Radvan Mohamadzade

Interested in Cybersecurity

[𝐵𝑎𝑅𝑖𝑠𝑡𝑎 𝑀𝑎𝑛 🇮🇷 @cafee100]

تسلا داشتیم وقتی‌ ایلان ماسک تو موز بود.....

محمد اخباراتی ۵۰ سال پیش کاریو کرد که ایلان ماسک الان تازه با این همه امکانات داره میکنه

و در آخر لعنت بهت جمهوری اسلامی که با اومدنت همه چیز از این کشور رفت.....

[Radvan Mohamadzade @radvansec]

From a Forgotten XSS to Full Account Takeover: A Chain Inside OAuth

https://t.co/6xEoA0WYnD

[Radvan Mohamadzade @radvansec]

NEW CVE DROPPED?
Try it -> https://t.co/Vi7v1pYCiR

#cve #bugbounty #pentest #radvansec

[Radvan Mohamadzade @radvansec]

https://t.co/rOEvuVt0An

[Radvan Mohamadzade @radvansec]

If I had only one day left to live, I’d still port all the tools I’ve written from Python to C/C++

[Radvan Mohamadzade @radvansec]

Filtered HTML Injection + Trusted-Subdomain XSS + Unsafe Referrer Policy + OAuth → Authorization Code Exposure

https://t.co/z1LBLVNsz7

#bugbounty #infosec #hackers #defcon

[Radvan Mohamadzade @radvansec]

@eabubakr21 $75?

[Radvan Mohamadzade @radvansec]

@AgentRandom_ check the new version please

[Radvan Mohamadzade @radvansec]

Built a tool called Reflix does parameter discovery + reflection fuzzing (query, path, headers) and flags DOM XSS sinks with exact line numbers
so it's fast and open source
https://t.co/pnGNIVn17s

[Radvan Mohamadzade @radvansec]

Some changes have been made to the way the tool works If it gets a good response and enough support, more tools are on the way and each one will be even cooler and more advanced than the last.

[Radvan Mohamadzade @radvansec]

Built a tool called Reflix does parameter discovery + reflection fuzzing (query, path, headers) and flags DOM XSS sinks with exact line numbers
so it's fast and open source
https://t.co/pnGNIVn17s

[Radvan Mohamadzade @radvansec]

@rpkdz12 thanks

[Radvan Mohamadzade @radvansec]

I built Forbidra because most existing 401/403 bypass tools felt too limited and didn’t cover enough request variations. So I made a tool that tries to cover as many different 401/403 bypass techniques and request variations as possible, all in one place

https://t.co/dz2ITrJldO

[Radvan Mohamadzade @radvansec]

@adrianalvird unfortunately no , this is awesome tool bro good job!

[Radvan Mohamadzade @radvansec]

@mugh33ra yes ,

you can use tool with -X {HEADER: VALUE}

[Radvan Mohamadzade @radvansec]

I asked AI to turn my reports into a chart showing my performance from Sept 1–19 how much I relied on an agent and what I used it for most
I’ll track this monthly to measure my progress, understand where I rely on AI too much and find a better balance between myself and the agent

[Radvan Mohamadzade @radvansec]

“One-Click Full Account Takeover via Chained XSS: Bypassing CSP by Pivoting Through a Trusted…” by Reza Mohamadzade https://t.co/WWVgWbTAyd

[Radvan Mohamadzade @radvansec]

@Liora1376 سلام اگر دستگیر نشده بگید شماره و مشخصات و لوکیشنش رو شیر کنم

[Radvan Mohamadzade @radvansec]

سلام، در این ویدیو درباره Recon، مرز بین Manual Work و Automation و اینکه در هر مرحله کدام رویکرد منطقی تر است صحبت کردم

YouTube: https://t.co/PgmwWPxaEe

#CyberSecurity #Automation #Recon #InfoSec #RedTeam #Pentest #SecurityResearch #OSINT #BugBounty #OffensiveSecurity

[Radvan Mohamadzade @radvansec]

How to Scale Vulnerabilities?!

https://t.co/CEB3MmJjtn

[Radvan Mohamadzade @radvansec]

@intigriti reflix