cybe3hawk

Triager at Hackerone 📟

[Tom Dörr @tom_doerr]

Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances with Stealth Browser MCP.

https://t.co/ZPG1h1NlDc

[cybe3hawk @cybe3hawk]

@krishnsec @AnthropicAI Remove .cluade/* files/folders and start claude again it will start working again. (Make sure to copy your important files and paste again in .claude/ )

[JS0N Haddix @Jhaddix]

Next hacker summer camp giveaway!

3 seats to our “The Bug Hunters Methodology” course!

Like and share to be entered!

https://t.co/9QffdliW7l

[JS0N Haddix @Jhaddix]

Giveaway time!

Up for grabs is 3 free tickets to our “Attacking AI” live course!

Repost and like to enter!

https://t.co/cp2y6DDxqp

[Yarchi @undefinedKi]

Me explaining why I rearchitected my RAG pipeline with hybrid dense sparse retrieval, a cross encoder reranker, and semantic chunking with recursive overlap to fix my context recall degradation

[Rob Hallam @robj3d3]

PRO TIP: Copy this article into Fable 5 and tell it...

"Read this article, review my current workflow, and tell me 5 things I can do to be more productive"

[0xrudra @0xrudrapratap]

The best hackers I know aren't smarter than me.

They've just read more than me. Somewhere in their memory is the one obscure writeup that turns a dead end into a finding. Preview is that memory, on tap. For you, and for your agent.

-> https://t.co/JQKjIQGWFA

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[Yunus Emre Öztaş @ynsmroztas]

🚀 I'm releasing AndroHunter-v, my on-device Android security toolset developed for bug hunters.

17 modules. No root required. Works on Android 10+.

👉 https://t.co/saNETyZLaK

#bugbountytip #bugbountytips #infosec #recon #Android #PenTest

[Justin Gardner @Rhynorater]

Beautiful
https://t.co/IyZ1WH31xG

[Harley Kimball @infinitelogins]

A new open-source project by @spaceraccoon monitors commit diffs and PR context in GitHub repos to find vulnerability patches before they're published into public CVEs.

For bug bounty hunters, this surfaces high-signal patch diffs where a real bug almost certainly existed. That makes it useful for finding variants and affected downstream projects before others do.

Repo 👇
https://t.co/OaWM4iJSBp

Site 👇
https://t.co/xlYBAuQrHg

#BugBounty

[Thierry @0x7hierri]

🔥CSP bypass. Use the following site to find payload.

https://t.co/aMa4I35HEE

[Swissky @pentest_swissky]

Introduction to Deserialization Attacks - @Jr0dR87
https://t.co/iaAIzblKQ3

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Microsoft Azure Subdomain Takeover Guide
https://t.co/5CCXmDdIxS

[Ahmed Sultan 🇪🇬🇵🇸 @0x4148]

1 - Start by enumerating subdomains using any tool you like (subfinder or others) and save everything to domains.txt.
2 - Run dnsx on the list and see which subdomains actually resolve, and where they point.
3 - Use httpx to check which resolved hosts expose web services on common ports.
Save the alive hosts' IPs into ips.txt.

[Het Mehta @hetmehtaa]

Cloudflare has recently started blocking proxy tools like Burp Suite by identifying their unique TLS and request fingerprints.

If you encounter this issue, install the “Bypass Bot Detection” extension from the BApp Store. This extension spoofs Burp’s TLS fingerprint, making it appear like normal browser traffic and bypass it.

[H4x0r.DZ @h4x0r_dz]

I made this burp extension that adds "_connector=OR%201=1%20OR" Parameter to get post with the help of ai: https://t.co/NGXy1B2bFr

[chux @chux13786509]

Indeed, it's a great way to find secrets of your targets!
You can also add to the "body" search param things like: token, api_key, eyJ, gph, glpat and more sensitive stuff 💣
FOFA indexes HTML responses and it's a huge advantage over other search engines for hunters 🔥

[Enleak @0xEnleak]

If understanding AD is still an issue, read this:
https://t.co/DsrmBBIMZ7

#ActiveDirectory

[Swissky @pentest_swissky]

Next.js Security Testing Guide for Bug Hunters and Pentesters - @daoud_youssef
https://t.co/ie7hPQVLFC