702 Followers 7K Following
white_Rose @JohnPau88931478
96 Followers 2K Following
Saci🌹 @Throatslayer07
94 Followers 5K Following
23 @Nmber231
89 Followers 6K Following
Sarah M @pinacolada_sm
85 Followers 361 Following A day may come when we lose, but it's not today, today we fight. Apobangpo!!
Lamar Jackson Brasile... @victorsantos182
159 Followers 3K Following Analista de Segurança Unix, Blink 182, Casado, Chiefs!!, São Paulo, falo de tecnologia, NFL, futebol e fofoca
sellvamanoj @Tink2hack
666 Followers 2K Following Founder | CISO | SRT member | Yogosha member | OSCP | OSWP | ejPT | eWPT | eWPTx | CEH
Alien_Dark @AlienDark3
3 Followers 97 Following
X_capra @Xcapra2
3 Followers 93 Following
Mei @Mei24045219
8 Followers 244 Following 法人経営しながら投資しています😊 昔、家族の借金の肩代わりをしてしまい人生詰んだと思っていましたが、今のビジネスに出会い奇跡の復活👼 プレゼント企画も悪くないと思いましたが、ずっと稼ぎ続けられる方法を伝える方がみんなハッピーかと思い活動中😊 フォローくれたらDMしますね😊
Ayane @Ayane22418036
19 Followers 174 Following オフ＆見せっこ募集垢です👼 男性と出会いがないので始めてみました💛 喜んでもらうの大好き💝 フォローくれたらDM送りますね📩💞
Bigidiot @abcddcb13286422
502 Followers 1K Following https://t.co/VNAH0SZkQD https://t.co/HJxliYXrXH
Techno Wizard @praveenhead619
3 Followers 201 Following
Johann Rehberger @wunderwuzzi23
12K Followers 685 Following Hacking neural networks so that we don’t get stuck in the matrix. Builder and Breaker. Opinions are my own. https://t.co/ij8buvMaXg
Rock Pratap Singh (Ro... @Rockpratapsingh
968 Followers 345 Following Radhe Radhe 🙏 || Security Researcher | Bug Hunter | Ethical Hacker | VAPT | Google, Nokia, NASA, Apple, Lenovo, Blackberry, Cambridge, Indian UK gov HOF🇮🇳 |
Sansec @sansecio
2K Followers 16 Following Experts in ecommerce security. Helping merchants in times of peril. Tracking large scale digital skimming since 2015. PGP key 9D0D094CD2C7E669
gr3pme @gr3pme
3K Followers 718 Following Cohost @ctbbpodcast || Bug Bounty Hunter || hacker - OSWE, OSCP
Brumens @Brumens2
2K Followers 509 Following @yeswehack employee 🪖 | Bug Bounty hunter🐝 & coffee lover ☕ I'm a big fan of breaking into all sorts of things 🌐
kassem @kassem_S94
5K Followers 238 Following Ethical Hacker | Discoverer of CVE-2025-55129 | Hacker @Hacker0x01 and BC/intigriti | Whitehat @Immunefi | HOF APPLE/MICROSOFT |https://t.co/gY6vJhUvFe
Ciarán Cotter @monkehack
6K Followers 627 Following • Irish/Japanese web/AI hacker from Cork, living in Scotland • Founder @StarstrikeAI • BT6 Operator • Newsletter @ https://t.co/fZXECNnM41
Chetaslua @chetaslua
41K Followers 202 Following AI researcher & reporter | I test new models on launch day, build working demos, and post prompts + results | Code: https://t.co/y96A3VQTWC
hashkitten @hash_kitten
4K Followers 190 Following vulnerability research @assetnote // hacking // codegolf // ctf with 🛹🐶
Icare @Icare1337
2K Followers 682 Following Pentester at Thales CDI | OSCP | Bug Bounty Hunter | Researcher | Ethical Hacker | Honoring my father, a hacker of the early days | ckj0756 | Icare
Shlomie Liberow @Shlibness
3K Followers 2K Following Building @get_aisy - Former Head of Hacker R&D @Hacker0x01. All things hacking!
Jayesh Madnani @Jayesh25
14K Followers 512 Following Researcher in charge @ Ethical InfoSec Services | HackerOne Top 10 | https://t.co/JSX03Wv1vl
jack friks @jackfriks
181K Followers 2K Following curious guy creating things @ https://t.co/HXWladih08 - up and coming wife guy
Doyensec @Doyensec
4K Followers 10 Following Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk.
may @MayPlatform0112
10 Followers 7 Following Your First AI Content Pipeline for Global E-commerce at Scale 🐝 1 Photo → 30s → Full Listing Set (Main/Lifestyle/A+). Try free
Pliny the Liberator �... @elder_plinius
252K Followers 1K Following ⊰•-•⦑ latent space steward ❦ prompt incanter 𓃹 hacker of matrices ⊞ breaker of markov chains ☣︎ si danger researcher ⚔︎ bt6 ⚕︎ building @LYSIOS ⦒•-•⊱
Godfather Orwa 🇯�... @GodfatherOrwa
28K Followers 2K Following Hacker | Bug Hunter | Cooker | Top 5 P1 Warrior On https://t.co/dzFQH75OWj | LevelUpX Champion | 10+ 0Days/CVEs
Harsh D Ranjan @HarshDRanjan1
3K Followers 856 Following Just another Hackerone hunter Zoom Top 10 🤝
DuckywantDucky @DuckyWantDucky
963 Followers 1K Following
Michael Dalton @michaeldaltonau
115 Followers 40 Following #1 in Google VRP Australia | I break things.
Cybertess @Cybertessio
76 Followers 1 Following Human-led offensive security for modern attack surfaces. AI at scale, researcher judgment where it matters.
skull @brutecat
9K Followers 413 Following security @google. 21. i run a blog @ https://t.co/cBW6gzSS5u
Tur.js @Tur24Tur
6K Followers 1K Following Interested in Application Security, Bug Bounty, Reverse Engineering, Frida & Ghidra @NoBugEscapes @BugBountyZip https://t.co/bltifT1jkQ
pwn.ai @pwn_ai
14K Followers 3 Following Built to breach. The best defense is insane offense. we escape sandboxes & hack everything. Agentic hacking ecosystem in the works. pentest product is now live
Worty @_Worty
3K Followers 585 Following Organizer of @HeroCTF || ctf w/ @FlatNetworkOrg || TeamFR 2021, 2022 & 2025 🇫🇷 || Breaking stuff @0xDepi
GMO Flatt Security In... @flatt_sec_en
932 Followers 1 Following Building AI that finds & fixes web security bugs — autonomously. SOTA in white-box bug hunting. Try Takumi: https://t.co/zruO7dgEcc
Swisscom CSIRT @swisscom_csirt
3K Followers 326 Following Wir sind das Cyber Defense Team von Swisscom. Unsere Mission ist der Schutz der Infrastruktur, der Kundendaten, der Marke und der Mitarbeitenden von Swisscom.
Simon Roses @simonroses
3K Followers 986 Following Cybersecurity founder https://t.co/7IDxJuV8l9 focused on AI security, Shadow AI, agentic attack surface, AppSec, and offensive security.
h0rus3c @h0rus3c
4K Followers 310 Following Bug Bounty Hunter | https://t.co/S37ltY3BTG | https://t.co/ZLNFNYJi8C | https://t.co/ONCmVgClOC
sebsrt @s3bsrt
754 Followers 564 Following I like to break stuff | Web Vuln Research & CTF @ARESxCTF @aboutblankets
Alex Matrosov @matrosov
20K Followers 2K Following Security REsearch @Anthropicai · Breaking & Fixing AI Failure Modes | Founder @binarly_io · @SBOM_Tools · @REhints | Author “Rootkits & Bootkits" (https://t.co/1wd2dfYHY6)
elttam @elttam
2K Followers 0 Following Expert-led penetration testing, supported by AI-assisted analysis, to uncover real weaknesses and strengthen systems against real-world threats.
AmirMohammad Safari @AmirMSafari
8K Followers 418 Following Part-time bug hunter, full-time thinker of thoughts nobody asked for
Mushroom キノコ @MushroomWasp
653 Followers 369 Following a human posting about his journey in tech | CTF Player/Creator, Bug Bounty hunter & Security Researcer | 📨 [email protected] | 🐧💻
AIfredo 0rtega @ortegaalfredo
9K Followers 1K Following Software Developer - Security researcher - Cybergaucho - @[email protected] AI-related: https://t.co/hhQltrgzKS https://t.co/ibyCcAp6zvYou might like
