Omi_96k

Ethical hacker

[Het Mehta @hetmehtaa]

Found a useful dataset for security researchers.

Real audit findings with descriptions, severity, PoCs and remediation.

Take one vuln class → study 50 findings → extract recurring mistakes → build your own hunting checklist.

https://t.co/jnTa0NhGZz

[White sauce pasta @whitesoucepasta]

True 💯🥹

[Omi_96k @96kOmi]

@hetmehtaa Could you tell me which ransomware that was? My toxic company needs it too 😅 (only for testing purposes, of course). I still need to check whether it deserves 1 star or 0.5 star.

[Omi_96k @96kOmi]

@hetmehtaa Irreversible.

[Omi_96k @96kOmi]

@TheSecOpsGroup Amazing initiative! 👏 I'm currently working in Application Security and actively looking to deepen my API security knowledge through the SecOps API certification. Winning this voucher would be an incredible opportunity. Wishing everyone the best of luck! 🔐🤞

[Omi_96k @96kOmi]

@ctbbpodcast So basically, if I’m a low-privileged user with an auth bearer token, and I add an admin token with the none algorithm and get admin access, is that considered a vulnerability?

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Double Auth Headers FTW

[termireum @termireum]

JS & Client-Side Security Resources
https://t.co/BwalkVAZnr

[Het Mehta @hetmehtaa]

JWT Security Resources

1. JWT Introduction - https://t.co/sJGKgtmoPE

2. JWT Attacks - https://t.co/vzsIM5a5OV

3. OWASP JWT Cheat Sheet - https://t.co/8R3ck6fP8t

4. JWT Vulnerabilities Guide - https://t.co/zxLVmIrXfV

5. JWT Best Practices - https://t.co/HlDetz2hdw

6. Exploiting JWT - https://t.co/OnlDJfphyJ

7. JWT Attacks Writeup - https://t.co/61urO2Ub5s

#CyberSecurity #JWT #WebSecurity #BugBounty

[Omi_96k @96kOmi]

@lostsec_ Dependency confusion attack

[Omi_96k @96kOmi]

@hetmehtaa It is true that many desktop applications — whether thick client or thin client — used by organizations in India are in-house developed and often vulnerable to security issues such as DLL hijacking, reverse engineering, functionality manipulation, and buffer overflow.

[Omi_96k @96kOmi]

@intigriti No input validation on file name attacker can do the add xss payload with .json extenstion 2. attacker can add a double extenstion like image.php.json 3. possbile ../../../../../file.json

[Omi_96k @96kOmi]

@Bugcrowd token is not expiring

[Omi_96k @96kOmi]

@bugvsecurity double extenstion image.php.jpg

[Omi_96k @96kOmi]

@AlteredSecurity I wanted CRTP certificate,

[Altered Security @AlteredSecurity]

On-Prem Red Team Week Giveaway!

Win FREE access to:
• 1 CRTP seat
• 1 CRTE seat

How to participate:

1. Like & follow us
2. Comment which course you’re interested in and why
3. Repost

Winners will be announced on Jan 30, 2026.

On-Prem Red Team Week is live (28 Jan – 3 Feb 2026):

• 15% off on a single purchase
• 20% off on 2 or more purchases
• 25% off on 5 or more purchases
(includes extra 5% Early Bird for first 100)

Use code: REDTEAM2026

For more details: https://t.co/EbnixEzhNg

#RedTeam #OnPremSecurity #CyberSecurity #AlteredSecurity

[ddimitrov22 @ddimitrovv22]

Studying tip:

1. Go to https://t.co/fOYUV0kbbJ

2. Study the bug in detail

3. Study the attack vector

4. Study the protocol where the bug is found

5. Repeat every day and you will progress really fast

[Abdalkreem R. A. @00xalr]

The new writup is here:

Account Takeover via Insecure Email Change — Critical Vulnerability
https://t.co/JXwCOQRHiG
#bugbountytips #bugbounty #hackerone

[khan mamun @mamunwhh]

Look like :

First name: jemni
Last email: khcill
Email: victim@gmail. com

[Omi_96k @96kOmi]

View my verified achievement from @apisecu. https://t.co/wmnqOsoXgr via @credly