0xteknogeek's profile picture. AppSec by day, Hacker by night || Puzzle addict

Joel Margolis (teknogeek)

@0xteknogeek

AppSec by day, Hacker by night || Puzzle addict

Joel Margolis (teknogeek) a reposté

Frida 17.4 introduces Simmy, a new backend for Apple’s Simulators on macOS. Spawn, attach, and instrument apps — just like on a real device.


Joel Margolis (teknogeek) a reposté

💰 Introducing CASH Designed by Phantom using Open Issuance by @stablecoin & @stripe, and launching first on Solana. CASH is a neutral, open-loop stablecoin backed 1:1 by USD — built for both crypto and real-world utility.

useCASH's tweet image. 💰 Introducing CASH

Designed by Phantom using Open Issuance by @stablecoin & @stripe, and launching first on Solana.

CASH is a neutral, open-loop stablecoin backed 1:1 by USD — built for both crypto and real-world utility.

Joel Margolis (teknogeek) a reposté

I reported an arbitrary code execution in Unity Runtime, which affects all versions starting from Unity 2017.1. As the vulnerability can be exploited without specific usage, I strongly encourage developers to patch. Technical details below: flatt.tech/research/posts…


Joel Margolis (teknogeek) a reposté

it’s linkedin official, i joined @runsybil as a founding member of technical staff. super excited to be making one computer (ai) hack another computer (web apps) with an absolutely cracked team.

sshell_'s tweet image. it’s linkedin official, i joined @runsybil as a founding member of technical staff.

super excited to be making one computer (ai) hack another computer (web apps) with an absolutely cracked team.

Joel Margolis (teknogeek) a reposté

Phantom is not at risk. We have confirmed Phantom does not use any vulnerable versions of the affected packages. We take a number of steps to guard against these types of attacks, including: - Strict version pinning for all dependencies, preventing automatic updates to…


Joel Margolis (teknogeek) a reposté

At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org

phrack's tweet image. At long last - Phrack 72 has been released online for your reading pleasure! 

Check it out: phrack.org

Joel Margolis (teknogeek) a reposté

Update: @cluely filed a DMCA takedown for my tweet about their system prompt, alleging that it contained "proprietary source code" Making legal threats against security researchers is not a good look, and I encourage Cluely to reflect on this and open doors to researchers. 🧵

jackhcable's tweet image. Update: @cluely filed a DMCA takedown for my tweet about their system prompt, alleging that it contained "proprietary source code"

Making legal threats against security researchers is not a good look, and I encourage Cluely to reflect on this and open doors to researchers. 🧵

I reverse engineered @cluely – and their desktop source code exposes their entire system prompts and models used. What's inside? 🧵

jackhcable's tweet image. I reverse engineered @cluely – and their desktop source code exposes their entire system prompts and models used.

What's inside? 🧵


Joel Margolis (teknogeek) a reposté

When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We (@iangcarroll and I) discovered a vulnerability that could allow an attacker to access the over 64 million chat records using the password "123456". ian.sh/mcdonalds


Joel Margolis (teknogeek) a reposté

Why hack one device, when you can hack a million of them? My latest blogpost based on my @nullcon talk explores hacking smart weighing machines and health devices by hijacking their user-device association flows. spaceraccoon.dev/pwning-million…


Joel Margolis (teknogeek) a reposté

LISTEN UP ⬇️

NYGov's tweet image. LISTEN UP ⬇️

Joel Margolis (teknogeek) a reposté

We heard you needed some more time, so we wanted to let you cook. We decided to push the Phrack 72 CFP deadline back until June 15th. Stay tuned for upcoming Phrack events. Print this flyer out and give it to someone IRL!!

phrack's tweet image. We heard you needed some more time, so we wanted to let you cook. 

We decided to push the Phrack 72 CFP deadline back until June 15th. 

Stay tuned for upcoming Phrack events. 

Print this flyer out and give it to someone IRL!!

Joel Margolis (teknogeek) a reposté

I'm a hacker and AI researcher who has reported vulnerabilities to OpenAI, Google, and others. I wrote this guide as a reference of all of the ways that you can hack AI. It has saved me hours. Bookmark this if you need a reference for what all to try (AND includes mitigations).

rez0__'s tweet image. I'm a hacker and AI researcher who has reported vulnerabilities to OpenAI, Google, and others. I wrote this guide as a reference of all of the ways that you can hack AI. 

It has saved me hours. Bookmark this if you need a reference for what all to try (AND includes mitigations).

Joel Margolis (teknogeek) a reposté

The DOGE website appears to be developed and hosted by Outburst Data, run by current DOGE employee Kyle Schutt. If you view the source of any page on the DOGE website, you'll see that the images are proxied through Cloudflare's ImageDelivery service.

samwcyo's tweet image. The DOGE website appears to be developed and hosted by Outburst Data, run by current DOGE employee Kyle Schutt.

If you view the source of any page on the DOGE website, you'll see that the images are proxied through Cloudflare's ImageDelivery service.
samwcyo's tweet image. The DOGE website appears to be developed and hosted by Outburst Data, run by current DOGE employee Kyle Schutt.

If you view the source of any page on the DOGE website, you'll see that the images are proxied through Cloudflare's ImageDelivery service.

Joel Margolis (teknogeek) a reposté

New blog post with @infosec_au: We found a vulnerability in Subaru where an attacker, with just a license plate, could retrieve the full location history, unlock, and start vehicles remotely. The issue was reported and patched. Full post here: samcurry.net/hacking-subaru


Joel Margolis (teknogeek) a reposté

Please stop posting your five second grep of strings from a Chinese app and making wild claims 😭

REDnote is not only tracking your every touch on the app to train to the algorithm but it’s doing FACE and OBJECT detection. So it’s tracking you and your surroundings for further analysis. 🧐 @d0tslash

infenet's tweet image. REDnote is not only tracking your every touch on the app to train to the algorithm but it’s doing FACE and OBJECT detection. So it’s tracking you and your surroundings for further analysis. 🧐 @d0tslash


Joel Margolis (teknogeek) a reposté

HUGE personal life update! 💻😊 Yesterday was my last day as a Principal AI Engineer at AppOmni. Today, I'm a full time bug bounty hunter and solo founder. - AppOmni is amazing, and I still support them fully. I was there almost 5 years! - I’m freaking pumped to do full-time…

rez0__'s tweet image. HUGE personal life update! 💻😊

Yesterday was my last day as a Principal AI Engineer at AppOmni. 

Today, I'm a full time bug bounty hunter and solo founder.

- AppOmni is amazing, and I still support them fully. I was there almost 5 years!
- I’m freaking pumped to do full-time…

Joel Margolis (teknogeek) a reposté

h-hey!

gf_256's tweet image. h-hey!

Joel Margolis (teknogeek) a reposté

shift is officially launched for anyone!

🎉 Announcing ⇧Shift - The Cursor of Hacking @Rhynorater and I have been cooking up an awesome AI hacking tool and releasing it to beta testers starting today. ⇧ Shift is a Caido plugin that makes hacking faster and easier so you can make more money in less time. Read on 👇

rez0__'s tweet image. 🎉 Announcing ⇧Shift - The Cursor of Hacking 

@Rhynorater and I have been cooking up an awesome AI hacking tool and releasing it to beta testers starting today.

⇧ Shift is a Caido plugin that makes hacking faster and easier so you can make more money in less time. 
Read on 👇


Joel Margolis (teknogeek) a reposté

Good day to remember just how big that green tree is

waitbutwhy's tweet image. Good day to remember just how big that green tree is

Joel Margolis (teknogeek) a reposté

🚨 NEW BLOG POST: How I Became the Most Valuable Hacker 🚨 🔥 My best hacking month ever 🥇 1st place 🏆 MVH belt Here's what I used to snag @Hacker0x01 's ultimate prize. 2025 is YOUR year to get the belt! douglas.day/2024/12/13/How… #BugBounty #Hacking #MVH


Loading...

Something went wrong.


Something went wrong.