mzn3r

pentesting for fun | #eWPTx , #ejpt , #CEH

[vulnix @vulnix0x4]

my $10/month hackbot found a privilege escalation vuln in @omarchy in its first hour.

setup:

1. run hermes agent on a device that stays on 24/7
2. get a $10 opencode subscription
3. set model to deepseek v4.1 flash
4. paste the prompt (in replies)

it runs 4 bots:
→ scout: picks the hackerone program most likely to pay out
→ researcher: finds vulns, builds PoCs, saves evidence
→ reviewer: tries to reproduce and disprove every finding
→ submitter: writes the report and uploads evidence, checks with you before submitting

it texts me when it finds something 👇

[Tom Dörr @tom_doerr]

Bypass Cloudflare challenges and bot checks by automating real Chrome browser instances with Stealth Browser MCP.

https://t.co/ZPG1h1NlDc

[mzn3r @itsmzn3r]

@DailyDarkWeb Is this posted on raidforums ?

[Alex Banks @thealexbanks]

I just fell for one of the best scams I've seen on X.

Here's what you need to know (and how to avoid it):

[4 of mallace @IceSolst]

Easily run an offensive security / pentesting LLM locally:

1. Download @lmstudio
2. Pick one of the @WhiteRabbitNeos models (I tried WhiteRabbitNeo-13B-GGUF but there are others eg distilled into Qwen)
3. no crime? unless?

[Tom Dörr @tom_doerr]

Tool to generate API documentation by capturing and analyzing HTTP traffic using mitmproxy

[mzn3r @itsmzn3r]

@algassabinasser كسمك يا فنان

[Harshleen @0xharshleen]

Search engines for osint🔍📑

https://t.co/px6y73sTbf
https://t.co/1jbdLae0ld
https://t.co/8TxdryAaBM
https://t.co/ZmKls8ZNc7
https://t.co/N28V3KiKXK
https://t.co/x0giPaZTw9
https://t.co/dqN1LVJVAu
https://t.co/mp6eu9xdqJ
https://t.co/xv8AXnQ2q8
https://t.co/ayBQcCrfPY
https://t.co/G9wvdv2pWN
https://t.co/4etPxMJ1yg
https://t.co/q7aNF4totq
https://t.co/RLuvxvDRye
https://t.co/BsWP9w3TRE
https://t.co/M6ZzEbQXEy
https://t.co/Dudcg9EzvH
https://t.co/ebEA99eplp
https://t.co/GDjrZAklAT
https://t.co/cFlPbuVI8U
https://t.co/IKz1NmhKNg
https://t.co/DQmUuMVZG1
https://t.co/J1RRSjWlGe
https://t.co/E5xE1KKaGE
https://t.co/E5xE1KKaGE
https://t.co/eKwz8wsoYA
https://t.co/gzJbcQfMsf

[mzn3r @itsmzn3r]

@_FajerM_ @INEsecurity مبارك لكم

[payloadartist @payloadartist]

🍪 Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in https://t.co/Ahs7bnPTMM Framework (CVE-2023-36899)

https://t.co/CUicDGrjvE

Interesting vulnerabilities found by @irsdl

#infosec #bugbounty #bugbountytips #cybersecurity

[mzn3r @itsmzn3r]

@mq_xz_ I think you missed the part "automate"

[Ayoub FATHI 阿尤布 @_ayoubfathi_]

I just updated leaky-path: https://t.co/6vhUjXMOfV

You're leaving a lot on the table if this wordlist isn't already part of your automation – it's what I use to keep 100s of applications tidy and clean across various tech stacks.

[mzn3r @itsmzn3r]

@_qyousef @akaclandestine Persistence

[Abhishek @aacle_]

Bug Bounty Automation -{ Oneliner Commands }
- { V2 }

[H4x0r.DZ @h4x0r_dz]

How to use FFUF over multiple hosts
$ for i in `cat host.txt`; do ffuf -u $i/FUZZ -w wordlist.txt -mc 200,302,401 -se ;done

#bugbountytips #BugBounty #ffuf

[张惠倩 @momika233]

cat domain | subfinder -d | httpx -nc -t 300 -p 80,443,8080,8443,8090,9090 -silent | katana >> sqli; sqlmap -m sqli --batch --random-agent --level 4
#bugbounty #bugbountytips
https://t.co/9XIorTurq0

[mzn3r @itsmzn3r]

@gregxsunday Doing it on your local machine

[mzn3r @itsmzn3r]

Glad to shared that I got eWPTXv2 certificate by @eLearnSecurity , it was a great journey 👍 #BugBounty #bugbountytip

[mzn3r @itsmzn3r]

@eLearnSecurity I'm getting 403 on your website