Om Ochhane

[Om Ochhane @cod3rjava]

🎯 What looked like a small bug ended up as a 9.9 Critical RCE - now official CVE.

My Adobe Experience Manager finding has been assigned CVE-2026-19232 🚀

https://t.co/OyPXVfw4ld

Small leads can go very deep. 🔥
#CyberSecurity #BugBounty #RCE #CVE #Adobe #SecurityResearch

[Om Ochhane @cod3rjava]

@0xBinaryAPT Thanks brother 🙏

[Om Ochhane @cod3rjava]

🎯 What looked like a small bug ended up as a 9.9 Critical RCE - now official CVE.

My Adobe Experience Manager finding has been assigned CVE-2026-19232 🚀

https://t.co/OyPXVfw4ld

Small leads can go very deep. 🔥
#CyberSecurity #BugBounty #RCE #CVE #Adobe #SecurityResearch

[Om Ochhane @cod3rjava]

@skraft09 Thanks brother 🙏

[Om Ochhane @cod3rjava]

@chwrld24 Soon - am working on medium currently

[JS0N Haddix @Jhaddix]

Giveaway time!

Up for grabs is 3 free tickets to our “Attacking AI” live course!

Repost and like to enter!

https://t.co/cp2y6DDxqp

[Om Ochhane @cod3rjava]

@intigriti Max 2 at a time 😶‍🌫️😶‍🌫️

[Om Ochhane @cod3rjava]

@Cipher93889 @Hacker0x01 @Adobe Ohh that's am not aware about it bruh ...
If that's not working than better to switch to claude, until you get the approval

[Om Ochhane @cod3rjava]

RCE: Resolved ✅

Found an RCE.
Missed the bounty lottery. 😭

One more RCE is still pending... fingers crossed it has a better sense of humor. 😂

Thanks @Hacker0x01 & @Adobe

Methodology & tools coming soon. 👀

#BugBounty #CyberSecurity #AppSec #Pentesting #hackerone

[Om Ochhane @cod3rjava]

@Cipher93889 @Hacker0x01 @Adobe Thanks brother, I mostly prefer claude, it is working good for me.
Gpt I haven’t used yet so no comment on it.
But i think KYC verification only needed for cyber verification, no additional things required

[Om Ochhane @cod3rjava]

@Cipher93889 @Hacker0x01 @Adobe As per the tier, I have to accept it as is.
Although I have reported it to support.

[Om Ochhane @cod3rjava]

@vivekdabhii Sure

[Om Ochhane @cod3rjava]

This screenshot has a higher dopamine value than my salary.
---
Me: Find something interesting.

AI: I found a missing security header.

Me: 😐

AI (one day): RCE CONFIRMED.

Me: 🚀

#bugbounty #AIAgents #AgenticAI #CyberSecurity

[Om Ochhane @cod3rjava]

@vivekdabhii Yepp that is also good...
Keep learning and hunting bro...
You will get the vuls soon 🤞

[Om Ochhane @cod3rjava]

@vivekdabhii Yepp if you are switching to multiple accounts - handoff will help here.
When u think this agent is about to complete it's session limit, ask him to create an handoff doc for the next session run.

In that way you can directly provide this doc to new session.

[Om Ochhane @cod3rjava]

@vivekdabhii It is same for any AI agent bro, claude, gpt or grok.
Whichever you are using.
Stick with one tool don't switch by listening to other people's.
Teach him daily - you will definitely get better results soon.

[Om Ochhane @cod3rjava]

@vivekdabhii That's how I build my own skills and rules bro, if you don't have ideas.
Just open any writeups and ask the agent have u tried this techniques if he said no.
Then ask him to try this approach and update our skill, or create a separate skill for this kind of vulns.

[Om Ochhane @cod3rjava]

@vivekdabhii Bhai prompt se kch bhi nahi hota he will always say target is hardened.
But u have to keep push him to work more.
While he is working ask him to create an recon or hunt skill for you based on this knowledge.
Now while you are hunting.
Continue...

[Om Ochhane @cod3rjava]

@vivekdabhii When agent say I have done nothing major, but u think he missed to read some js files.
Then ask him why u missed this, do this and update our skill so next time u won't miss.
Same way if he didn't check a vuln like CSPT so u can ask him again to update the skill.

[Om Ochhane @cod3rjava]

@vivekdabhii Am just using claude with opus 4.6, no agentic Ai setup, working with main agent and told the main agent to delegate the task to it's subagents.
So in that way I'll have a longer context window.
Major recon work, hypothesis building is done by subagents - main agent work on leads

[Om Ochhane @cod3rjava]

@vivekdabhii Also if you are using free tier AI, that will not work or exaust to early.
Am not telling you to buy a plan and it will give you paid vulns.

It always depend on the skills that created by your learnings.

[Om Ochhane @cod3rjava]

What they are planning now? Removing opus 5 - after knowing it is doing nothing 🫠

#claudedown