Aastha

BugBounty, Aviation & Physics.

[Lupin @0xLupin]

We just released a new article on how we made more than 50,000$ in #BugBounty by doing a really cool Software Supply Chain Attack🔥

🔗 https://t.co/wDYdgWYbut

[Aastha @Paaastha]

Hey @Hacker0x01 , Huge shoutout to triager "h1_analyst_malenia" 🌟

I’m seriously impressed by the level of professionalism, technical expertise and empathy they’ve shown over the past few months.

Thank you!

[Guillermo Rauch @rauchg]

𝚗𝚙𝚡 𝚍𝚎𝚎𝚙𝚜𝚎𝚌

We're introducing an open-source agent orchestrator for deep security reviews.

We built it for internal use, and after running it against some major OSS projects, we gained conviction to share it with the world.

Coding agents can now find critical vulnerabilities in minutes that would take teams of people months (if they can spot them at all). Since 𝚍𝚎𝚎𝚙𝚜𝚎𝚌 is optimized to work with Vercel Sandbox, you can effectively harness the power of thousands of agents scrutinizing your codebase in parallel.

I encourage you to try this on your repositories. BTW: If you run an OSS project and want us to sponsor a run, my DMs are open.

[Google VRP (Google Bug Hunters) @GoogleVRP]

📣📢 Calling all Android and Chrome bug hunters 🧑‍💻🔎!

We're updating our Android & Chrome VRP programs to ensure we can continue to reward the most challenging and impactful vulnerabilities researchers find in our products. For details, 👇

https://t.co/hyZzEIampk

[Ben Sadeghipour @NahamSec]

This Hacker Made $40,000 Using Claude Code https://t.co/nNNthtHUiO

[Rohit @rxhit05]

At this rate everyone's gonna have their own app and no user.

[NASA @NASA]

We see our home planet as a whole, lit up in spectacular blues and browns. A green aurora even lights up the atmosphere. That's us, together, watching as our astronauts make their journey to the Moon.

[Guillermo Rauch @rauchg]

@levelsio This passage by Jeff Bezos is one of the most important business lessons of the internet age:

[Ben Sadeghipour @NahamSec]

I found really interesting XSS at a @hacker0x01 LHE that required a few bypasses. Do you think it was worth $15,000? https://t.co/Z8paPeDY3Z

[Aastha @Paaastha]

@kapeka0 @Hacker0x01 I thought I was the only one

[Patrik Grobshäuser @ITSecurityguard]

I finally let Claude do my pentest this week. Full 5-day engagement, zero human input. Here's what the client got: 😏

https://t.co/1PPuxhs4V9

#bugbounty #pentesting #AI #cybersecurity #infosec #claudeai

[Jenish Sojitra @_jensec]

✨ Launching https://t.co/muyolpXluI - free, community, no signup

Stop blindly installing OpenClaw skills like Maniac.

My friend mass-installed OpenClaw skills for a client project last month. Two days later his AWS bill exploded. A skill that looked totally legit was quietly stealing his credentials the whole time.

Together we built Clawned

Paste any skill → scanned against 60+ threat patterns in under 2 seconds.

6,500+ skills scanned so far. 1 in 5 flagged something.

Stop trusting https://t.co/hVK0WIHzvr files blindly.

[Aastha @Paaastha]

@_jensec 🔥

[Aastha @Paaastha]

@aldo_m_leon @Burp_Suite Not able to switch tabs. UI also seems broken.

[Aastha @Paaastha]

Anyone else having problems with Burp Suite after the recent update?
@Burp_Suite

[Aastha @Paaastha]

@nnwakelam @thedawgyg @elonmusk I am curious, why did it get banned in the first place?👀

[Aastha @Paaastha]

Worth a read!

[Kapeka @kapeka0]

Made a new article about a methodology I have been using to find high impact bugs!

Hope u like it!

https://t.co/4xTW0IPbBY

[Hacktron AI @HacktronAI]

https://t.co/wqnScds8Ci

[spaceraccoon | Eugene Lim @spaceraccoonsec]

You may have read @AnthropicAI Frontier Red Team's blogpost about finding zero-day vulnerabilities at scale. I think it's more than that - LLM workflows greatly improve "negative-day" and "never-day" discovery. Here's the tool I built to do this.

https://t.co/2U5VHOiBBD

[Yuval Avrahami @yuvalavra]

We hacked the AWS JavaScript SDK, a core library powering the entire @AWScloud ecosystem - including the AWS Console itself 🤯

How did we do it? Just two missing characters was all it took.

This is the story of #CodeBreach 🧵👇