ozzy

offensive security and non-offensive thoughts

[ozzy @oz9un]

after a big delay i finally published https://t.co/c6Tz8iDywD

i think it's a good starting point to explore how ai can shape the future of the web enumeration, because traditional methods like fuzzing with wordlists feels outdated

would love to hear y'all feedbacks on that! and you're more than welcome to contribute

here is the talk from @defcon :
https://t.co/bqBTyBO2pa

[Fatih Çelik @fatihclk01]

I recently discovered two new RCE vulnerabilities in n8n.

One is a bypass for my previous finding (CVE-2025-68613), and the other is a fresh Command Injection in the Git Node.

1. The Sandbox Escape (CVE-2026-25049) I managed to bypass the fix for my original report (CVE-2025-68613) multiple times. By using Javascript quirks like Template Literals and Object Destructuring, I could escape the sandbox again. The issue has been fixed in n8n versions 1.123.17 and 2.5.2. Users should upgrade to these versions or later to remediate the vulnerability.

Full technical analysis: https://t.co/RX1Zg2VMX9

2. Git Node Command Injection (CVE-2026-25053) This one leverages the addConfig operation in the Git Node. It lacks validation, allowing an attacker to inject payloads into core.sshCommand. Leads to RCE. The issue has been fixed in n8n versions 2.5.0, and 1.123.10. Users should upgrade to this version or later to remediate the vulnerability.

Full technical analysis: https://t.co/qxkmdmWhoY

Thanks n8n team!

[ozzy @oz9un]

bir suredir web security enumeration tarafinda LLM'leri nasil kullanabilecegimizi ve seclist gibi wordlistlerin yerine nasil gecebilecegini gosteren bir proje uzerinde calisiyorduk:
https://t.co/c6Tz8iDywD

ozellikle bug hunting/web security tarafinda calismalar yapan kisilerin feedbacklerini almayi cok isterim

ve tabii ki custom model training/qwen fine tuning kisimlarinda da hicbir zaman destegini esirgemeyen @AlicanKiraz0 'a tesekkurler, onsuz olmazdi 🫶🧡

[ozzy @oz9un]

after a big delay i finally published https://t.co/c6Tz8iDywD

i think it's a good starting point to explore how ai can shape the future of the web enumeration, because traditional methods like fuzzing with wordlists feels outdated

would love to hear y'all feedbacks on that! and you're more than welcome to contribute

here is the talk from @defcon :
https://t.co/bqBTyBO2pa

[Rıza @rizasabuncu]

İnternet ağı bana hep büyüleyici gelmiştir; yıllardır sektörde olmayan arkadaşlarıma da, eşime de defalarca heyecanla anlatırım.
Dün bu tutkuyu bir adım öteye taşıyıp https://t.co/yay8zZisb7’u geliştirdim 🥳

Hem sıfırdan başlayanlar hem de meraklı öğrenciler için; teori + simülasyon içeren interaktif bir öğrenme alanı sizlerle. 🚀

[Alican Kiraz @AlicanKiraz0]

TR & EN | Selamlar Dostlar, şu ana kadar açık kaynak olarak yayınlanmış en büyük parametreli siber güvenlik modeli olan TrendyolSecurityLLM-v2-70B modelimizi Huggingface'de open source olarak kullanıma sunduk. 🙏🏻🧡🎉

Bu modelimiz en kapsamlı Siber Güvenlik Ai Benchmark’larından CS-Eval'de İngilizce'de global'de 3. ve Multi-Lang'de 5. sırada yer aldı. Ayrıca modelimiz top 10'da yer alan modeller arasında açık kaynaklı olarak sunulan tek model. 🙏🏻🎉

Özellikler;
- Savunma Odaklı Muhakeme: Standartlarla (OWASP/ATT&CK/NIST/CIS) hizalı öneriler; “neden/kanıt” içeren adım adım açıklamalar.
- Politika ve Mimari Kılavuzlar: Kimlik/erişim, şifreleme, ağ segmentasyonu, bulut kontrol setleri, veri sınıflandırma ve alarm mantığı.
- IR & Threat Hunting Desteği: Olay akışı, triyaj kontrol listeleri, güvenli log sorgu kalıpları, playbook iskeletleri.
- Cloud & DevSecOps: CI/CD güvenlik kapıları, IaC yanlış yapılandırma örüntüleri, K8s hardening kontrol listeleri.
- Tasarımla Reddetme (Refusal-by-Design): İstismarcı/kötücül istemlere uygunlukla hizalı yanıt kalıpları ve güvenli alternatifler.

Hello friends, we’ve open-sourced our TrendyolSecurityLLM-v2-70B model on Hugging Face, the largest-parameter open-source cybersecurity model released to date.

On CS-Eval, one of the most comprehensive cybersecurity AI benchmarks, the model ranks #3 globally in English and #5 in the multi-language track. It’s also the only open-source model among the top 10. 🙏🏻🧡🎉

Features;
- Defense-Focused Reasoning: Standards-aligned (OWASP/ATT&CK/NIST/CIS) recommendations with step-by-step explanations that include the “why/evidence.”
- Policy & Architecture Guides: Identity/access, encryption, network segmentation, cloud control sets, data classification, and alert logic.
- IR & Threat Hunting Support: Incident flow, triage checklists, safe log query patterns, playbook skeletons.
- Cloud & DevSecOps: CI/CD security gates, IaC misconfiguration patterns, K8s hardening checklists.
- Refusal-by-Design: Safe alternatives and compliance-aligned response patterns for exploitative/malicious prompts.

https://t.co/dqtbg2HeUH

[Yunus Aydın @aydinnyunuss]

Released ai-captcha-bypass 🚀 — new version for gpt4-captcha-bypass.

- Supports reCAPTCHA, visual puzzles, simple & complex text CAPTCHAs, and audio challenges. I’ll be presenting this research at @BlackHatEvents!

https://t.co/mVQSZ4Vfme

#bugbounty #security

[Rıza @rizasabuncu]

Daha önce directory-listing sayfalarının ağacını çıkaran bir uygulama yayınlamıştım, şimdi de bunu AI ile yapan bir MCP server geliştirdim, incelemek isterseniz link aşağıda 👇✨

https://t.co/UrR0BNjYG4

[Alican Kiraz @AlicanKiraz0]

The Qwen3-14B finetuned version BaronLLM, which we developed together with @rizasabuncu, @oz9un, Mertcan Kondur, İsmail Yavuz and Melih Yılmaz, ranked 4th among all models in the English cybersecurity benchmark category of CS-Eval 😳🥹🔥🔥☠️☠️ We even surpassed giant models like DeepSeek, Qwen72B, and GPT-4 🔥🥹

[ozzy @oz9un]

@AlicanKiraz0 abi çok teşekkürler emeğin desteğin çok büyük çok kıymetli 🫶🫶🫶

[Recon Village @ReconVillage]

⏰ Up next in 10 minutes - "enumeraite: AI assisted web attack surface enumeration" by Özgün Kültekin @oz9un at Recon Village. Don’t miss it!

cc: @DEFCON #AI #OSINT #DEFCON33 #DCVillages #ReconVIllage

[ozzy @oz9un]

feels great to be back at @defcon !

this time I’ll be speaking at @ReconVillage about AI-assisted web attack surface enumeration.

say hi if you’re around 🥳

[Recon Village @ReconVillage]

🎯 Mark your calendars!
"enumeraite: AI assisted web attack surface enumeration" by @oz9un is set for Recon Village at @defcon 33.

Explore how AI can handle the boring bits of recon so you can focus on breaking things that matter.

#CyberSecurity #OpenSourceIntel #Hacking

[ozzy @oz9un]

@rizasabuncu @mucahic iyi cocuklara benziyolar rez

[ozzy @oz9un]

@r00tten @Apple congrats abi 💪🍎

[Rıza @rizasabuncu]

Finally got a bounty from Apple after a long break! 🍏💰 Scored $6K for a Stored XSS I reported last month on https://t.co/KSpB8F6QlN. Big thanks to @bugraeskici for the CSP bypass tips! 🔥 #BugBounty

[ozzy @oz9un]

@divinepwner portakal suyu bile ismarlarim ayipsin

[ozzy @oz9un]

kickstarting 2025 with a bang! during the HSG3 competition on @YogoshaOfficial, I uncovered a CVSS-10 Critical vulnerability on a banking application. 🏦💥

🏆 rewarded $3000 + $1000 bonus! this is the highest amount I've received so far for a single bug. huge thanks to the Yogosha team and my amazing teammates. 🙌

#BugBounty #EthicalHacking #CyberSecurity #Yogosha #InfoSec #CTF #BugBountyHunter

[ozzy @oz9un]

just a little teaser - solving an xss lab using browser-use ai 🥶

looks like we'll have so much fun on DAST industry soon

#xss #ai #bugbounty

[Rıza @rizasabuncu]

First and last competition of 2024, and we took the win! We earned that trophy, team! 🏆🙌

@oz9un @bugraeskici @tunahantekeoglu

[ozzy @oz9un]

Critical bugs found. Trophy secured. 🏆 Epic challenge, even better team.

GG everyone! 🚀🐞

huge shoutout to my team; @rizasabuncu @bugraeskici @tunahantekeoglu
#bugbounty #cybersecurity

[Yogosha @YogoshaOfficial]

🎉 The champion of the Hunter Survival Games has been crowned! 🎉

🏆 A massive congratulations to Team Sicco for their extraordinary performance and well-deserved victory earning the 2,000€ prize and a tailor-made trophy! Your expertise and dedication truly set you apart. 👏

[ozzy @oz9un]

@mdisec valiz konusunu bilmiyorum ama bunu çok yapınca havayolu firmasının seni kara listeye alması gibi bi durum vardı abi