Aditya Soni

~ Your friendly neighbourhood hacker ¯\_(ツ)_/¯

[Aditya Soni @hetroublehacker]

Ah shit, here we go again.

[Aditya Soni @hetroublehacker]

Maybe watch the codebase next time? Threatening researchers instead of patching is how you guarantee the next finder just sells it instead of reporting it.

[ANI @ANI]

Cyber security agencies of the Govt of India, such as the Indian Cybercrime Coordination Centre (I4C), etc., are keeping a close watch on the cyber attacks on the CBSE OSM reevaluation portal. Strict penal action will be taken against the perpetrators - Education Ministry sources to ANI

[Aditya Soni @hetroublehacker]

@galnagli @InsiderPhD this is real

[Aditya Soni @hetroublehacker]

@hetmehtaa @rikeshbaniya @deepseek_ai @claudeai @grok aap na hote toh kya hota X ka?

[Aditya Soni @hetroublehacker]

@_godiego__ @Bugcrowd Just BC thing:

First response -> NMI, need proper steps
Me - Everything is in the report, nothing to add
Second Response - Triaged

[Aditya Soni @hetroublehacker]

@divyansh2401 @akita_zen @Hacker0x01 bhaiii lessgooo congratulations!

[Aditya Soni @hetroublehacker]

@damian_89_ I think, you already reported one or two critical to same program and then it got suspended 🤭

[Aditya Soni @hetroublehacker]

@infinitelogins crazyyy man!

[Ben Sadeghipour @NahamSec]

AI isn't replacing bug bounty hunters. It's replacing the gap between you and a seasoned hacker: the mentor you don't have, the writeup you can't find, the code review you can't get. If you use it right.
New video on exactly how: https://t.co/65HkPgr7UZ

[Devansh (⚡, 🥷) @0xAsm0d3us]

Needle in the haystack: LLMs for vulnerability research

I've distilled my experience of sending thousands and thousands of prompts for using LLMs to discover vulnerabilities into a single write-up.

These are the conclusions I came to..

(link in comment)

[Aditya Soni @hetroublehacker]

@payloadartist exponential increase in the volume, reports missing valid POCs is a thing.

[Aditya Soni @hetroublehacker]

Did the limit on claude just reset before it's actual reset?

[International Cyber Digest @IntCyberDigest]

‼️ The axios lead maintainer has gone public on how he was socially engineered into installing the malware behind the npm supply chain attack.

We have example images showing exactly how the attack was staged.

[NZ ☄️ @CodeByNZ]

OpenAI's latest repo has Claude as the third top contributor 😭😂

[Aditya Soni @hetroublehacker]

@Masonhck3571 lessgoo crazy!

[Dom Sagolla @dom]

oh this is going to be addictive

[Aditya Soni @hetroublehacker]

@Masonhck3571 @rez0__ @sshell_ @ArmanSameer95 @AnthropicAI I'm still working on 2.1.71 and I have started receiving this

[TESS @ArmanSameer95]

@AnthropicAI

Your recent update just killed Claude capabilities to do any security research.

[Aditya Soni @hetroublehacker]

@Masonhck3571 hahahaha

[Intigriti @intigriti]

￣￣￣￣￣￣￣￣￣￣￣￣￣￣|
You don't need certs to be
succesful in bug bounty
|＿＿＿＿＿＿＿＿＿＿＿＿＿＿|
\ (•◡•) /
\ /
——
| |
|_ |_