Farhad Alimohammadi

Cybersecurity researcher
Obsessed with AI and Bug bounty

[Farhad Alimohammadi @farhad_sec]

@heisenberg_btc Thanks

[Farhad Alimohammadi @farhad_sec]

RCE on Bosch Company :)

#bugbountytips #bugbounty #security #bugcrowd #RCE #bosch

[Farhad Alimohammadi @farhad_sec]

@taketheroot Yea for sure just waiting for patch

[Farhad Alimohammadi @farhad_sec]

If you doing bug bounty with AI like claude and you dont mid false positives, just use Sonnet-4.6 instead OPUS and thank me later.

[Farhad Alimohammadi @farhad_sec]

@busf4ctor @rez0__ @Rhynorater While GPT 5.5 medium, made less mistake and just created the app with same vuln only low impact security issues like CSP header misconfig. So if u want to use Claude for making CTF, double check it might create more vulnerabilities than usual :)

[Farhad Alimohammadi @farhad_sec]

I'm honored to share VulnRepro

Can new AI models spot vulnerabilities in heavily tested bug bounty targets?
I built a benchmark using recent writeups (past 2–3 years) to replicate real-world targets, URLs, and headers as closely as possible.

👉 https://t.co/VLyz9rEhSf (1/2)

[Farhad Alimohammadi @farhad_sec]

@busf4ctor @rez0__ @Rhynorater While i was making apps with Ai, i gave the writeup paths, params, url etc and when AI made them, i found that apps made with Claude (4.7,sonnet 4,6) have more vulnerabilities than GPT 5.5. I asked for xss and app made with 4 more vulns like IDOR , Broken Access Control

[Farhad Alimohammadi @farhad_sec]

@Luciferwrld9 @voorivex Thanks mate ❤️

[Farhad Alimohammadi @farhad_sec]

@_D4LT0N @voorivex yea maybe in future i make that, but for program policy i cant share anything

[Farhad Alimohammadi @farhad_sec]

@yassine_eal @voorivex its beacuse my exploit need 2 click form user and need more user interaction

[Farhad Alimohammadi @farhad_sec]

@0xkmikze congrats!

[Farhad Alimohammadi @farhad_sec]

@Real_Kasraaa ولتتو با brute-force هک کردن، یه سری کلمه های رندوم میزنن که شانسی یه والتی هک میشه، متسفانه برای شما هک شده.

[Farhad Alimohammadi @farhad_sec]

@NahamSec 🎯