Mohammed Fadhl Al-Barbari

Cyber security researcher | tools builder | Bugs hunter on H1, BugCrowd & SRT | 6 CVEs | eWPTXv2, CEH Practical, eMAPT

[Mohammed Fadhl Al-Barbari @M4dM0e]

I just published my new tool DirDar;

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

Link on Github: https://t.co/pPcEuC3IWE

#bugbountytips #bugs #Hackerone #BugCrowd #hackingnews

[DarkGen @DarkG3n]

🚨 Mossad breach: Sensitive agent data exposed. Compromised info includes names, emails, phone numbers, and addresses. Data reportedly contains Israeli intelligence agents' details.

This breach has not been independently verified.

#DataBreach #CyberSecurity #InfoSec #Mossad

[DarkGen @DarkG3n]

🚨 Data Breach Alert

A database allegedly from Encuentra24 is being advertised on a cybercrime forum.
Threat actor claims to hold 570,125 records.
This breach has not been independently verified.

#Encuentra24Breach #DataBreach #CyberSecurity #InfoSec #CentralAmericaBreach

[DarkGen @DarkG3n]

🚨 Data Breach Alert:
Threat actor NinjaBoi claims to sell a 105M record database allegedly from KPU Indonesia (national voter data).
Includes NIK, KK, name, address, DOB, gender — priced at $5K.

Unverified.

#CyberSecurity #DataBreach #Indonesia #PII #DarkWeb #OSINT

[DarkGen @DarkG3n]

🚨 Data Breach Alert

Kuwait – Ministry of Public Works allegedly breached. Seller offers 12 TB of files (1.64M+ files) and demands $600k ransom. Sale price $40k if unpaid. Deadline: Oct 16, 2025.

Not independently verified.

#CyberSecurity #DataBreach #Kuwait #DarkWeb

[DarkGen @DarkG3n]

🚨 Data Breach Alert

A Threat actor leaked McDonald's India workers DB (Oct 2025).

📂 14,696 staff records + 261 restaurants.
⚠️ Exposed: IDs, names, DoB, job details, phones, addresses.

Unverified.
More: https://t.co/JJociWlQwZ

#CyberSecurity #DataBreach #InfoSec #OSINT

[DarkGen @DarkG3n]

🚨 Data Breach Alert
A Threat actor claims to have leaked a database from SFOI (https://t.co/139QIKPeol), a leading packaging company in Madagascar ($39.9M revenue, 1,000 families supported).

⚠️ Potential exposure of sensitive business/employee data.

Unverified.

[DarkGen @DarkG3n]

🚨 Data Breach Alert

A database allegedly linked to the Israel Deface Army / https://t.co/AdmayIRe7e has been posted by Zvok X Wz.
Exposed: names, parent names, birth dates, national IDs, addresses.

This breach has not been independently verified.

#CyberSecurity #DataBreach

[DarkGen @DarkG3n]

🚨 Data Breach Alert

Employee records from https://t.co/RENsopXAzG (Oman’s Comprehensive Cancer Care & Research Center) reportedly leaked by a threat actor.

Not independently verified.

#CyberSecurity #DataBreach #DarkWeb #OSINT #Infosec #HealthcareSecurity

[DarkGen @DarkG3n]

🚨 Data Breach Alert

A database allegedly from Tokopedia (https://t.co/TTT8DZP8UG) has been leaked on a cybercrime forum.

This breach has not been independently verified.

#CyberSecurity #DataBreach #EcommerceSecurity #ThreatIntelligence #OSINT

[DarkGen @DarkG3n]

🚨 Data Breach Alert – Japan

A leak allegedly from Japan’s e-Stat (政府統計の総合窓口) exposes 78M records of residents.

⚠️ Not independently verified.

More info: https://t.co/JJociWlQwZ

#CyberSecurity #DataBreach #Japan #DarkWeb #ThreatIntel

[DarkGen @DarkG3n]

🚨 Data Breach Alert

A database allegedly from https://t.co/r6GcusEK6d with 28.9k customer records has been leaked.
Includes names, phones, orders, refunds, return reasons, shipping & payment info.

#CyberSecurity #DataBreach #SaudiArabia #Infosec #DarkWeb

[DarkGen @DarkG3n]

🚨 Data Breach Alert – Japan 🇯🇵

A threat actor named N1KA has leaked a database allegedly from Kawamoto Pump Mfg. Co., Ltd., a Japanese manufacturer.
The data was published on a cybercrime forum and contains sensitive contact information.

[Mohammed Fadhl Al-Barbari @M4dM0e]

@hatab0x

[Mohammed Fadhl Al-Barbari @M4dM0e]

@NullByte0x شرح بطل من الاسطوره

[Mohammed Fadhl Al-Barbari @M4dM0e]

@PhilippeDelteil 😂

[Mohammed Fadhl Al-Barbari @M4dM0e]

@skiupace زي ماقلت انت (ثغره تتعلق برفع الملفات)
اصدار PHP ماله دخل بالموضوع.

هنا الثغره (خطأ من المبرمج)
للعلم انه حتى السيرفر قديم تقريباً كل شي من 2015 ماحدثوه بس هذا لايمنع ان كل هذا ماله دخل بالاختراق

[Mohammed Fadhl Al-Barbari @M4dM0e]

@NullByte0x وحش ماشاء الله
بالتوفيق للقادم ❤️

[Mohammed Fadhl Al-Barbari @M4dM0e]

@hatab0x Congrats buddy🎉
Enjoy your vacation

[Mohammed Fadhl Al-Barbari @M4dM0e]

@NullByte0x والله وحش الف مبروووك