A…$egun

Web Security Researcher. Exposing the vulnerabilities they don't want you to see.

[A…$egun @S_pentest]

Yay, I was awarded a $500 bounty.
#bounty #securitybreach #HackerNews

[A…$egun @S_pentest]

@4osp3l Congratulations 🎊🍾🎉

[A…$egun @S_pentest]

@russo_sec 🫡

[A…$egun @S_pentest]

“Humans are like bots solving an endless captcha for other bots trying to do the same. A_$segun”

[A…$egun @S_pentest]

@amahrous79 @Bugcrowd Then the triage team never made mention of the fix. They totally ignored that part and turned a blind eyes to it . lol

[A…$egun @S_pentest]

@amahrous79 @Bugcrowd Here you go …

[A…$egun @S_pentest]

Saving this here…

[Alexander Whedon @alex_whedon]

Introducing SubQ - a major breakthrough in LLM intelligence.

It is the first model built on a fully sub-quadratic sparse-attention architecture (SSA),

And the first frontier model with a 12 million token context window which is:

- 52x faster than FlashAttention at 1MM tokens
- Less than 5% the cost of Opus

Transformer-based LLMs waste compute by processing every possible relationship between words (standard attention).

Only a small fraction actually matter.

@subquadratic finds and focuses only on the ones that do.

That's nearly 1,000x less compute and a new way for LLMs to scale.

[A…$egun @S_pentest]

@0xMstar Thank you … I will reach back out if I encounter any errors.

[A…$egun @S_pentest]

@Naina___Malik 💪🏾

[A…$egun @S_pentest]

@scriptkiddie___ Congrats. I know this program.
You want to collaborate?

[A…$egun @S_pentest]

In some part of the World, OSINT is not that useful. You have to visit the country and consult the locals.

[Mololuwa | Cybersecurity - (The God Complex) @cyber_rekk]

Osint is dangerous imagine being tracked from only one picture

[A…$egun @S_pentest]

Thank you for sharing.

[Arshad Kazmi @arshadkazmi42]

The Claude Code tooling I have been mentioning in my recent bounty posts is a forked version of strix-claude-code

Started using it a few months ago. Added a triage step that spawns a new agent with no context to verify findings, cut my false positives down a lot. Got $3000 + $100 on intigriti for bypasses of resolved reports, $500 on h1, an RCE I am still verifying

Not full proof. Still get false positives, still spend days verifying pocs. But overall it works really well

Open sourcing it today: https://t.co/F4FfKtcHoD

[A…$egun @S_pentest]

@amahrous79 @Bugcrowd Same thing once happened to me on bugcrowd. I found an unauthenticated endpoint revealing secret. I reported it and got not response for 3 days or so, so I decided to check the endpoint again and found out that authentication has been added. Bugcrowd denied it.

[A…$egun @S_pentest]

@xlsize0bruh @Hacker0x01 Congratulations

[A…$egun @S_pentest]

@divyansh2401 @Hacker0x01 Congratulations 🎊🎉🍾

[A…$egun @S_pentest]

@Toshusec_ Congratulations 🎉🎊

[A…$egun @S_pentest]

@xlsize0bruh @rip_xerxes @Hacker0x01 Congratulations 🎊

[A…$egun @S_pentest]

@fattselimi @intigriti Congratulations 🎊🎉

[A…$egun @S_pentest]

Putting this here just in case..

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

If the admin panel you targeted has a username enumeration , you can brute-force using a wordlist. This has worked many times for me in this case, the username was "admin"

My password wordlists:

Basic: https://t.co/dwZXsZISiJ

Advance: https://t.co/2AvuC5qTqz

Usernames wordlist:

https://t.co/cKCjZbmS39

#bugbountytips #bugbounty