musa şana

security researcher, application security, bug bounty hunter

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[王依依棺材馅儿 @ec12edfae2cb221]

不升级 -> 0day.
升级 -> 供应链攻击.

[NOPcon @NOPcon]

NOPcon is back! Call for Papers is now open. After a long break, we’re opening the doors again to the community.

If you have something cool to share, this is your stage. Submit your work: https://t.co/oZYPf32tgt
#nopcon2026

[Edu Novella @enovella_]

Syscall Tracer🔥🔥
Sometimes it’s useful to observe the system calls happening inside a given target process. Especially if the target includes some kind of Frida detection, root detection, or any other kind of Runtime Application Self-Protection (RASP).
https://t.co/IEl1hTmPjV

[musa şana @musana]

@fatihguzeldev 8. kapatılırken diğer taraftan bir delik açılıyor.

Sonuc olarak, senaryoya , tehtide , mimariye doğrudan bagli olarak tercih edilecek yöntemler ve cevap değişkenlik gösterecektir.

[musa şana @musana]

@fatihguzeldev 7. mutlak bir çözüm değildir. Kullanıcıdan alınan bir girdinin script etiketindeki src'de reflect edilmesi senaryosunda CSP'de baypasslanır, aynı contexte çalıştığı için same-site'da işe yaramayacaktır. Güvenlik tam olarak böyle birşey sanırım. Kedi-fare oyunu gibi. Bir tarafı

[musa şana @musana]

CF-Hero just updated to v1.0.4, fixed more bugs and now supports ZoomEye.

Huge thanks to @zoomeye_team for sponsoring CF-Hero 🤘🎉

[ZoomEye @zoomeye_team]

🚀 Tool Recommendation — CF-Hero from @musana

🔥 Now integrated with the ZoomEye API for even more powerful intelligence gathering!

Tool Overview: CF-Hero is a comprehensive reconnaissance tool designed to uncover the real IP addresses behind Cloudflare-protected web applications. It leverages multiple methods for multi-source intelligence collection—an essential tool for network reconnaissance and security research.

Key Features: DNS Reconnaissance, Third-party Intelligence Integration, Custom JA3 Fingerprint Support, Concurrent Scanning, Standard Input Support (Piping) and more.

🔗 https://t.co/QhvxGbhVPl

💡 Whether you're looking to integrate ZoomEye into your existing tool or develop a new one based on our platform, we're here to fully support you! All integrated tools will be featured on the ZoomEye official website for greater visibility. Feel free to reach out to us anytime!
👉https://t.co/Rc4PC692bM

[Nicolas Krassas @Dinosn]

CF-Hero: discover the real IP addresses of web applications protected by Cloudflare https://t.co/eZksknMcsL

[ADEO Cyber Security Services @adeosecurity]

ADEO Cyber Security olarak, Mobil uygulama güvenliği alanında geliştirdiğimiz yapay zeka destekli uygulamamız "LLMobile - Mobile Security with AI Insights" siber güvenlik dünyasındaki en prestijli etkinliklerden Black Hat Asia 2025 Arsenal tarafından kabul edildi.

Black Hat'te, yapay zekanın mobil tehdit analizi üzerindeki etkilerini ve güvenliği nasıl daha ileriye taşıyabileceğini paylaşacağız. 3 Nisan'da Singapur’da bizimle buluşmak isteyen herkesi sunumumuza bekliyoruz. @BlackHatEvents @adeosecurity

#BHASIA #BlackHatAsia #CyberSecurity #MobileSecurity #AI #SecurityResearch #Infosec #AdeoCyberSecurity

https://t.co/ITR5iIVwPm

[Mahesh Sathiamoorthy @madiator]

Some people asked me about a resource for learning about Transformers.

Here's a good one I am sharing again -- it covers just about everything you need to know.

https://t.co/avtzL5oNmd

Amazing stuff. It's totally worth your weekend.

[Tom Dörr @tom_doerr]

Yesterday, I tried to find out where the Deepseek servers are located, but I couldn't because they are Cloudflare-protected. Just now, someone randomly sent me a link to: "CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications"

[musa şana @musana]

@tom_doerr some feel, some know :)

[Mandiant (part of Google Cloud) @Mandiant]

Cyber threats are evolving, and so should your defenses. Integrating AppSec into Red Team assessments more accurately simulates real-world tactics, and uncovers hidden vulnerabilities.

See how AppSec expertise turns risks into resilience: https://t.co/66fMNRBCwv

[musa şana @musana]

@numanozdemircom @artinscience Tebrikler, distributed ataklar için bu tür bir frameworkun eksikliği hissediliyordu 👏🎉