Roland Hack

20yo😼|Junior Pentester|Bug Hunter|Discoverer of 2 CVEs

[Roland Hack @RolandHack6]

Yay, I was awarded a 5000$ bounty💰 on @Hacker0x01! https://t.co/sU1EFviWHH #TogetherWeHitHarder

[Roland Hack @RolandHack6]

@clearlovefanboi @Hacker0x01 Well done

[ʞʞıdɐɔoɥƆ @Chocapikk_]

Windfall - Unauth RCE in Windmill & Nextcloud Flow (CVE-2026-29059)

Path traversal to credential leak to root shell. No authentication required on any deployment type, including behind Nextcloud's proxy. Metasploit modules + full toolkit included.

Also publishing a new technique for dumping PostgreSQL databases by reading heap files from disk. If you have filesystem access as root, you can extract every table without credentials or SQL access. Full binary parser with JSONB support.

Write-up: https://t.co/ylSXW0dtmn
PG heap dump technique: https://t.co/Se2dQJ761r
PG heap dump tool: https://t.co/E95f12mVZF
Exploit toolkit + labs: https://t.co/5dtsSR6Jvn

[Roland Hack @RolandHack6]

@Chocapikk_ Well done bro 👏

[Roland Hack @RolandHack6]

@_vielite_ @Hacker0x01 Thank you 😊

[Roland Hack @RolandHack6]

Yay, I was awarded a Х,000$ bounty💰 on @Hacker0x01! https://t.co/sU1EFvioS9 #TogetherWeHitHarder

[Renwa @RenwaX23]

I think I have completed client-side security , just one report:

Self-XSS -> Drag-Drop Payload -> Scroll-To-Fragment -> Unchecked postMessage Listener -> Text Injection -> DOM-XSS -> OAuth State Misconfiguration -> Cookie Bomb -> Account Takeover

https://t.co/xQmtZE5At0

[Roland Hack @RolandHack6]

@H1imtheking @Hacker0x01 Welcome bro 🔥

[Hussein Daher @HusseiN98D]

Rule number 1 in Bug Bounty is only hack targets you enjoy hacking

[Roland Hack @RolandHack6]

@moodiAbdoul @Hacker0x01 Congratulations bro 👏

[obscaries ❘ AppSec @obscaries]

https://t.co/zKBdyes6sr

[Roland Hack @RolandHack6]

@Krevetk0Valeriy 😂

[Roland Hack @RolandHack6]

@John_Matthew_T Amen 🙏

[dawgyg - WoH @thedawgyg]

@zseano people always asking what tools we use... then don't believe us when we say only Burp proxy + Intruder + Repeater lol

[pashov @pashov]

People thought security researchers are about to get "automated"

Meanwhile hacks on vibecoded projects disregarding security are at a peak

Skilled Security Researchers once again are worth their weight in gold

[Roland Hack @RolandHack6]

@tuo4n8 Gg

[Roland Hack @RolandHack6]

@ArmanSameer95 @RockstarGames 😂😀

[Roland Hack @RolandHack6]

Yay, I was awarded a 1250$ bounty💰 on @Hacker0x01! https://t.co/sU1EFvioS9 #TogetherWeHitHarder

[Roland Hack @RolandHack6]

@Excellentsalvic Amen

[. @696e746c6f6c]

Happy new year to everyone! Wishing everyone a happy year with crazy bugs.

[Roland Hack @RolandHack6]

@696e746c6f6c Well done 👏