Sarath Sasikumar

Infosec enthusiast | Bug Hunter |

[Sarath Sasikumar @sarath_____]

@akita_zen Not really :)

[Sarath Sasikumar @sarath_____]

@cubigato Thinkcar products are interesting targets! But they lack serious security

[Sarath Sasikumar @sarath_____]

@_SpeedBird_ If you need thinkdiag software update for free visit https://t.co/oNsLHYgx2h

[Sarath Sasikumar @sarath_____]

@ArnoStride Nice! If you need thinkdiag software update for free visit https://t.co/oNsLHYgx2h

[Sarath Sasikumar @sarath_____]

@Special_777777 Nice! If you need thinkdiag software update for free visit https://t.co/oNsLHYgx2h

[Sarath Sasikumar @sarath_____]

@NyaBovver Nice! If you need thinkdiag software update for free visit https://t.co/oNsLHYgx2h

[Sarath Sasikumar @sarath_____]

@Eddy_Njiru @ObdThinkcar If you need thinkdiag software update for free, visit https://t.co/oNsLHYgx2h

[Het Mehta @hetmehtaa]

Starting in 2027, the OSCP exam will be open-book, open-internet, and open-ChatGPT. The only restriction is you can't ask another human.

They're calling it a "realistic simulation of modern penetration testing."

[André Baptista @0xacb]

This blog site of @samm0uda is a treasure trove of everything Meta (Facebook, Instagram, Oculus) hacking 👇
https://t.co/Q97nGsyh5t

[SkinsMonkey @skinsmonkey]

Perfect CS2 Duo 😆

[Muqsit 𝕏 @mqst_]

📱 A Comprehensive Guide on Modern iOS Pentesting

Guide: https://t.co/oOZ3u4p6Vg

Author: Noah Farmer (@d_vuln)

[Karsten Hahn @struppigel]

Beware of high-ranking fake reversing tool websites.
pestudio org and dnspy org are fake.
Use https://t.co/PwccjqomQ1 and https://t.co/06SQa6zXoO
instead

[Flipper Devices @flipper_net]

You can use Flipper Zero as a JTAG/SWD debugger via the DAPLink app: https://t.co/aUfPvezM6z
Paired with OpenOCD, it becomes a powerful tool for hardware hacking and development.

Check out this excellent video tutorial by @secureideas on using Flipper Zero as a JTAG/SWD probe: https://t.co/qMdkvhTr2S

[Kali Linux @kalilinux]

⚠️ Warning ⚠️
Kali has a new signing key! 🔑
(Manual action required! 🫣)

If you are getting:

> Missing key 827C8569F2518CC677FECA1AED65462EC8D5E4C5, which is needed to verify signature.

You need to download and install the new key manually, here’s the one-liner:

```
sudo wget https://t.co/FQdrYrKZDe -O /usr/share/keyrings/kali-archive-keyring.gpg

```
Blog post: A New Kali Linux Archive Signing Key ~ https://t.co/wqA1tOaImH

[nick.eth @nicksdjohnson]

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:

[NCIIPC India @NCIIPC]

🚨 Registration OPEN! 🚨 NCIIPC AICTE Pentathon 2025 kicks off midnight, April 4th! Compete to be shortlisted, win prizes and internships. #NCIIPC #Pentesting #India
📝 Register: [https://t.co/cxLo0iGRvp]
🔍 Learn more: [https://t.co/YfELEeFaVG]

[Google VRP (Google Bug Hunters) @GoogleVRP]

🔔 Android bug hunters, take note 📝!

The Android VRP is now offering an extra $1,000 bonus reward to researchers who include an AutoRepro test with their vulnerability report – we're looking forward to your submissions!

https://t.co/5EeXCEfK7h

[KNOXSS @KN0X55]

We just added 1 more trick to our https://t.co/sPexUkaZik auxiliary domain!

You can use it to PoC data exfiltration with

https://t.co/nwXh61qQo6

Notice that we don't use URL query for that, it might be crucial in some #XSS and OPEN REDIRECT scenarios.

Coming soon on #KNOXSS!

[shubs @infosec_au]

We recently looked deeper at the authentication bypass vulnerability in Next.js (CVE-2025-29927) and discovered some intelligent and comprehensive ways to check for the vulnerability. Read more in our blog post: https://t.co/f7f6VKzEcS

[Circuit Basics @circuitbasics]

Best Practices for Designing a PCB Layout
#circuitbasics #electronics #arduino #raspberrypi https://t.co/oGBujc2Now