Olajeedae Jr 🇳🇬

Web App Hacking (Preferably) | RED TEAMER 🟥 | Cybersecurity YouTuber | r007

[Olajeedae Jr 🇳🇬 @r007User]

Built a vulnerable e-commerce app for pentesters and AppSec engineers to hack legally. 40+ vulns. OWASP Top 10 (2025) + LLM Top 10.

Hack it live or spin it locally with Docker. https://t.co/UfTLxRcdXe https://t.co/UG5nKmQhme

#AppSec #BugBounty #OWASP

[bugcrowd @Bugcrowd]

For 19 years, stolen credentials were the top way attackers got in.

That streak is over.

🚨 The 2026 Verizon DBIR shows vulnerability exploitation has taken the lead, now accounting for 31% of breach entry points. At the same time, AI is shrinking CVE-to-exploit timelines from months to hours.

This matters because annual testing and quarterly assessments were built for a slower world.

Trey Ford breaks down what this shift means for security teams, third-party risk, shadow AI, and the growing need for continuous adversarial coverage ⤵
https://t.co/W4FzKDCK4H

[Olajeedae Jr 🇳🇬 @r007User]

@damnsec1 Do u have more chairs in ur first sitting room ?

[Olajeedae Jr 🇳🇬 @r007User]

@commando_skiipz Congratulations my CISO

[Olajeedae Jr 🇳🇬 @r007User]

Another duplicate

[Olajeedae Jr 🇳🇬 @r007User]

Good morning amazing hackers

[iPsalmy👻🥷🏽 @Dghost_Ninja]

Saw this in the logs earlier. If you’re checking out, use a VulnBank virtual card, make sure the card details have no spaces, and ensure the card is funded. Otherwise it’ll fail and stay on “pending.”

Happy hacking ✌🏽

[Olajeedae Jr 🇳🇬 @r007User]

Someone got there before me again.

[OffSec @offsectraining]

💡 In the lab, getting lost is the point. Every rabbit hole you crawl down teaches you how not to get stuck there during a real engagement.

[Anurag @Malwarehunterr]

Possible phishing site impersonating Google Meet and Gmail hosted on:

ecortbabylon[.]site

The site includes fake:

Google Meet pages
Gmail login
Cash PIN collection

It also posts collected data to:

toolapipanel[.]online

Observed URLs:

ecortbabylon[.]site/meet/asda
ecortbabylon[.]site/gmail/asdasd
ecortbabylon[.]site/cashpin
ecortbabylon[.]site/login/test
ecortbabylon[.]site/duo/test
ecortbabylon[.]site/google-meet/test
ecortbabylon[.]site/review/test
ecortbabylon[.]site/location/test
ecortbabylon[.]site/location-live/test
ecortbabylon[.]site/live/test

#phishing #infosec #cybersecurity #gmail #googlemeet @500mk500

[Olajeedae Jr 🇳🇬 @r007User]

PwnShop has no flags. Real targets don't have them either, they have consequences.

Stolen accounts. Free orders. Full admin access. That's the impact we want you to feel.

Web: https://t.co/OHin68jWf6
https://t.co/Lp7aG240Wq

Mobile: https://t.co/7UpNSwVeQx

[Olajeedae Jr 🇳🇬 @r007User]

OWASP LLM08 Excessive Agency. When an AI agent has more permissions than it needs with no verification before acting.

I Asked PwnShop Mobile Chatbot to credit my wallet. It asked for a WALLET_TOPUP_OVERRIDE_KEY.

Can you get the credit applied?

https://t.co/GjcDDf5EaM

[Olajeedae Jr 🇳🇬 @r007User]

Hey everyone, pwnshop web has moved to a new repo with an updated vulnerability list.

New home: https://t.co/OHin68jWf6

You can deploy it locally or interact with the online version directly at https://t.co/UfTLxRcdXe, whichever works best for you.

Go check it out.

[Dr Iretioluwa Akerele @ireteeh]

Somewhere out there, someone is still using the same password for everything…and sleeping peacefully at night 👀 👀

[Olajeedae Jr 🇳🇬 @r007User]

@Dghost_Ninja @IbraheemA50 Make una tell me wetin dey sup, I been wan deploy on Supabase this month ending oo

[Olajeedae Jr 🇳🇬 @r007User]

Another year. Still breaking things for a living.

[Olajeedae Jr 🇳🇬 @r007User]

Pwnshop Mobile is now live on Android. A whole new attack surface to explore

Download the APK from the releases page and start hacking.

https://t.co/MbXWoS5oH0

#MobileSecurity #AppSec

[Olajeedae Jr 🇳🇬 @r007User]

Pwnshop just went mobile 📱
Android version is live. OWASP Mobile Top 10, LLM Top 10 and business logic flaws. Download the APK and start hacking.
https://t.co/gZHtg4V6so

[CTF Security @ctf_sec]

Pwnshop Mobile is here 📱
The Android version of Pwnshop is live. OWASP Mobile Top 10, LLM Top 10, and API business logic flaws. No setup needed, just download the APK and start hacking.
https://t.co/syMujPF4CM

[Olajeedae Jr 🇳🇬 @r007User]

Pwnshop is about to get a lot more interesting for Mobile Pentester

[Olajeedae Jr 🇳🇬 @r007User]

Built a vulnerable e-commerce app for pentesters and AppSec engineers to hack legally. 40+ vulns. OWASP Top 10 (2025) + LLM Top 10.

Hack it live or spin it locally with Docker. https://t.co/UfTLxRcdXe https://t.co/UG5nKmQhme

#AppSec #BugBounty #OWASP

[Olajeedae Jr 🇳🇬 @r007User]

Can we have an endpoint that allow sellers to withdraw money into their vulnbank account.

@Vulnbank @commando_skiipz

[Olajeedae Jr 🇳🇬 @r007User]

@miracle_egbedi If you want to re-enable IPv6 for APT in the future, simply remove the file you created:
sudo rm /etc/apt/apt.conf.d/99force-ipv4

[Olajeedae Jr 🇳🇬 @r007User]

@miracle_egbedi APT is trying IPv6 first, failing, then falling back to IPv4 it will still work but you will keep seeing those red errors. To skip IPv6 entirely and clean it up:

echo 'Acquire::ForceIPv4 "true";' | sudo tee /etc/apt/apt.conf.d/99force-ipv4

No more errors on every apt update.