luckythandel

Security Researcher & Public speaker

[Ninad Mishra @NinadMishra5]

I once found a critical on a public bug bounty program just by viewing the source code of a page, here's what happened👇

1. Target implemented a feature allowing users to post private images on their profile
2. images were publicly accessible by URLs leaking in the html source💰

[infosec.ink @inkinfosec]

Infosec Ink: Learn web3 hacking

Reply with your solana wallet address to get infosec ink airdrop

Access: infosec[.]ink

[vx-underground @vxunderground]

Lockbit ransomware group has been compromised. Their backend panel was dumped.

You can see my build logs in the data dump.

Lockbit gave me access after I sent him a bunch of cat pictures.

[Daily CyberSecurity @Daily_CyberSec]

CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases

https://t.co/az9sqf8NDL

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Use NextJS? Recon Tip by renniepak

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

#infosec #cybersec #bugbountytips

[0xor0ne @0xor0ne]

Intro on how intercepting Linux system calls

https://t.co/XRepef1XWO

#cybersecurity #Linux

[luckythandel @luckythandel]

@DearS_o_n This is what I tell myself daily, but sadly still struggling

[luckythandel @luckythandel]

@NinadMishra5 Umm, CPU vulnerabilities like specture seems missing

[AnonKryptiQuz @AnonKryptiQuz]

Gained a reverse shell through a PNG file using I-Espresso and Xploitra.

Curious to try it yourself? Check the links below ⬇️
🔗 I-Espresso: https://t.co/q1DUWPF7Wq
🔗 Xploitra: https://t.co/Y3pnm02160

[Tom Dörr @tom_doerr]

Are there scrapers that just randomly go through sites?

[Intigriti @intigriti]

Did you know a new JWT Attack was recently published?! 🤯️

CVE-2023-30845 bypasses JWT checking by using the X-HTTP-Method-Override request header!

[0xor0ne @0xor0ne]

Home router hacking presentation at HITB2023
(@NCCGroupInfosec)

"Your not so Home Office - SOHO Hacking at Pwn2Own"

https://t.co/WgT1UlzRtP

#soho #router #exploit #embedded #iot #infosec #cybersecurity

[0xor0ne @0xor0ne]

Nice repository collecting techniques to infer the Linux kernel base virtual address (KASLR bypass)

https://t.co/hhqZXzcWHd

#Linux #kernel #kaslr #infosec #cybersecurity

[0xor0ne @0xor0ne]

Illustrated connections
Very useful resource by @xargsnotbombs

QUIC: https://t.co/iQzQGXS8hW
DTLS: https://t.co/p65sLvl9xj
TLS 1.2: https://t.co/0mKhFaqUTk
TLS 1.3: https://t.co/wTkHbzNLXw

#networking #quick $tls $infosec #cybersecurity

[luckythandel @luckythandel]

@Shubham_pen You just showed me a good picture that I can show while I am telling other why windows sucks 😃

[Farah Hawa @Farah_Hawaa]

. @Hacker0x01 absolutely killing it with the swag for #h1303 🤌🏻

[luckythandel @luckythandel]

@intigriti Deserilaization bug

[luckythandel @luckythandel]

@AmanSin55145395 @GodfatherOrwa @Kanhaiya_sh4rma @ADITYASHENDE17 I think the value is being sanitized for bads chars but the length of the inputs is not being checked

[luckythandel @luckythandel]

@gentilkiwi @_xpn_ I do🤗

[luckythandel @luckythandel]

@sec_r0 This is so true. And new comers to this field should know this. Stop wasting your money guys.