bl0rph

Numidia aut mors, width zero

[bl0rph @bl0rph]

@Ryxzxn @Zigoo0 @Hacker0x01 tron

[bl0rph @bl0rph]

@NightmaresUwUL @Hacker0x01 try to prove more impact and try to reopen it, rce ≠ direct impact (especially when its sandboxed like u said) , try to escape the sandbox or do something more impactful with it

[bl0rph @bl0rph]

@zhero___ @operagxofficial goated fr, btw i dmed u on discord since i can't dm u on X for some reason , can u check it out ? my @ is jxkeyoo

[zhero; @zhero___]

Pleased to publish a browser-related research paper (w/@inzo____) titled:

One trigram at a time: XSLeak via Universal CSS Injection and DoS in Opera (GX)

The title speaks for itself. Enjoy the read!

https://t.co/b7JNGW5Nhm

[bl0rph @bl0rph]

@Bugatsec @hetmehtaa there's no point from hunting on that program, they received like 1000 reports in the last 90 days, my 4 reports with them took more than 2 months to get triaged, and one took 3 months to get resolved, and they dont even pay good its pointless to hunt there

[bl0rph @bl0rph]

my first quarter apr-jun 2026
finished 6th in Algeria and 7th globally in the Up and Comers leaderboard

https://t.co/a2BlhZ4IoY

[Magn4 @Magn4_]

Craaaazy stuff

[bl0rph @bl0rph]

@hetmehtaa https://t.co/lWe0JuFkr0
not that crazy, but 7 years ago

[bl0rph @bl0rph]

@h4x0r_dz

[bl0rph @bl0rph]

@Hacker0x01 A report about a very critical issue has been sitting untriaged for 20+ days. Mediation was requested 14 days ago and I got nothing meanwhile the program is active and resolving reports. this has to be fixed immediately, support ticket #655766, private managed program

[bl0rph @bl0rph]

Yay, I was awarded a $2,000 bounty on @Hacker0x01! https://t.co/a2BlhZ4IoY #TogetherWeHitHarder

[bl0rph @bl0rph]

@kyREcon @bitdeep_ @d4rkshell lowkey retarded take

[bl0rph @bl0rph]

@NahamSec @hackinghub_io interested

[Ben Sadeghipour @NahamSec]

Super excited to release our latest Broken Access Control (BAC) Masterclass on @hackinghub_io with 2 hours of content and almost 20 labs. I'm giving away 3 free seats to anyone who comments, reposts, and replies to this post. Drop a 🔥 below!

More info 👉🏼 https://t.co/g8gwo5vYGN

[bl0rph @bl0rph]

@h4x0r_dz @BourAbdelhadi هو خدمت بيه مدة لاباس
بصح كوطي ذكاء ناقص بزاف مقارنة ب gpt5.4 ولا opus
مليح ل fuzzing و recon ...

[Ahmed Abdelbaset @r9Mody]

SQL Injection without these special chars [' "()\/%*&\`] possible?

Yep, me and @or4nge16hehe did it.

Using only: [ a-z, 0-9, dot, @+- ]

Write-up soon
#BugBounty #infosec

[bl0rph @bl0rph]

@hetmehtaa i would like to know fr

[bl0rph @bl0rph]

couldn't find a name for the article, I was going to name it "Chronicle of Vaga", but accidentally published the paste before doing so, I won't waste it.

[bl0rph @bl0rph]

https://t.co/khyNdSw8W3