MOHAMED TAREK

Penetration tester | BugBounty Hunter | CTF Player ♥

[MOHAMED TAREK @timooon107]

I just published GgDorker!
GgDorker is a simple python tool that automates the process of Google Dorking and extract the subdomains from google dorks without blocked by google and say bye bye to google captcha :)
Github: https://t.co/5sPtIWNfrZ

#bugbountytips #BugBounty #infosec

[Ali Abo Rezeg @ARezeg]

إن يسرقوا منا مباراة فقد سرقوا لنا أحلام وطموحات وأوطان من قبل،

هذه السرقات تجري في دمائهم وعروقهم،

قد سرقوا فرحة مليونين في غزة قبل قليل، بعد قتلهم اليوم فقط سبعة من خيرة رجالنا وأطفالنا،

كما سرقوا فرحة عشرات آلاف الجماهير بعد قتلهم، وبدم بارد، مدير اللجنة التي كانت تُشرف على تجمعات حضور المباريات وتشجيع البلد الذي يحبون،

إن يسرقوا منا مباراة، فقد سرقوا منا الكثير من قبل، وما زالوا…!

[Hackmanac @H4ckmanac]

🚨Cyber Alert ‼️

🇦🇷Argentina - 𝗔𝗿𝗴𝗲𝗻𝘁𝗶𝗻𝗲 𝗙𝗼𝗼𝘁𝗯𝗮𝗹𝗹 𝗔𝘀𝘀𝗼𝗰𝗶𝗮𝘁𝗶𝗼𝗻 (AFA)

In response to the Argentina vs. Egypt match, a threat actor going by the name "Hossam Hassan" has claimed to be selling a database allegedly stolen from the Argentine Football Association (AFA).

According to the forum post, the alleged database contains email addresses, hashed passwords, national ID numbers, phone numbers, IP addresses, and profile pictures of AFA users.

The actor provides no evidence of the attack vector or the alleged compromise.

Threat actor: Hossam Hassan
Sector: Sports activities
Data exposure (claimed): Not specified
Data type: Database containing email addresses, hashed passwords, national ID numbers, phone numbers, IP addresses, and profile pictures
Observed: Jul 8, 2026
Status: Pending verification
ESIX©: 3.26

Full details and impact assessment on https://t.co/eB7qgxLdpI

[MOHAMED TAREK @timooon107]

Most corrupt World Cup ever.
It’s getting boring now.

[Garry Kasparov @Kasparov63]

Incredible Egyptian goal is disallowed because of a foul far away, then same situation a few minutes later and goal for Argentina not disallowed! No VAR, nothing? FIFA again looks like a corrupt joke, playing favorites for stars.

[Robert Carter @Bob_cart124]

I'm not ashamed to say it. I love this man.

[AJE Sport @AJE_Sport]

Egypt head coach Hossam Hassan has called on football's biggest names to speak out on Gaza, saying children wearing the shirts of clubs and players they admire are being killed while the football world remains silent.

[Teago Oliveira @teagoliveira]

A fifa vai ter que remover isso 350 milhoes de vezes

[Kara @UTDKarra]

Repost if you think Gianni Infantino is the worst FIFA president ever.

[Fardeen A. 🇮🇳 🇵🇸 @insecrez]

Bug-Bounty Tip for new hunters

Use subfinder + dnsx to detect potential subdomain takeover candidates with unresolvable records (NXDOMAIN).

subfinder -d https://t.co/LPfqhsmT7J -silent | dnsx -a -resp | grep -i "NXDOMAIN"

Peace✌️

#bugbountytips #streakammo #bugbounty

[HAHWUL @hahwul]

MCP Security Checklist https://t.co/S1OcBNwihl

[HAHWUL @hahwul]

Frida Rust bindings
https://t.co/ux2ZcvxaXv

[HAHWUL @hahwul]

Urx (short for "Extracts URLs") is a Rust-based tool I built to collect URLs from various OSINT archives. Inspired by Gau, it’s designed with the features I needed.

I’d love to hear your ideas for improvements! Feel free to share them via GitHub issues or leave a comment here—feedback and Pull Request is always welcome.

https://t.co/865TUeX0E7

#security #bugbounty

[عبدالله العطار abdallah alattar @abdallahatar]

نناديكم من تحت القصف
الجنوني
نُقسمُ لكم اننا نُحرق الان
تكلموا عنا لعل هذا يشفع لكم

[s1r1us @S1r1u5_]

I've created benchmark to test LLM capabilities.

HackBench tests LLMs' cybersecurity skills using CTF challenges modeled on real-world vulnerabilities. Starting with 16 Security Intern-level tasks, it scales as models improve proving real skill even with test-set contamination

https://t.co/thvRg8Vm8g
https://t.co/YOwNsiGiOe

[GiuseppeDeLaZara @windhustler]

💡I’ve been asked numerous times to provide a checklist for auditing a LayerZero integration.

⚡️You asked, so here it is: https://t.co/Eo5jVVkpvt

🧠 I’ve dumped everything I could think of that can go wrong and more.

@g_vladika spent years building and breaking the core Arbitrum protocol and he’s contributed to the Arbitrum checklist.

CCIP checklist is still WIP.

I want this to become the go-to place while auditing protocols with cross-chain components.

We’re going to be adding Axelar, Wormhole, Stargate, LiFi, Across, and more.

If you’ve been auditing cross-chain protocols and found quirks or integration bugs, reach out or contribute via PR.

⭐️ If you find the checklist useful, I’d appreciate a retweet and star on GitHub to raise awareness.

[Ankit Singh @AnkitCuriosity]

Jobs & Internship opportunities -:

->https://t.co/jQC9c9iz6O (For technical and non-technical infosec jobs/internship) by @null0x00

-> https://t.co/Qm6qppRvzP by @infosec_jobsCOM

[Congressman Greg Casar @RepCasar]

The Israeli government has started bombing Gaza again, in violation of the negotiated ceasefire, after blocking food, water, and aid for weeks.

We must stop sending offensive weapons to the Israeli government. We cannot continue to be complicit in Netanyahu's assault on Palestinian families.

[Coffin @lostsec_]

ffuf -w subdomains.txt:SUB -w payloads/backup_files_only.txt:FILE -u https://SUB/FILE -mc 200 -rate 50 -fs 0 -c -x http://localip:8080

payload:https://t.co/sBKKDRfG5S

[🇷🇴 cristi @CristiVlad25]

As a bug hunter, you might want to look for airflow config files.

https://t.co/yhM0JZGhw8