JEJE × HACKS

[JEJE × HACKS @hacks_je]

Always check actuator endpoints... 🕳️

This time I got heapdump and env endpoint open. Inside the heapdump I found, DB passwords, Keys, PII, live user logs🪵

The sames creds initially not exposed in /env path (present but masked) but buried in heapdump 😶‍🌫️

[JEJE × HACKS @hacks_je]

@h4x0r_dz Dark web needs patch 😂😂

[JEJE × HACKS @hacks_je]

True = SQL
False = WAF won

I ' ed and AI painted it...with little WAF bypass 🧱🎯

#bugbount #sqlinjection

[JEJE × HACKS @hacks_je]

@jonasl You dm are closed

[JEJE × HACKS @hacks_je]

XXE to LFI -> results are in PDF and its preview.....Weird bug I encountered today...🫡

#bugbounty

[JEJE × HACKS @hacks_je]

@Davidfarfara Thanks

[JEJE × HACKS @hacks_je]

@mhdagusprbdi Once patched...will post to community!!

[JEJE × HACKS @hacks_je]

Initially AI deleted other user data accidentally while probing endpoints, Later he identified new undocumented endpoint and restored it again.

pheww....within a min he gave me heart attack. But sweetened with Critic...😅

#bugbounty

[JEJE × HACKS @hacks_je]

@JustWantToQ1 never seen before too, but path suggested some china group is involved🫡

[JEJE × HACKS @hacks_je]

@saur1n yess...trying to escalate further. Thanks for the heads-up!!

[JEJE × HACKS @hacks_je]

smells like im inside the sandbox env...hope its not intended😵‍💫

[JEJE × HACKS @hacks_je]

@m1ru1 deepseek v4.1 flash...haven't tested new release

[JEJE × HACKS @hacks_je]

5 critics 3 mediums on self hosted program. Critics include payment configuration, exposed creds, auth issue & bypass and more....

deepseek + manual work = more criticss !!!🫶🫶

#BugBounty

[JEJE × HACKS @hacks_je]

@dd_pwnd yeahhh!!!

[bugcrowd @Bugcrowd]

Hack and party!🕺

[JEJE × HACKS @hacks_je]

@mugh33ra Congratulations brother 🎉

[JEJE × HACKS @hacks_je]

Check this out guys !!! Recovery tool for linux and multiple filesystems

Awesome work @x_iamnk 🔥

[IAMNK @x_iamnk]

GHOST RECOVER an open-source Linux data recovery.

Filesystem recovery • Carving • RAID • Partition recovery

Now I want the community to test it, break it, and contribute.

Data recovery & DFIR experts welcome.

https://t.co/iz6aQwvK1s

#Linux #OpenSource #DataRecovery #DFIR

[IAMNK @x_iamnk]

GHOST RECOVER an open-source Linux data recovery.

Filesystem recovery • Carving • RAID • Partition recovery

Now I want the community to test it, break it, and contribute.

Data recovery & DFIR experts welcome.

https://t.co/iz6aQwvK1s

#Linux #OpenSource #DataRecovery #DFIR

[JEJE × HACKS @hacks_je]

@__nav1n_ Funfact, you duplicated my report just by 5 hrs !! 😂 We need to learn the lesson together I think.

Love your works brother !!

[JEJE × HACKS @hacks_je]

@xlsize0bruh @Hacker0x01 SIRRR!!! Long time no see...keep rocking 🔥