Firas 🐘

The Cyber Lieutenant.

[Firas 🐘 @retkoussa]

Are you tired of the tedious process of installing your bug bounty tools every time you start fresh? 🔍

With reFresh, you can automate the installation of top tools from industry legends like @TomNomNom, @pdiscoveryio, @hakluke, and @xnl_h4ck3r 💻

https://t.co/G9NnqluXnW

[Firas 🐘 @retkoussa]

Banger productivity app. Placed Top #6 on @ProductHunt - by @SwaidanZack

https://t.co/GpWp9urSHX

[Firas 🐘 @retkoussa]

@I_Am_Jakoby @SunnieCloudi @phyr3wall @_God_is_Truth_ I believe it's something I came across sometime back in the days, similar to samy kamkar's webscan

https://t.co/aeOVKMYrTJ

more on the topic also: https://t.co/rn8udO9QzM

[GangExposed RU @GangExposed_RU]

🚨 Devman RaaS leak.
Internal affiliate chats, victim access, micromanagement — and classic bad OPSEC 🤦‍♂️
Analysis: https://t.co/XyAOHe58gK

[Firas 🐘 @retkoussa]

@aryanXmahajan MACHINE

[bread.mega @bread_]

> Hack X account
> Open large short on token
> Announce the blockchain is shutting down (???)
> Profit

Easier than drainer links in 2025

[faulty *ptrrr @0x_shaq]

The NSA guy who worked 24/7 to find this bug reading the p2o announcements:

[shubs @infosec_au]

IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue: https://t.co/X3dkMz9gwK

[Firas 🐘 @retkoussa]

@WifiMoneyPlant @thepatwalls @levelsio Exactly, not long ago

[Firas 🐘 @retkoussa]

@badcrack3r Lebanese beef will always be my favorite 🤣🤣

[Firas 🐘 @retkoussa]

@murphywuwu https://t.co/6pcji4gCFG

[Firas 🐘 @retkoussa]

@Reignlol , haha.

😂😂😂😂

[Firas 🐘 @retkoussa]

@thegrowthcoder Do you have a way to measure metrics such as photo shares on WhatsApp?

Adding reactions is this community's least of concerns.

Usually people join because they see what channel was it forwarded from.

Here's an example:

[Firas 🐘 @retkoussa]

@samm_duc @samm_duc love https://t.co/CI16605Mpu btw - super cool idea; will give it a try today.

[Firas 🐘 @retkoussa]

@samm_duc Thanks Samuel! For this specific product, it really does ONE thing really well; which is generating Quraan verses (ayahs). I'll be sharing more on Twitter and Telegram channel later today.

[Firas 🐘 @retkoussa]

@zux0x3a thanks Lawrence, I appreciate it a lot 👊

[Firas 🐘 @retkoussa]

🚨Resolving domains in an ASN
Sharing useful snippets I develop when hunting.

https://t.co/gpzK5AzrkE

#bugbounty #bugbountytips #pentesting #recon #enumeration

[Firas 🐘 @retkoussa]

@tdinh_me Develop SSO for Micro SaaS founders 🫣

[Firas 🐘 @retkoussa]

GSNW tool is now released.

https://t.co/5gchpRLyi2

[Firas 🐘 @retkoussa]

How I found a critical by capitalizing on @GodfatherOrwa 's technique on fetching Github for possible IIS shortname words.

https://t.co/BwWw5s5qZi

#bugbounty #bugbountytips #shortname #microsoft

[Firas 🐘 @retkoussa]

GSNW is now out. It's not pretty, but it works 🦆

https://t.co/5gchpRLyi2

[Firas 🐘 @retkoussa]

How I found a critical by capitalizing on @GodfatherOrwa 's technique on fetching Github for possible IIS shortname words.

https://t.co/BwWw5s5qZi

#bugbounty #bugbountytips #shortname #microsoft

[Firas 🐘 @retkoussa]

@spyx_myky @GodfatherOrwa Thanks. Will test my best to release tonight, it’s pretty simple.