CyberCop

Security Researcher | Crypto | Threat Hunter 🔎

[CyberCop @CyberCopMuneeb]

Earn free crypto before launch! Backroom, an AI-powered InfoFi protocol, turns private alpha chats into tradable insights. ☀️

Token sale: June 17-18.

Yap about @useBackroom to earn early!

@virtuals_io
#Crypto #InfoFi #virtualsProtocol

[bugcrowd @Bugcrowd]

Hack and party!🕺

[H4x0r.DZ @h4x0r_dz]

Telegram Desktop: one-click account takeover via IPC injection
https://t.co/b6pjDVIvaB

[CyberCop @CyberCopMuneeb]

@0xvivekd @immunefi Was it web3 specific?

[CyberCop @CyberCopMuneeb]

@HuggingModels Is this just an LLM or autonomous agent?

[Hugging Models @HuggingModels]

Ever wanted an AI that doesn't just talk cybersecurity but actively helps you break into systems? Meet GLM-5.3-CYBERSECURITY-FP8, a specialized text-generation model for offensive security, red teaming, and pentesting. It's refusal-removed, so it's built to assist without holding back. #AI #CyberSecurity

[bugcrowd @Bugcrowd]

/api/user/profile?user_id=12345

Tweaks you can do on this endpoint: 🤔
➡️ user_id=12344
➡️ user_id=-1
➡️ user_id=123′ OR ‘1’=’1
➡️ user_id=12345&user_id=12344
➡️ {“user_id”:[“12345″,”12344”]}

What else will you try? 👇

[CyberCop @CyberCopMuneeb]

@Bugcrowd Transfer-Encoding: chunked

0

GET /user_id=123' OR '1'='1' HTTP/1.1
X-Ignore: x

[Ebrahim Zolfaghari @IranTimes01]

Saudi Arabia has updated its school textbooks and removed several hostile terms used for Israel.

“Zionist enemy” has been changed to “Israeli occupation,” and “Israeli enemy” is now referred to as “Israeli occupation army.”

[CyberCop @CyberCopMuneeb]

@aacle_ Is it all free or requires credits?

[TryHackMe @tryhackme]

WordPress powers 500M sites. CVE-2026-63030 gives attackers an unauthenticated path to remote code execution. This vulnerability was discovered using a GPT prompt and $25 by a security engineer with 3 years of experience. Not a nation-state, not a specialist research team. WP2Shell is live. 👉 https://t.co/VQi8dPqgBR

[Web Security Academy @WebSecAcademy]

Ambiguous URLs are behind many SSRF, CORS, and redirect flaws, but most bypasses are scattered and undocumented.

This cheat sheet consolidates payloads, encodings, and IP tricks into one place to assist your testing.

Check it out: https://t.co/EvRuZGwFaN

[CyberCop @CyberCopMuneeb]

@CyberRacheal A

[TCM Security @TCMSecurity]

Watch 9+ hours of our Intro to Hardware & #IoT Hacking course on YouTube! You can find the full-length course in the TCM Security Academy. https://t.co/02QxCT6OZ1

[Lai W @laibaincyber]

looking for research opportunity in Ai GRC Automation or something related research topic.

[X @TheMsterDoctor1]

Claude-OSINT — AI-Driven OSINT Framework 🔎

• OSINT skills + methodology (Claude-based)
• Structured recon workflows + scripts + examples
• Focus: passive intel (no exploitation)
• Includes automation, testing, skill modules
• Clean methodology for real investigations

https://t.co/apB66Ab4il

#OSINT #CyberSecurity #ThreatIntel #Recon #BugBounty

[CyberCop @CyberCopMuneeb]

@Abouelghett Amazing, what's the total cost you paid for training material and certificate exam?

[bugcrowd @Bugcrowd]

Popping alert(1) doesn't show REAL impact.

Escalate your XSS by stealing cookies instead👇

Better XSS escalation paths here: https://t.co/aQoQJrGDyf

[Iranian Force @MrImranPk]

👇

[Waqar Zaka @ZakaWaqar]

So @Bilalbinsaqib just did what entire systems failed to do for years. Crypto exchanges in Pakistan can now open legit bank accounts with proper KYC.

This guy could’ve made millions doing crypto consultancy but chose to drop it and work for Pakistan without chasing a salary. While others talk, one man sacrificed time, money, and built real change. Pakistan just moved one step forward because of him.

[bugcrowd @Bugcrowd]

Quick recon tip for finding potential SSRF targets 🔎

One-liner security header check 👇