Arul Kumar

Gamer | Hacker | Computer Enthusiast | Bug Bounty Hunter | Techie

[Arul Kumar @arul_sec]

🚀 Just published a new Blog post!

I’ve released React2Shell on GitHub, an intentionally vulnerable Next.js app packaged with Docker for anyone who wants to play around with CVE-2025-55182 exploit.

🔗 Read the full blog here:
https://t.co/X2TghRbPyo

#react2shell

[Tom Dörr @tom_doerr]

Finds real IPs hidden behind Cloudflare domains

https://t.co/yaQ9AaHbSu

[obscaries ❘ AppSec @obscaries]

⚡ Recon Tip: Don't stop at subdomains.

CF-Hero helps uncover potential origin IPs hiding behind Cloudflare by combining historical DNS intelligence, infrastructure correlation, and security search engine data.

Could be a valuable addition to your recon workflow when mapping large attack surfaces.

📦 Repository:
https://t.co/fKSIrKYOXK

#BugBounty #Recon #CyberSecurity #Cloudflare #OSINT #InfoSec

[Shodan @shodanhq]

Need to lookup a ton of IPs quickly? Check out our InternetDB API: https://t.co/K8YcZ5Sr6K

[Shodan @shodanhq]

We offer a free and simple API endpoint to grab all the hostnames for a domain based on the certificate transparency logs: https://t.co/xAuMunXvYM

Sample Python code available in the Shodan book: https://t.co/36mxTrS2QS

[obscaries ❘ AppSec @obscaries]

@pdiscoveryio has had a huge impact on the bug bounty community with tools like Nuclei, Httpx, Katana, Subfinder, Naabu, and many more.

But beyond the popular tools, they have built several lesser-known gems that can make recon, validation, and vulnerability research much easier.

Here's a thread on some underrated ProjectDiscovery tools worth checking out 👇

#BugBounty #CyberSecurity #InfoSec #Recon #ProjectDiscovery

[Ciarán Cotter @monkehack]

I gave a talk to @ritsecclub on behalf of @Bugcrowd at the start of the month about hacking web applications. It's not too technical, but I hope some of you will find it useful nonetheless:

You can watch it here:
https://t.co/aaStnLLsI4

#bugbounty

[Preben @prebenve]

Found a cool bug at Meta.

From misconfigured Grafana instance to R/W access on 507 private Meta repositories.

Wrote up the full chain here:
https://t.co/LYQ0prc68d

$157k bounty awarded by @metabugbounty

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Episode with GreenJam about hacking Adobe!
And honestly it's hard to watch it without wanting to open a tab on their program. 👀

https://t.co/pX4LQvrufg

[TheOuts1derX @TheOuts1derX]

Secrets & JS Analysis tools for bug bounty hunters:

1. TruffleHog - https://t.co/bF8Rw2eXVj
2. Gitleaks - https://t.co/dQCmWrSG7b
3. KeyHacks - https://t.co/7zNTRGndJw
4. SecretFinder - https://t.co/XkCQ0n360e
5. JSLuice - https://t.co/X8AfzYdYI0
6. jsleak - https://t.co/qH60NHplg1
7. JSAnalyzer - https://t.co/SICIPuicck
8. Nosey Parker - https://t.co/3mHGBR1jhZ
9. GitDorker - https://t.co/8odxEEa2RF
10. git-dumper - https://t.co/bV4rs9wOO6
11. GitTools - https://t.co/7JfIlK1tA3
12. Badsecrets - https://t.co/uBzvxcth9c
13. Secrets Patterns DB - https://t.co/cwMx9Fp8td
14. Detect-Secrets - https://t.co/LhhS4eyxF4
15. Git-Secrets - https://t.co/c8L6AtLxbK
16. Hardcoded Token Hunter - https://t.co/5u5lORrw3W
17. Dependency Confusion Hunter - https://t.co/aEN1Ewi49Z
18. github-search - https://t.co/qDVo9Ls4KT
19. Secrets[.]ninja - https://t.co/EY2Vh7Et2x

Drop the ones I'm missing

#BugBounty #BugBountyTips #Secrets #JSAnalysis #Cybersecurity

[Tom Dörr @tom_doerr]

Audits exposed Swagger API endpoints

https://t.co/gbNfuoRl0a

[Intigriti @intigriti]

Found an exposed Swagger/OpenAPI file on your target? 🧐

Sj by @BishopFox audits endpoints defined in Swagger docs automatically, tests all defined endpoints, generates curl/sqlmap commands, and even bruteforces for hidden definition files! 🤠

Check it out! 👇

🔗 https://t.co/x41DTGB6dR

[John Hammond @_JohnHammond]

Google API keys didn't use to be considered "secret," so they're all over the web-- but now they are an open door to Gemini 🫠 Quick rundown video of Truffle Security's really nifty research, almost 3,000 websites exposed.. including Google themselves😅
🔗 https://t.co/HRIKqI8zK1

[ProjectDiscovery @pdiscoveryio]

Stop missing attack surface behind Round Robin DNS. 🛑

By default, tools often check just one IP. Force httpx to enumerate ALL resolved A records for every subdomain using -probe-all-ips.

Use this Command👇

httpx -l live_hosts.txt -probe-all-ips -silent -o multi_ip_hosts.txt

Essential for finding hidden origins and inconsistent WAF protections.

#recon #httpx #infosec

[Youssef Sammouda (sam0) @samm0uda]

Datr cookie theft and AI leading to Facebook account takeover ($24,000)
https://t.co/n2MVZKxDBg
Two-click Facebook account takeover via FXAuth ($30,000) https://t.co/MtuvFzGRsS
Self-XSS in Facebook payments flow leads to account takeovers ($62,500)
https://t.co/D7qXu1Avim

[ProjectDiscovery @pdiscoveryio]

Want to build a high-quality wordlist without the clutter of full URLs? 🏗️

By using the path filter in Katana, you can strip the protocol and domain to isolate the raw directory structure. 

This gives you a clean list of endpoints ready to be piped into your favorite fuzzer or used for sensitive file discovery.

#Recon #katana

[Jenish Sojitra @_jensec]

Sharing my Burp Extension that earned me $200k in 2025 while API testing heavy JS-rich targets.

https://t.co/2ttRurgoPh

The tool helps find endpoints, files, internal emails, and some secrets from minified JS.

Its goal is to achieve maximum efficiency with reduced noise in results. Contributions and feedbacks are welcome.

[Joe Desimone @dez_]

🎅mongobleed - poc for CVE-2025-14847. Leaks data from mongodb instances due to flaw in zlib message decompression. Reminiscent of heartbleed ❤️

[The Hacker's Choice (@[email protected]) @hackerschoice]

THC Release 💥: The world’s largest IP<>Domain database: https://t.co/o4F8M1Pqi1

All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free.

Updated monthly.

Try: curl https://t.co/5V2xLadmx5

Raw data (187GB): https://t.co/cBZOSAE89K

(The fine work of messede 👌)

[OffSec @offsectraining]

🚨 A new CVSS 10.0 vulnerability (CVE-2025-55182) in RSC and the Flight protocol enables unauthenticated remote code execution. If you run RSC or a framework that ships it, this is a patch-now moment. In our latest OffSec blog, we break down how the exploit works, what’s affected, and what to do next: https://t.co/iUZagwJMwI

[shubs @infosec_au]

Pushed a new update to https://t.co/9CqANckHK0 -- it now scans for the RCE payload via reflection. Use the --waf-bypass flag to bypass WAFs, works well for Cloudflare/AWS. Other WAFs might need tinkering with the payload, depending on whether they don't have a max context limit.