sunny‏‏‎

Learning android hacking | bug hunter |

[sunny‏‏‎ @hulkvision]

Hello everyone, i have written a blog for the first time, i hope you all will like it😄. https://t.co/sepX6mXtXx

#bugbounty

[sunny‏‏‎ @hulkvision]

Send a GIF, crash a phone. The fix for CVE-2025-48631 missed a code path and the bug is still there. New blog post on how I found it
https://t.co/uK0oMhypb4

[Debangshu 🇮🇳🥷 @ThisIsDK999]

https://t.co/oCBmIJ6K1L
Here's the thread on how to achieve RCE via GroovyConsole in AEM even with a heavy dispatcher configuration!

[Sean Pesce @SeanPesce]

Exploiting Android Client WebViews with Help from HSTS

https://t.co/3gP6pVV8rM

[sunny‏‏‎ @hulkvision]

Exploiting JavaScript Interface for Unauthorized Access in a 'global' cryptocurrency exchange android app

https://t.co/0k6dQWpeyH

#infosec #androidapp

[Jinay Patel @0_0eth0]

Conducted IoMT PT on one of the large manufacturers of different medical devices, critical flaw leads to access their azure!

Here is how:

TL;DR
Frontend application was running on kiosk mode, backend was win with restrictions such as application control, where you cant,
[1/n]

[sunny‏‏‎ @hulkvision]

@HackerOn2Wheels also i have been reading about smart contract hacks for quite some time now.

[sunny‏‏‎ @hulkvision]

Started my smart contract auditing journey after completing the @CyfrinUpdraft course with @aiarena_ @code4rena contest.

Reported 3 high severity bugs, waiting for the contest results to see how i performed.

[sunny‏‏‎ @hulkvision]

@HackerOn2Wheels @CyfrinUpdraft @aiarena_ @code4rena no i did not have past smart contract development experience, I just had some source code review experience from my office job.

[Dimitri Os @Ch0pin]

Road to fuzzing android applications

Creating JVM instances:
https://t.co/DGGdUZ05Ze

[d3d aka dead (dead, мёртв, 死了) @deadvolvo]

#0day #research #bugbounty #informationsecurity https://t.co/hMzpulkHUW

How I *AM* able to abuse Akamai to abuse F5, to abuse all of their customers. This is a bug chain that doesn't require a bug on the target domain to exploit them. But what do I know, I am a freelance nobody.

[sunny‏‏‎ @hulkvision]

Thank you @GoogleVRP for the awesome gifts🤩
#BugBounty

[Jack Halon @jack_halon]

Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.

Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! https://t.co/bbFjOOzlOu

[Aditya Soni @hetroublehacker]

I have published my Blog on "How I approached Dependency Confusion!" Hope you people will like it :)
#bugbounty #infosec https://t.co/hQzIYDNSWy

[Natalie Silvanovich @natashenka]

New blog post: Zooming in on Zero-click exploits

https://t.co/yvL4DvPJyv

[sunny‏‏‎ @hulkvision]

@LukasStefanko @artem_i_baranov yeah there is typo in the blog, or should i say learnt it saying 'transversal' instead of 'traversal' 😅. Thanks @artem_i_baranov for pointing out my mistake.

[sunny‏‏‎ @hulkvision]

@enovella_ before v21.9.0.19548

[sunny‏‏‎ @hulkvision]

Hello everyone, i have written a blog for the first time, i hope you all will like it😄. https://t.co/sepX6mXtXx

#bugbounty