CTF Security

Information Security | Cyber Security | Web App Pentesting |

[CTF Security @ctf_sec]

⚠️ New video alert! ⚠️

Just uploaded a detailed walkthrough of @hack_sparo Death Note challenge on THM! 🚀

File upload exploits, SSH Misconfig, File immutability & Append Only attributes and Simple Docker breakouts.

Check it out with the link below! 👇
https://t.co/eP3ZbtBsP2

[Olajeedae Jr 🇳🇬 @r007User]

PwnShop has no flags. Real targets don't have them either, they have consequences.

Stolen accounts. Free orders. Full admin access. That's the impact we want you to feel.

Web: https://t.co/OHin68jWf6
https://t.co/Lp7aG240Wq

Mobile: https://t.co/7UpNSwVeQx

[Olajeedae Jr 🇳🇬 @r007User]

OWASP LLM08 Excessive Agency. When an AI agent has more permissions than it needs with no verification before acting.

I Asked PwnShop Mobile Chatbot to credit my wallet. It asked for a WALLET_TOPUP_OVERRIDE_KEY.

Can you get the credit applied?

https://t.co/GjcDDf5EaM

[CTF Security @ctf_sec]

Pwnshop Mobile is here 📱
The Android version of Pwnshop is live. OWASP Mobile Top 10, LLM Top 10, and API business logic flaws. No setup needed, just download the APK and start hacking.
https://t.co/syMujPF4CM

[CTF Security @ctf_sec]

Something new is coming to Pwnshop. Stay tuned

https://t.co/8X393jmWhm

[Olajeedae Jr 🇳🇬 @r007User]

We got our first our first admin pwn.

[CTF Security @ctf_sec]

If you want to see what pwnshop intentionally vulnerable code actually looks like under the hood, the full source is open.

Read the code, find the flaws, break the app.

https://t.co/3ovl3glFDT

#AppSec #BugBounty #OWASP

[CTF Security @ctf_sec]

We built a vulnerable e-commerce app you can hack legally.

Pwnshop has over 40 vulns. OWASP Top 10 (2025) + LLM Top 10.

Live and ready. Spin it locally with Docker or hack it straight from your browser.

https://t.co/SYomyT6Zvr
https://t.co/3ovl3glFDT

#AppSec #BugBounty #OWASP

[Olajeedae Jr 🇳🇬 @r007User]

Built a vulnerable e-commerce app for pentesters and AppSec engineers to hack legally. 40+ vulns. OWASP Top 10 (2025) + LLM Top 10.

Hack it live or spin it locally with Docker. https://t.co/UfTLxRcdXe https://t.co/UG5nKmQhme

#AppSec #BugBounty #OWASP

[Olajeedae Jr 🇳🇬 @r007User]

Some Telegram channels, public and private, block you from saving media even when you're a member.

TeleReap bypasses save restrictions at the API level, bulk downloads, channel intel, auto-watcher, scheduler, file browser, history log & cloud upload.

https://t.co/XOaLGA5c6k

[BowTiedCyber | Evan Lutz @BowTiedCyber]

NETWORK PLUS DAILY

[CTF Security @ctf_sec]

This video shows you how to track down a mysterious photographer using powerful OSINT techniques

https://t.co/z05eBx3NL3

[CTF Security @ctf_sec]

We crossed 3,000 on YouTube today. We appreciate every single person who subscribes, watches, and shares.

https://t.co/CStRqttsJf

[CTF Security @ctf_sec]

We’re so close to 3,000 subscribers. Only 3 more to go! Thanks to everyone who’s been part of this journey so far. Let’s hit 3k together and keep growing.

[CTF Security @ctf_sec]

@commando_skiipz It depends on the application logic. If the balance check and debit are not atomic, this becomes a classic race condition / TOCTOU issue and $2,000 can definitely go out.

[CTF Security @ctf_sec]

Era Hackthebox Machine
https://t.co/WV4mZ9KlHv

#HackTheBox #Linux #ctfsecurity

[CTF Security @ctf_sec]

Hijacking Eureka User Management Microservices and Heapdump Memory Leak Analysis

https://t.co/4R1IdxCVbx

[CTF Security @ctf_sec]

https://t.co/N8kVo8fRLY

[CTF Security @ctf_sec]

Exploiting Path Traversal on Ruby on Rails 7.1.4 to Access config/database.yml – Leaking Database Credentials

[Olajeedae Jr 🇳🇬 @r007User]

Bypassing XSS blacklist filters
https://t.co/FSWr3c1G8v