rafa

Security Researcher

[rafa @rafabyte_]

check out my latest research (Exploiting HTTP Parsers Inconsistencies): https://t.co/sJG2sU3Pxl

[HackerOne @Hacker0x01]

We’re excited to announce the top 3 winners from H1-361 Bali 🌴🏆

Huge congrats to these incredible security researchers for an unforgettable live hacking event:

🥇 1st Place — @nahuelrm_
🥈 2nd Place — @zere
🥉 3rd Place — @joaxcar

Thanks to everyone who joined us in Bali and helped make this event a great week of collaboration and community. #TogetherWeHitHarder

[rafa @rafabyte_]

@busf4ctor @monkehack @adnanthekhan @rez0__ @xssdoctor Thanks bro, let's go 2026!

[rafa @rafabyte_]

Made a small and fun research about a technique to leak iframe contents, check this out: https://t.co/rlHmxGF5U6

[Vitor Falcão "busfactor" @busf4ctor]

Things you must read to slowly step up your client-side game

AuxClickjacking by @rafabyte_:
https://t.co/nwvSPVCMk1

[rafa @rafabyte_]

Had an awesome time hacking alongsite @busf4ctor and @monkehack at the H1-3120 Live Hacking Event in Amsterdam by @Hacker0x01, partnered with Salesforce!

[HackerOne @Hacker0x01]

Amsterdam brought the 🔥!

@salesforce + #H13120 = one incredible Live Hacking Event 🇳🇱

Security researchers tackled AI challenges head-on—finding vulnerabilities, sharing insights, and shaping the future of secure innovation.

#HackForGood #AISecurity #TogetherWeHitHarder

[rafa @rafabyte_]

@mchklt @Hacker0x01 @salesforce lol, many people say that

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

If you ever need help with a bug, you can always count on our community! 🫂

[rafa @rafabyte_]

@niemand_sec @Hacker0x01 Nice meeting you as well!

[rafa @rafabyte_]

I’m very pleased to share that I was invited by @Hacker0x01 to participate in the Live Hacking Event H1-468 in Sweden, with all expenses covered under the Platform Performer recognition!

[rafa @rafabyte_]

@Arl_rose @Hacker0x01 It was nice to meet you too =)

[Justin Gardner @Rhynorater]

Unbelievable exploitation journey documented in a thread in the # critical-thinkers on the CTBB discord. Shout out to @rafabyte_ for finding the solution, and @TomAnthonySEO for doing WORK.

Assists: @joaxcar, Balint, @J0R1AN, @kevin_mizu @7urb01, and yours truly, among others.

[rafa @rafabyte_]

@ctbbpodcast U rock guys, thx for sharing

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2023! https://t.co/KhiMEHP1dh

[rafa @rafabyte_]

@b3hlulll Thanks

[rafa @rafabyte_]

My research (Exploiting HTTP Parsers Inconsistencies) now has a dedicated page on HackTricks!

https://t.co/m7L7HsKLpP

[rafa @rafabyte_]

@hashnode Thanks for sharing 👾

[rafa @rafabyte_]

@insertScript Now anyone can send a PM to me

[rafa @rafabyte_]

check out my latest research (Exploiting HTTP Parsers Inconsistencies): https://t.co/sJG2sU3Pxl

[rafa @rafabyte_]

@ShuntIsReal @RenwaX23 30k reposts, 300k likes

[rafa @rafabyte_]

@CipherNewz Thanks =)