D_J

#bug_hunter #hackerone #bugcrowd

[D_J @D_J_Hack]

MVP for 2 consecutive Quarters 🥰😍

[bugcrowd @Bugcrowd]

Congrats to all of our MVP researchers for last quarter. Didn't make it in Q2? Get hacking and maybe you'll see your name on the Q3 list! 🎯 (P1 Warrior list is out tomorrow) #ItTakesACrowd #bugcrowdMVP

https://t.co/Gtb5SR2X2i

[James Kettle @albinowax]

It's really cool to see people exploring taking the single-packet attack even further with HTTP/3! Excited to integrate these techniques directly into @Burp_Suite in future.

[Elon Musk @elonmusk]

Accurate

[Mike Takahashi @TakSec]

Learn how to hijack an AI agent with a single email.

Join me and @nahamsec as we dive into hacking 3rd-party connectors in AI agents

[Shad0w @Itx_Shad0w]

For years, Google API keys (AIza...) had little to no real-world impact.
But recently, many of them unexpectedly gained access to Google Gemini.

curl "https://t.co/w9AaJy4JhU"

This appears to be a widespread misconfiguration that can be hunted in the wild.

[Jenish Sojitra @_jensec]

Sharing my Burp Extension that earned me $200k in 2025 while API testing heavy JS-rich targets.

https://t.co/2ttRurgoPh

The tool helps find endpoints, files, internal emails, and some secrets from minified JS.

Its goal is to achieve maximum efficiency with reduced noise in results. Contributions and feedbacks are welcome.

[James Kettle @albinowax]

HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo:

[PentesterLab @PentesterLab]

A good mix of everything to please everyone: CVEs, AI, Integrity Bypass and Unicode

🛠 https://t.co/rwPnBvWCj7

🔐 https://t.co/FcoFGtQTtb

📰 https://t.co/hFCQa3Cmvj

🤖 https://t.co/D0LF7LDatV

🍪 https://t.co/8K1gfD8AzG

[James Kettle @albinowax]

It's easy to bash vulnerabilities with logos but... I couldn't resist, say hello to https://t.co/nrJtM5dDp3 :)

[Thomas Roccia 🤘 @fr0gger_]

🤓 If you want to learn more about MCP attacks or vulnerabilities, check out this project called Damn Vulnerable MCP.

It allows you to experiment on MCP server security through 10 challenges, from basic prompt injection to multi-vector attacks.

https://t.co/ny0jOAPJFk

[Intigriti @intigriti]

Even though common CORS attack vectors have been mitigated... It still remains exploitable! 🤠

Open this thread to master CORS misconfiguration vulnerabilities! 🧵 👇

[Masato Kinugawa @kinugawamasato]

lol, this works on Firefox:

<object data=# codebase=javascript:alert(document.domain)//>
OR
<embed src=# codebase=javascript:alert(document.domain)//>

[Yasho @YShahinzadeh]

How did we (@AmirMSafari) earn $50k using the Punycode technique? I’ve published a detailed blog post about our recent talk, we included 3 attack scenarios, one of which poses a high risk of account takeover on any "Login with GitLab" implementation

https://t.co/sUGsnJz2Fm

[James Kettle @albinowax]

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓↓↓

[Tal Be'ery @TalBeerySec]

The $64k Bounty: Automating secret extraction from GitHub to win $64K in bounties.
Loved the way Sharon glued his @github internals knowledge, existing tools (@trufflesec trufflehog), cloud and AI to automate at scale.
https://t.co/hcKuMqxY3r

[James Kettle @albinowax]

Blind CSS exfiltration attacks recently got a lot easier! Full details in this thread:

[James Kettle @albinowax]

Detect the NextJS middleware bypass directly in Burp Suite with this BCheck from @eternalky_u
https://t.co/dByPxACndM

[JS0N Haddix @Jhaddix]

Introducing @arcanuminfosec 's hack_tips!

We will begin posting some of our team's best bite-sized content on our repo. This stuff comes from slack, internal wikis, bug bounty history, etc.

Our 1st commit is all about Actuators

Enjoy!

https://t.co/wlCT7etOlh

[KNOXSS @KN0X55]

Do you know why most of our #XSS payloads start with a "1" ? 🤔

Besides to appear as a regular alphanumeric input (not lead by any special char) it's mainly to exploit a validation vulnerability named TYPE JUGGLING.

#KNOXSS is on another level.

[Bug Bounty Reports Explained @gregxsunday]

SQL Injection Isn't Dead Smuggling Queries at the Protocol Level by @pspaul95
https://t.co/TcflDaGxsD
#BBRENewsletter87

[James Kettle @albinowax]

This is a beautiful piece of cache poisoning research, demonstrating what you can achieve if you focus on a single framework.