ojasva meshram

[ojasva meshram @love07oj]

@Vivek23647571 Indian companies and government sites don't give a shit about bugs or anything because India don't have a Data protection act like other countries.

[ojasva meshram @love07oj]

@12Leverage @modat_magnify https://t.co/rWWnUbXMJl

[ojasva meshram @love07oj]

Successfully completed Operation Breadcrumb by @TCMSecurity 🧩

Really enjoyed working through this one. The challenge kept evolving in unexpected directions and rewarded careful observation at every stage.

No spoilers from me until the CTF officially closes on June 2 👀

#CTF

[ojasva meshram @love07oj]

@yousukezan check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@fofabot check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@devploit check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@rootxharsh @HacktronAI check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@HunterMapping check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@ynsmroztas Thank you for the exploit

check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

[ojasva meshram @love07oj]

@prasenx check my nuclei template for detecting cve-2026-44578
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@The_Cyber_News created the nuclei template for detecting it
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

@lostsec_ @The_Cyber_News created the nuclei template for detecting it
https://t.co/rWWnUbXMJl

you can also find the link to exploit here

[ojasva meshram @love07oj]

Built and released a Nuclei detection pack for CVE-2026-44578 (Next.js WebSocket Upgrade SSRF).

The templates support:
• AWS
• Azure
• GCP
• DigitalOcean
• Oracle OCI

GitHub Repo:
https://t.co/rWWnUbXMJl

exploit credits: @ynsmroztas

[BuBBliK @k1rallik]

MICROSOFT IGNORED HIM. NOW YOUR PC PAYS FOR IT

One researcher reported a critical Defender vulnerability privately. Microsoft dismissed it. So he published it - then dropped 2 more in 13 days.

The latest is called RedSun. It's unpatched. It works 100% reliably on Windows 10, 11 and Server right now.

It doesn't bypass your antivirus. It uses your antivirus as a weapon.

Defender tries to restore a flagged file - the exploit redirects that write into C:\Windows\System32. No admin. No popup. SYSTEM access in seconds.

-> BlueHammer - patched
-> UnDefend - breaks Defender updates forever
-> RedSun - unpatched, public PoC on GitHub

His message to Microsoft: "I was not bluffing. And I'm doing it again."

RCE is reportedly next. That one needs zero physical access.

[Het Mehta @hetmehtaa]

My friend built an AI agent.

Took 2 hours.

It scanned 10,000 endpoints, found critical vulnerabilities, wrote the report, and sent remediation steps automatically.

Bug bounty payouts started hitting same week.

$200k in 3 months. Zero manual work.

The AI does recon, exploitation, reporting. All automated.

He just reviews the output over coffee.

Okay hear me out?

This guy doesn't exist. I made all of this up.

Because every other "I vibe coded and hit $500K MRR" post is also made up.

Stop believing everything you see online, and start hacking real targets.

[The Hacker News @TheHackersNews]

⚠️ URGENT: A 10.0-severity bug just hit React Server Components and Next.js.

It lets anyone run code on your server — even without logging in.

🔗 Details → https://t.co/9pG1bxMlCw

⚙️ Fix: update to patched versions now.

[ojasva meshram @love07oj]

6/
If you’re a:
✅ Pentester
✅ Bug bounty hunter
✅ CTF player
✅ Red teamer
✅ Or just a curious builder...
Give it a ⭐ on GitHub:
https://t.co/TtFOrmbrVK
More tools like this coming soon 🔥
#Infosec #CyberSecurity #OpenSource #GoLang #IndiBrute #BugBounty #IndiaHackers #CTF

[ojasva meshram @love07oj]

🧵 Just dropped a tool for pentesters & bug bounty hunters:
🔗 https://t.co/TtFOrmbrVK
It generates Indian 10-digit mobile number wordlists — super useful for brute-force testing where mobile numbers are used as passwords.

Let me explain 👇

[ojasva meshram @love07oj]

5/
📂 Outputs clean, newline-separated .txt wordlists
🧪 Easy to integrate into custom scripts and tools
🔒 Built for ethical testing only