Appsec.pt

Bug Bounty Hunter | eWPTX

[Lisan al Gaib @scaling01]

💀

[Appsec.pt @Appsec_pt]

Just caught Deepseek V4.1 flash using the expression “load-bearing”.

Anthropic’s claims that Deepseek distills from their models might not be that wrong after all 🙃

[Appsec.pt @Appsec_pt]

Some time ago wrote an article where I showed the easiest to find Web Application Bug of 2026.

I notice that a lot of people in the Bug Bounty and Pentesting world are still neglecting this bug and missing out on bounties 💸

Check it out

https://t.co/JuvEBsIMdQ

[Web Security Academy @WebSecAcademy]

Wheeeeeeee!

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[Appsec.pt @Appsec_pt]

Bug Bounty is Evolving 🧬

Are you still hunting like it's 2024?

My latest article is a Deep Dive into the Bugs you should be hunting in 2026.

If you value high-quality writeups (without AI slop) check it out!

https://t.co/HB5CNph6Sw

[Appsec.pt @Appsec_pt]

@4osp3l Great article, mate! 🫡💪🏻

[Appsec.pt @Appsec_pt]

Some time ago wrote an article where I showed the easiest to find Web Application Bug of 2026.

I notice that a lot of people in the Bug Bounty and Pentesting world are still neglecting this bug and missing out on bounties 💸

Check it out

https://t.co/JuvEBsIMdQ

[Appsec.pt @Appsec_pt]

Some time ago wrote an article where I showed the easiest to find Web Application Bug of 2026.

I notice that a lot of people in the Bug Bounty and Pentesting world are still neglecting this bug and missing out on bounties 💸

Check it out

https://t.co/JuvEBsIMdQ

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[Appsec.pt @Appsec_pt]

@4osp3l Damn, thats actually crazy 😂

[Alex Hormozi @AlexHormozi]

How to feel grateful:

1) Think about the best things in your life.
2) Imagine losing them.
3) Remember you still have them.

[Gospel @4osp3l]

With what i've observed lately, hacking manually beats AI completely… the statement "Hacking with AI is easy money" is completely wrong and overstated.

You can apply both, but make sure to be exceptionally strong with manual hacking.

[Gospel @4osp3l]

Vulnerability research is not dead. "LLM can reproduce the wordpress RCE in a few minutes" doesn't mean it is dead.

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[ddimitrov22 @ddimitrovv22]

Here is another fun activity you should try this weekend.

Study some LLM bugs.

AI security will soon be required in every security job because AI is literally everywhere.

And here is a great database to learn from - like Solodit but for LLM bugs. 🫡

https://t.co/uet0Qdyohw

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY

[Appsec.pt @Appsec_pt]

I was looking for bugs in a web target and saw a promising Employee-only endpoint.

5 minutes later, I managed to get access to it, and when I noticed how critical it was, I reported it and got a very generous reward 💰

Learn how I did it

https://t.co/XKCHNivAoY