Ismail Achabi

Security Researcher

[Ismail Achabi @achabi_7]

@1337FIL The new system is trash

[abhinav @AbhinavXJ]

Best advice on how to transition from junior dev to a senior dev

[Ismail Achabi @achabi_7]

@_bronx_101 😂

[James Kettle @albinowax]

Watch HTTP/1.1 Must Die live today at 1630 PST!
- In person at #defcon33 track 1, main stage
- Remote livestream free on YouTube (link below)
Enjoy!

[Ismail Achabi @achabi_7]

@1337FIL #pool3

[Ismail Achabi @achabi_7]

@1337FIL هادي كتسما العشوائية، علاش مقلتوهاش قبل الاعلان علا البيسين الثاني حشوما عليكم

[James Kettle @albinowax]

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓↓↓

[Ismail Achabi @achabi_7]

@HadirIlyass @1337FIL hta ana hadchi li w9a3li, homa galo flmail lvalidation b token, ma3raftch daba chnou ndiR

[Ismail Achabi @achabi_7]

@albinowax @zhero___ 😂

[Intigriti @intigriti]

Looking for payloads to bypass weak URL validations?

Check out the new @PortSwigger URL validation bypass cheat sheet! It contains payloads to help you exploit SSRFs, CORS misconfigurations, open URL redirects and more! 🤑

🔗 👇
https://t.co/fA2fED9IqV

[Johann Rehberger @wunderwuzzi23]

Grok can leak your data!

[Yasho @YShahinzadeh]

How I reverse-engineered an Android app, bypassed custom encryption layer, achieved server-side RCE, and earned a $5000 bounty. read the full story here (TLDR; but worth reading)

https://t.co/xgvffzspiB

[Ismail Achabi @achabi_7]

@0x_rood Congrats✌️

[Ismail Achabi @achabi_7]

@lu3ky13 😂

[Ismail Achabi @achabi_7]

@0x_rood @Hacker0x01 Congrats bro 👏

[Ismail Achabi @achabi_7]

@0x_rood @Hacker0x01 👏

[Ismail Achabi @achabi_7]

@daoud_youssef Unfortunately it didn't work with Mozilla :(

[Ismail Achabi @achabi_7]

@javr00t @Bugcrowd What is the impact of the second bug?

[Douglas Day @ArchAngelDDay]

100 (very) short bug bounty rules: