Nakomahi

God is always with me 👑

:)

Web 2 && 3 bug hunter

[Coffin @lostsec_]

Finally, the wait is over! 🔥

I know a lot of beginners have been waiting for this because there hasn’t been a single complete guide showing how to set up Claude Code for bug bounty hunting and using the DeepSeek API at a very affordable cost.

In this video, I’ll walk you through the entire setup step by step, and you’ll also see how powerful DeepSeek V4 Flash is for real-world bug hunting tasks.

Trust me, the results will surprise you.

🎥 Watch now and level up your bug hunting workflow.
https://t.co/tOnpkzGKq0

[Abhishek Meena @aacle_]

An SSRF in Shopify screenshot feature led to root on every container in their cluster.

SSRF → cloud metadata → kube-env → Kubelet certs → kubectl → root shell.

7 steps, $25,000 bounty. Most hunters stop at step 1.

Mapped the full escalation ladder from 313 reports:

https://t.co/Y3f7auy8Vw

[Nakomahi @NakoMahi]

Web3 is beautiful… and sometimes scary.

This article is a great reminder:

https://t.co/hSRQRFztWd

Did you know a 12-word seed from this wallet could work in other wallets like Trust Wallet?

The issue wasn’t the words — it was weak randomness during generation. 🔐

[Root Vuln @rootvuln]

Found SSRF on an API endpoint that converts HTML to PDF. Uploaded HTML with an external stylesheet link, and the server actually fetched it — confirmed via OOB callback. Also tied to a known CVE in the outdated library it's using. Reported responsibly 🛡️
#infosec #bugbounty #SSRF

[Nakomahi @NakoMahi]

@stefan_opara @debu8er @voorivex web 2

[Nakomahi @NakoMahi]

Let's fuel up before class. 🔥🔥

Special thanks to @debu8er and @voorivex !

[Nakomahi @NakoMahi]

@realraminfp Nice

[Yoda @teslayoda]

Jensen: “Do you want the Wifi password?”

Elon: “I’m good. I own the sat network.”

[CertiK Alert @CertiKAlert]

#CertiKStatsAlert 🚨

Combining all the incidents in June we’ve confirmed ~$81.7M lost to exploits with
~$12.7M of the total attributed to phishing.

With 67 incidents recorded, June has the highest number of incidents since the beginning of 2026.

More details below 👇

[Nakomahi @NakoMahi]

@pmpmprn_lol @Hacker0x01 😍😍

[Nakomahi @NakoMahi]

@boomerangBS @404GhaToTKacH @Hacker0x01 N/A*

[Nakomahi @NakoMahi]

@infinitelogins RESOURCES

[Nakomahi @NakoMahi]

@voorivex اصلا مرد همینطوره زندگیش .
هر جا هستی بنازمت 👏🫶

[Nakomahi @NakoMahi]

@AtaTurk1925 @p__oria 🔥🔥🔥

[Nakomahi @NakoMahi]

@yousefccfc @voorivex Nice Bro 👑👑👑👑

[Nakomahi @NakoMahi]

thanx my God 👑

[Nakomahi @NakoMahi]

@abbasneisee @okexir @okexir دزد به تمام معنا هستن

[Coffin @lostsec_]

Hi everyone! I just built a WaybackURLs extension that saves you a ton of time when gathering archive URLs. it supports main domains, wildcards, specific paths and sensitive file extensions.
Give it a try and let me know your feedback!
https://t.co/vezBMPFpgp

[Nakomahi @NakoMahi]

@AmirMSafari 🔥🔥🔥🔥

[Nakomahi @NakoMahi]

@hoseinshurabi @mehdiparandin 😍😍