Null Spect0r

Pentesting (Network || Web || Api || Kubernetes || Containers & Docker )
Currently working as a Jr. IT Security Engineer
Hobbyist Bug Hunter

[Null Spect0r @nullspec7or]

@5mukx @github Maybe , just maybe , hosting through own gitea or similar solutions could be helpful.

[Null Spect0r @nullspec7or]

Just rolled out a new portfolio + blog website.
Will try to put the past web vulns chains , ethically hacking and securing different governments, militaries , VDPs and anything "cool" would be updated here. Till then, pls have this cat pic for your time reading this. Thanks!!

[Null Spect0r @nullspec7or]

> fable has heavy guardrails
> Fable processed my request to find bugs with a little twisted prompt
> Fable gave results in my mentioned format
> Fable has heavy guardrails
Not sure about the "heavy guardrails" lol

[Null Spect0r @nullspec7or]

@TwoSevenOneT This is really awesome and most importantly turns it's own functionality on its own lmao. Great work as always!

[Null Spect0r @nullspec7or]

A recruiter from Big 4, called and rejected my profile for which was asked by linkedin inmail. My skills and resume was 1:1 match , maybe overkill, but fall short on experience. Don't know how to cover this one 🥲😹
Shouldn't skills take priority than having "experience" 🙂

[OccupytheWeb @three_cube]

Chinese Hackers Have Intruded Into Western mobile networks and the results can be devastating!

https://t.co/79Ri0Lp8xx

[Null Spect0r @nullspec7or]

@_aircorridor @three_cube @DI0256 @IamSmouk @co11ateral The most useful thing I can say for these resources is 1. Sourced from/ inspired from real life 2. Applicability of this in real life
This becomes significant for things like , SCADA, SDR, Satellite and stuff.

[Null Spect0r @nullspec7or]

@ni5arga Excellent work!! The only time I got the fast response is through, nciipc and in that , specifically fast for PII data leak of Indian Army.
An old tale but maybe relevant.

[𝕡𝕨𝕟𝕚𝕖 @0day_ninja]

In 1984 Ken Thompson, one of the creators of Unix, gave his Turing Award acceptance speech and used it to demonstrate something that most people in security still have not fully thought through.

He showed that you can modify a C compiler to automatically insert a backdoor into any program it compiles, including the login system. Then you can teach that same compiler to insert the backdoor into future versions of itself, even after you remove all traces of the malicious code from the source.

So you clean the source. You recompile. The backdoor is still there. Because the compiler itself is compromised and the compiler is what turns your clean source into a running program.

The question he left the audience with was simple. How do you verify that the compiler you are using to build secure software has not already been tampered with?

You cannot read machine code the way you read source. And if the tool you use to check is also compiled by the same compiler, you are trusting a chain that could be poisoned anywhere.

This was 1984. People thought he was being theoretical.

Then SolarWinds happened in 2020. Then the XZ Utils backdoor in 2024.

https://t.co/faEqmYM2H8

#InfoSec #Hacking #SupplyChain #CyberSecurity

[Null Spect0r @nullspec7or]

Yup most direct shortest summary for HTTP return codes 😆

[Null Spect0r @nullspec7or]

@0day_ninja Honest reaction could be like 😂

[Null Spect0r @nullspec7or]

@0day_ninja Almost every CISO & compliance teams after they "ticked everything in compliance checklist" lol

[Null Spect0r @nullspec7or]

@0day_ninja @chompie1337 Thanks a lot for sharing this!!

[Null Spect0r @nullspec7or]

@attackndefense Oh, they were so close 😅

[Null Spect0r @nullspec7or]

This is really cracked at this point 💀
But anyway, serious efforts by some of the best minds and innovative techniques, both who got the chance and who didn't!
Need to continue learning a lot 😮‍💨😅

[TrendAI Zero Day Initiative @thezdi]

What an exciting Day! After Day One, we awarded $523,000 for 24 unique 0-days! DEVCORE (@d3vc0r3) is currently in the lead for Master of Pwn, but a pack of teams are right on their heels. Stay tuned tomorrow for more results and surprises. #Pwn2Own #P2OBerlin

[Null Spect0r @nullspec7or]

What just happened? Are my eyes deceiving me?
Unexpectedly pleasant surprise though.
Thanks chief @the_IDORminator !

[the_IDORminator @the_IDORminator]

Winners of the May 14th course giveaway have been picked by Grok! Congrats, and I will message you a code shortly!

@ch0mpaa
@the_jacked_dev
@readerhash707
@nullspec7or
@GroovySolutionz

[Jonny Johnson @JonnyJohnson_]

A while back @harmj0y released Koh, which keeps logon sessions alive after a user logs off - letting an attacker reuse their credentials after the session ended.

Poking around today - I found event 6182 in the LSASRV ETW provider, which fires when this is detected.

This is a timer-based event, not real-time, with the default timer being set to 30 seconds after logoff

[McCaulay @_mccaulay]

RCEliteLLM - Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

https://t.co/ak9bOVRG0N

[striga @striga_ai]

PoCs for Apache Tomcat Unauth RCE (CVE-2026-34486) and Apache httpd Pre-auth RCE (CVE-2026-23918) are now public on our Github.

Tomcat exploit is fully reliable. httpd chain works in a controlled lab setup with a known info leak.

https://t.co/D3dg5iTuwP
https://t.co/2zyr1ds4Mo