YasserGersy 🇵🇸

Building stuff that breaks others stuff
| Coding | Info-Sec

[Jahir Sheikh @jahirsheikh8]

Stack overflow 💔

[YasserGersy 🇵🇸 @yassergersy]

@Hacker0x01 @H4cktus Congrats ya Hazem, keep it up 🥳

[Bug Bounty Village @BugBountyDEFCON]

Google is supposed to be impossible to hack.

@rhynorator found a $20K IDOR on the front page.

The kind of bug every hacker checks for.

This 1-node Caido workflow made their RPC traffic readable,

turning a crowded program into a private hunting ground.

[YasserGersy 🇵🇸 @yassergersy]

@Alra3ees ربنا يقومك بالسلامة

[YasserGersy 🇵🇸 @yassergersy]

@akita_zen @m359ah @PortSwigger Hahaha nice man 😄
Glad to hear u r doing well,AI stuff is getting crazy lately, so which service r u attacking nowadays?

[YasserGersy 🇵🇸 @yassergersy]

@HackenProof @HP
-Triage0x0Obs triage_team : Unfortunately, this is a known issue.

[Nebula Security @nebusecurity]

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0.

nginx-rift has been patched, but our security agent Vega has found a new 0 day.

We will release the full technical writeup with ASLR bypass 30 days after the patch on https://t.co/LAhOC5UHrp.

[Tom Dörr @tom_doerr]

Discovers real IPs behind Cloudflare

https://t.co/Ix3kVM6Tmt

[YasserGersy 🇵🇸 @yassergersy]

@Hacker0x01 @dia2diab keep it up

[0xSabir @0xSabir]

$14,337 Google Bug Bounty 🤑

Hacking Google Support: Leaking millions of customer records by Michael Dalton 🤯🔥

👨‍💻 Michael Dalton (https://t.co/fmpfi56Mdf)
🔗 https://t.co/zwLEQPXQV5

[YasserGersy 🇵🇸 @yassergersy]

@intigriti

[s1r1us @S1r1u5_]

I pointed claude opus at chrome and told it to build a full v8 exploit for discord.

A week of back-and-forth pulling it out of dead ends. 2.3B tokens. $2,283 in API costs, and it popped a shell.

https://t.co/vwj9d33Bvq

[Khaled Ibn Al-Walid @khaledibnalwled]

Want to build AI Vulnerable environment in seconds?

🚀 Introducing PromptMe-Lite - an enhanced fork of PromptMe with key improvements:

✨ What's Different:
• Adds OpenAI API support alongside Ollama
• Redesigns some challenges to be fully exploitable without code/behavior modifications (e.g: LLM08)
• Removes heavyweight ML dependencies for faster deployment

🎯 Perfect for:
Security teams running CTF events or training programs needing flexible LLM deployment options

10 OWASP LLM Top 10 challenges. Production-ready. Open source. In seconds.

Get started 👇
https://t.co/yNWiyCAvZw

#AIRedTeam #LLMSecurity #OWASP #CTF

[dia2diab @dia2diab]

🚨 Live Hacking Event | Egypt @Hacker0x01 Club 🚨
We’re launching Desert Storm: Bug Bounty Challenge a two-phase live hacking event in collaboration with a private Hackerone program.

🖥️ Phase 1: Virtual hacking (2–16 February)
🏆 Top 10 hackers qualify for the onsite finale
🌍 Open to all skill levels
🎯 Real-world targets & exclusive rewards

Spots are limited. Registration closes 30 January.

🔗 Register here: https://t.co/2vbXWOHqzX

#BugBounty #Hackerone #CyberSecurity #EgyptHackers #LiveHacking #Community #TogetherWeHitHarder

[YasserGersy 🇵🇸 @yassergersy]

@_onlyscott 🇳🇱

[Amjad Masad @amasad]

Many are asking if they can move their Next.js projects from Vercel to Replit?

Yes!

- Go to Import then GitHub
- enter repo URL
- Agent will take care of the rest

It will set up the dev and deployment environments!

For companies moving lots of work, happy to help + discount.

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Default Credentials: The Hidden Door to Admin Panels
https://t.co/1zm5sugIyR

#bugbounty #bugbountytips #bugbountytip

[YasserGersy 🇵🇸 @yassergersy]

@h4x0r_dz

[HackerOne @Hacker0x01]

🏆 The stage is set for the #AmbassadorWorldCup championship Finals! 🏆

🇪🇸 Spain vs 🇪🇬 Egypt – Who will take the crown in DUBAI this May?
🇬🇷 Greece and 🇳🇱 Netherlands battle it out for 3rd place!

The world is watching. Who will rise as the HackerOne Ambassador World Cup Champions?