Vel Muruga Perumal

Lead Solution Advisor - Deloitte USI | Penetration Tester | OSEP

[Vel Muruga Perumal @_v3l5]

@nullenc0de Intrested

[striga @striga_ai]

For a Fistful of Dollars: Less than $100 of Compute Surfaces Pre-auth RCE in Apache httpd

Write-up: https://t.co/583opeDZbJ

[Joseph Thacker @rez0__]

> For context, GPT-5 missed 40% of vulnerabilities. Opus 4.6 reduced that to 18%. GPT-5.5 brings it down further to just 10%.

holy crap. lol. i guess i'm gonna sign back up for pro.

[The Startup Ideas Podcast (SIP) 🧃 @startupideaspod]

https://t.co/qOGxj4BZh2

[🇷🇴 cristi @CristiVlad25]

Read at @doyensec: https://t.co/xFr2XT36ou

[JS0N Haddix @Jhaddix]

We’re so hyped on the below release.

So hyped we’re doing some giveaways!

We are giving away 8 free seats to our Advanced Client Side course.

All you have to do is retweet and like the below post!

Winners chosen next week 🫶

[JS0N Haddix @Jhaddix]

⚠️ Giveaway ⚠️

Want to learn modern reconnaissance and hacking skills?

Join The Bug Hunter's Methodology Cohort 5!

October 2nd, 3rd, 4th -

https://t.co/DvozzsLYiE

Like and retweet this post for a chance to win a free seat! Five winners will be announced on Sept 1st!

[Vel Muruga Perumal @_v3l5]

@theXSSrat This is great !

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Giveaway time!!

https://t.co/RAolfsgGFC
https://t.co/qoboRbfyw5
https://t.co/WhcPs0onsI
https://t.co/Oh9SPhpNya

Like, comment, share and follow. I will pick 10 amazing hackers for the following prizes:

- 3x 1 hour coaching call
- 5x endless bundle
- 2x endless bundle + 1 hour coaching call

That is an insane near 4000$ in prizes we are giving away!

Deadline: 29th of december 2023 - 00:01

EDIT: ADDING 10x bug bounty guide to prize pool
EDIT2: ADDING 10x Jenkins course to pool

Much love and good luck!

[Altered Security @AlteredSecurity]

June giveaway! We are giving away 2 seats of our amazing Azure Application Security course and lab.

Follow us, Like and Retweet this to participate. 2 random winners will be selected on July 1 2023.

Learn how to attack web applications and cloud databases in #Azure. Also includes the CAWASP certification.
#AppSec #infosec

https://t.co/tPTqLbxAjK

[Vel Muruga Perumal @_v3l5]

@TheSecOpsGroup Use “Pass the hash” technique

[Vel Muruga Perumal @_v3l5]

@NinadMishra5 👍🏻

[Vel Muruga Perumal @_v3l5]

@Jhaddix prompt

[JS0N Haddix @Jhaddix]

Tell you what… retweet, like, and dm me “prompt” and I’ll sent it to ya

Merry Xmas

[Trickest @trick3st]

Bug bounty hunters! 🥳Celebrate the Trickest community with us and win 1 of 5 monthly PRO licenses! 🎁#GIVEAWAY

To win:
✅ Like, retweet, and follow @trick3st
✅Tag 2 of your best bug bounty buddies in the comment 👇

Winners will be randomly selected in 24 hours. Good luck!🤞

[Pentester Academy @SecurityTube]

Congratulations to @_v3l5 for clearing our Certified Red Team Professional exam! #ADLab #CRTP #PentesterAcademy cc @nikhil_mitt https://t.co/gUx9gbXHsq

[Sam Curry @samwcyo]

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012.

To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

[Vel Muruga Perumal @_v3l5]

@Aktodotio @harshbothra_ IDOR on userid param. Looks like only the authentication is checked and there is no authorisation check of the associated user. So any authenticated user can fetch results with different user id.

[PentesterLab @PentesterLab]

Two more days before our Black Friday specials!

And we just reached 90K followers! Let's celebrate!

We are going to give a 1-month voucher to 90 people who RT this tweet and follow @PentesterLab (picked randomly)!

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w