Zolo Mana

I am Zolo Mana. watch me. hacker and #ai developer

[Zolo Mana @ManaZolo]

@SecurityMB What do I need to reproduce this? Thanks

[Zolo Mana @ManaZolo]

@ohader @OctagonNetworks Can u share pls

[Zolo Mana @ManaZolo]

@ohader @OctagonNetworks How did u post that iframe one

[pwn.ai @pwn_ai]

CSP Level 2: There is a simple XSS here. Can you pop alert() using the vulnerability? 🤔 10$ for first valid solution. 💢🔥

https://t.co/0RxnFcsAkU

[Zolo Mana @ManaZolo]

@Hacking4Arabs @OctagonNetworks Can u share that one sir?

[Zolo Mana @ManaZolo]

@OctagonNetworks 🔥🔥🔥

[pwn.ai @pwn_ai]

XSS CTF solution: The CSP policy only allows JS from same domain. We can turn our injection into a valid JavaScript and reinclude it. Kinda like an XSS inception 😉 - congrats for those who solved it. Next round Monday. #bugbountytips

[Luke Stephens (hakluke) @hakluke]

How to exit vim: The first contact way by @caseyjohnellis! 🤣

[pwn.ai @pwn_ai]

There is an XSS here somewhere. 🤔
Can you pop alert() here?
10$ reward for the first valid solution! 💢🔥 attach proof in reply.

https://t.co/KaZy17D5Ea #bugbountytips

[Ashar Mahmood @Hx_0p]

This is My first ever security report writeup. https://t.co/xaBoKvBU79
Follow me for updates and more interesting discoveries.

#CyberSecurity
#ethicalhacking
#bugbountytips
#Infosec
#Writeup
#Cybersecuritynews

[Kyser Clark - Cybersecurity @KyserClark]

How I Passed the #OSCP on My First Try

I talk about my OSCP journey and give you tips on how you can pass your exam too.

https://t.co/CQbWY2eFKy

@offsectraining

#TryHarder #LabEveryday #InfoSec #Hacking #EthicalHacking #PenetrationTesting #PenTesting #Cybersecurity #Cyber

[pwn.ai @pwn_ai]

Can you find the flag by exploiting a vulnerability? 10$ for first solver! 💢

https://t.co/CEzab4Rozt

[Fat @fattselimi]

Triaged today at @BMWGroup program in @Hacker0x01 don’t forget to test /node/ endpoint in your Drupal Targets.

#bugbounty #bugbountytip #bugbountytips #ethicalhacking #cybersec #cybersecurityawareness #infosec #informationsecurity

[jay mac @jay__smooth19]

What I’m feeling tbh

[Deepak bug_vs_me @bug_vs_me]

WordPress Plugin WPML Version < 4.6.1 RXSS vulnerability

Found by :- @bug_vs_me and @falcon_charan on 13th MArch 2023

Nuclei template:- https://t.co/4ks7Xdunym

and payload:-
https://xxxxxxx/wp-login.php?wp_lang=%20=id=x+type=image%20id=xss%20onfoc%3C!%3Eusin+alert(0)%0c

[Bipin Jitiya @win3zz]

An old WebLogic Server RCE

Details 👉 https://t.co/xSnhaEbapx

#Security #bugbountytip #hacking

[Deepak bug_vs_me @bug_vs_me]

Just wrote a bash script which collect all wild and non-wild in scope domains from all programs

i had set this script to collect paid programs only but you can change it in the script

https://t.co/j0KKBHkNLQ

#bugbountytip

[jay mac @jay__smooth19]

Wait can anyone parlay homeruns? For this padres game