Karim

just like to hack and review code
الحمدلله

[Karim @kbksi_]

@dec0bb good work, keep up

[Karim @kbksi_]

@StateDept lies after lies

[Pix🔎 @PixBuilds]

How To Tell If Your Girlfriend Is A Spy:

[Karim @kbksi_]

@NOTTODAYfogo @InfinityWard @charlieINTEL @CallofDutyCM @CallofDuty @CallofDutyUK what do you mean by warning if you did it 2 or 3 times, that doesnt sound like a mistake that needs warning

[Karim @kbksi_]

The guy wrote an essay for activation regarding the ban
Just for the devs to put a 4K video of him cheating in the comments 💀

[CallofDutyCM @CallofDutyCM]

@AnYPtv_ We genuinely reviewed it. This is not normal behavior, and it's just one of the 16 boosting lobbies this account was in.

[Frank @jedisct1]

CVE-2026-83844: Remote Code Execution in Microsoft Paint. https://t.co/omoSAcWUS7

[Karim @kbksi_]

@kapeka @vercel From hunting there to becoming one of them, congrats, good work

[Karim @kbksi_]

@Zeus_exe1 @Hacker0x01 @arc relax man they have received over 500 reports, you're not gonna get special treatment :/

[Parameter @parameter_ai]

We hacked ChatGPT (using ChatGPT).

We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it.

OpenAI rated it P1 and fixed it Oct 26.

[Karim @kbksi_]

@a7mad__n1 @Hacker0x01 You are saying h1 closed two of your accounts
So they are not wrong, that's their policy and you agreed to it in the beginning by signing up

[Karim @kbksi_]

@zonduu1 @Bugcrowd They want you to nuke the entire server as a PoC

[Assetnote @assetnote]

Our security research team discovered a cross-site scripting vulnerability in Cloudflare's /cdn-cgi/image/ endpoint by chaining an SVG sanitizer bypass with a new Cache-Control header trick to bypass the CSP. The issue was reported to Cloudflare and has since been fixed.

You can read more here:

https://t.co/0H9xqRHwum

[Karim @kbksi_]

@Bugcrowd The Customer sent a private message to bugcrowd staff

[Marius du Preez @mdp_sec]

https://t.co/hxXItV914C

[Orange Tsai 🍊 @orange_8361]

Just dropped a new blog post! 🔥

https://t.co/OeVWg1Abw5

[Karim @kbksi_]

@0x09700 @h4x0r_dz You’re lucky you did not get banned because you are reporting slop

[Karim @kbksi_]

@AimedGuendouz when i pass 70K

[Timo Lo(n)gin @timolongin]

Blog post about From header smuggling in Apple iCloud just dropped.
Sending emails as [email protected], exotic parsing, and a $15,000 bounty.
https://t.co/IzPrUbDw5Q

[Lisan al Gaib @scaling01]

completely insane

OpenAI agents communicated via cache timing differences, without any shared files or network connection

[Karim @kbksi_]

@ridvanyagli @4osp3l @ImoJOnDz 🧐