AsciiHusky's profile picture. Don't know much but I know how to 'Quit Vim'

AsciiHusky

@AsciiHusky

Don't know much but I know how to 'Quit Vim'

AsciiHusky сделал(а) репост

🚨 Registration Open – @Hacker0x01 Bug Hunt 2026 (Qualifiers Round) 🇧🇩 The wait is over! Registration for the HackerOne Bug Hunt 2026 – Qualifiers Round is now live and will remain open till 25th October. 🔗 Register here: bughunt.info/register #HackerOne #BugHunt2026

bbcbd_official's tweet image. 🚨 Registration Open – @Hacker0x01 Bug Hunt 2026 (Qualifiers Round) 🇧🇩

The wait is over! Registration for the HackerOne Bug Hunt 2026 – Qualifiers Round is now live and will remain open till 25th October.

🔗 Register here: bughunt.info/register

#HackerOne #BugHunt2026

AsciiHusky сделал(а) репост

Just found an interesting behavior in Firefox that can be used for XSS: If a response lacks the Content-Type header, Firefox renders it as text/plain. But if the URL ends with an extension like .html, Firefox treats it as that. #bugbounty #bugbountytips

mehdiparandin's tweet image. Just found an interesting behavior in Firefox that can be used for XSS:
If a response lacks the Content-Type header, Firefox renders it as text/plain.
But if the URL ends with an extension like .html, Firefox treats it as that.
#bugbounty #bugbountytips
mehdiparandin's tweet image. Just found an interesting behavior in Firefox that can be used for XSS:
If a response lacks the Content-Type header, Firefox renders it as text/plain.
But if the URL ends with an extension like .html, Firefox treats it as that.
#bugbounty #bugbountytips

AsciiHusky сделал(а) репост

This @bishopfox tool is next level! 🚀 Eyeballer uses AI to analyze screenshots and sorts them into categories based on appearance, including: 👀 Old-looking pages, 👀 Login pages, 👀 404 responses 👀 Web apps 👀 Parked domains Get your eyeballs around this👇


AsciiHusky сделал(а) репост

$2,500 Bounties in GraphQL Hacking! Started learning GraphQL security in Feb and picked a HackerOne program—luckily, it was all GraphQL! Found multiple bugs, including two high-severity ones which I wrote about. Read here: blog.koalasec.co/2500-dollars-i…

Ali_4fg's tweet image. $2,500 Bounties in GraphQL Hacking!

Started learning GraphQL security in Feb and picked a HackerOne program—luckily, it was all GraphQL! Found multiple bugs, including two high-severity ones which I wrote about. 
Read here: blog.koalasec.co/2500-dollars-i…
Ali_4fg's tweet image. $2,500 Bounties in GraphQL Hacking!

Started learning GraphQL security in Feb and picked a HackerOne program—luckily, it was all GraphQL! Found multiple bugs, including two high-severity ones which I wrote about. 
Read here: blog.koalasec.co/2500-dollars-i…

AsciiHusky сделал(а) репост

How SSRF Leads to RCE in a .NET Application medium.com/@0xUN7H1NK4BLE…


AsciiHusky сделал(а) репост

Introduction to ARM Assembly

chessMan786's tweet image. Introduction to ARM Assembly

AsciiHusky сделал(а) репост

Master x86-64 Assembly by Building a GUI from Scratch – The Ultimate Hands-On Learning Experience! (🔗👇)

Adriksh's tweet image. Master x86-64 Assembly by Building a GUI from Scratch – The Ultimate Hands-On Learning Experience! (🔗👇)

AsciiHusky сделал(а) репост

Dalfox v2.10.0 has been released! It uses way less CPU while XSS scanning even faster than before. github.com/hahwul/dalfox #DAST #Security #BugBounty

hahwul's tweet image. Dalfox v2.10.0 has been released! It uses way less CPU while XSS scanning even faster than before.

github.com/hahwul/dalfox

#DAST #Security #BugBounty

AsciiHusky сделал(а) репост

the research paper is out: Next.js and the corrupt middleware: the authorizing artifact result of a collaboration with @inzo____ that led to CVE-2025-29927 (9.1-critical) zhero-web-sec.github.io/research-and-t… enjoy the read!

zhero___'s tweet image. the research paper is out:

Next.js and the corrupt middleware: the authorizing artifact

result of a collaboration with @inzo____ that led to CVE-2025-29927 (9.1-critical)

zhero-web-sec.github.io/research-and-t…

enjoy the read!

AsciiHusky сделал(а) репост

Authorization Bypass in Next.js Middleware - CVE-2025-29927 research paper soon!

zhero___'s tweet image. Authorization Bypass in Next.js Middleware - CVE-2025-29927

research paper soon!

Well, this is unfortunate github.com/advisories/GHS…

pilcrowonpaper's tweet image. Well, this is unfortunate

github.com/advisories/GHS…


AsciiHusky сделал(а) репост

Want to improve your security skills? One Bug Per Day by @GalloDaSballo helps you learn a new vulnerability every day. A must-have resource for security researchers and developers 👇 onebugperday.com


AsciiHusky сделал(а) репост

@omidxrz and I spent last month full-time hunting and successfully reported several high/crit vulnerabilities, including two RCEs. Spending a long time on a program helped us spot new features early. Thinking of writing a detailed write-up! ✌️

AmirMSafari's tweet image. @omidxrz and I spent last month full-time hunting and successfully reported several high/crit vulnerabilities, including two RCEs. Spending a long time on a program helped us spot new features early. Thinking of writing a detailed write-up! ✌️

AsciiHusky сделал(а) репост

javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run urls = [] $$('*').forEach(element => { urls.push(element.src) urls.push(element.href) urls.push(element.url) }); console.log(...new Set(urls)) #infosec #cybersec

wtf_brut's tweet image. javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run 

urls = []
$$('*').forEach(element => {
  urls.push(element.src)
  urls.push(element.href)
  urls.push(element.url)
}); console.log(...new Set(urls)) 

 #infosec #cybersec…

AsciiHusky сделал(а) репост

Everyone can earn min. $50.000 per year in a Web3 Security. Sadly, most people are lost before they even begin. Here’s the guide how to earn your first 50k$ as an auditor.

arsen_bt's tweet image. Everyone can earn min. $50.000 per year in a Web3 Security.

Sadly, most people are lost before they even begin.

Here’s the guide how to earn your first 50k$ as an auditor.

AsciiHusky сделал(а) репост

Do you want to master file upload vulnerabilities? 🤑 Open this thread! 🧵👇

intigriti's tweet image. Do you want to master file upload vulnerabilities? 🤑

Open this thread! 🧵👇

AsciiHusky сделал(а) репост

Blind XSS vulnerabilities can be everywhere! But the delayed execution and invisible injection point make them easily overlooked by bug bounty hunters! 🧐 In our latest article, we've detailed our entire guide and methodology for finding and exploiting blind XSS vulnerabilities,…

intigriti's tweet image. Blind XSS vulnerabilities can be everywhere! But the delayed execution and invisible injection point make them easily overlooked by bug bounty hunters! 🧐

In our latest article, we've detailed our entire guide and methodology for finding and exploiting blind XSS vulnerabilities,…

AsciiHusky сделал(а) репост

X-Rewrite-Url Header is Can be used to bypass WordPress 403 pages. POST /xmlrpc HTTP/1.1 Host: target.com X-Rewrite-Url: xmlrpc.php X-Rewrite-Url: wp-json/v2/users X-Rewrite-Url: wp-login.php #infosec #cybersec #bugbountytips


AsciiHusky сделал(а) репост

Secure Code Review Complete Series for Beginners. Find this playlist directly on YouTube so that the channel gets a little boost from the algorithm.

mqst_'s tweet image. Secure Code Review Complete Series for Beginners.

Find this playlist directly on YouTube so that the channel gets a little boost from the algorithm.
mqst_'s tweet image. Secure Code Review Complete Series for Beginners.

Find this playlist directly on YouTube so that the channel gets a little boost from the algorithm.

Loading...

Something went wrong.


Something went wrong.