Gonzalo Aguilar

Founder & Lead Instructor @sixhackacademy

[Gonzalo Aguilar @6h4ack]

Nueva publicación en @SixHackAcademy

https://t.co/w1enPovrpv

[Gonzalo Aguilar @6h4ack]

Hmmm, Internally Tracked? 🧐 @yeswehack

[Gonzalo Aguilar @6h4ack]

Just got a reward for a vulnerability submitted on @yeswehack -- Open Redirect (CWE-601). Follow us on @SixHackAcademy -- https://t.co/kWEC1eCMvW #YesWeRHackers

[Gonzalo Aguilar @6h4ack]

🚀 CTF Labs are coming to @SixHackAcademy this Monday.

Think you can solve them?

👉 https://t.co/uYi1cPGo4x

#CyberSecurity #CTF #WebSecurity

[Gonzalo Aguilar @6h4ack]

https://t.co/4gi8UJ8p1K

[Gonzalo Aguilar @6h4ack]

I responsibly hacked @NASA and received this appreciation letter

[SixHack Academy @SixHackAcademy]

Presentación oficial de SixHack Academy 🟢

Aprender ciberseguridad haciendo: labs, retos y metodología real.

Be curious, stay safe 🔒

#CyberSecurity #InfoSec #Pentesting

[Gonzalo Aguilar @6h4ack]

🚨 New PoC released for CVE-2025-12101 (Citrix NetScaler reflected XSS).

I’ve built a Python checker that verifies whether a domain is vulnerable via the /cgi/logout endpoint.

Repo 👉 https://t.co/SYjyoECCOj

#CyberSecurity #NetScaler #Citrix #CVE2025

[Gonzalo Aguilar @6h4ack]

Received a letter of appreciation from @Harvard for responsibly disclosing a vulnerability and helping improve their security 🙌🔐

[Gonzalo Aguilar @6h4ack]

Just scored a reward @intigriti, check my profile: https://t.co/jkNOUwZ8eY #HackWithIntigriti

[Gonzalo Aguilar @6h4ack]

Proud to see my name featured on CERN's "Kudos" page for spotting vulnerabilities! Honored to be part of the bug bounty community and contribute to a safer digital world.
#BugBounty #EthicalHacking #Infosec #Cybersecurity

[Emad Shanab - أبو عبد الله @Alra3ees]

200-OK-Modifier: 200 OK Modifier is a Burp extension designed to modify server response codes in real time https://t.co/laKVTyn8k8

[Emad Shanab - أبو عبد الله @Alra3ees]

BurpFinder500: Extension for burp developed to store 500 errors during an analysis. https://t.co/6MsYdzvAmZ

[Gonzalo Aguilar @6h4ack]

IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify IDOR vulnerabilities in web applications. 🚀

https://t.co/rJVWyDiZrW

[Gonzalo Aguilar @6h4ack]

@Alra3ees Thanks for share!!

[Emad Shanab - أبو عبد الله @Alra3ees]

IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify IDOR vulnerabilities in web applications. 🚀 https://t.co/gtKa7BfIkw

[CVEFind.com @CveFindCom]

[CVE-2025-1751: CRITICAL] SQL Injection vulnerability discovered in Ciges 2.15.5 by ATISoluciones allows unauthorized database access via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.#cybersecurity,#vulnerability https://t.co/BIS8My1FU6

[CVE @CVEnew]

CVE-2025-1360 A vulnerability, which was classified as problematic, was found in Internet Web Solutions Sublime CRM up to 20250207. Affected is an unknown function of the file /crm/i… https://t.co/RgT8B9yxQo

[Gonzalo Aguilar @6h4ack]

🚨 CVE-2025-1360 🚨
I discovered a Stored Cross-Site Scripting (XSS) vulnerability in SublimeCRM. Attackers can inject persistent JavaScript, which executes when users log in, leading to account takeover & unauthorized actions.

[Gonzalo Aguilar @6h4ack]

🔓In my free time as a bug bounty hunter, I discovered a bypass for #Cloudflare's #XSS protection. 🔍