AI engineer / bug hunter / tech news junkie
UAE
Joined May 2022
- Tweets292
- Following60
- Followers705
- Likes315
Pinned Tweet
I finished my first LHE with 4th place! 🥳🫣
It’s not exactly what I wanted, but yeah — it was good for my first contribution.
Thanks to @Hacker0x01, @tiktok, and @okx for this amazing event.
Hopefully I can hit 1st place in future events! 💪🔥
#H165 #BugBounty
2
102
5,790
Ibrahim AH retweeted
Hacking tip! 🐝
Most beginner hunters just run subfinder with just the domain as input.
Add the -recursive flag to force only recursive-capable sources (like crt.sh, Censys) to go deeper. Combined with rate limiting, you avoid API bans while increasing your coverage.
👇
Ibrahim AH retweeted
GitHub’s bug bounty program just hit its “next chapter” era. New VIP tier, static payouts, and a higher bar for quality in the age of AI. 🐛🛡️Read what's next: github.blog/security/next-ch…
Ibrahim AH retweeted
Today, HackerOne joins Project Glasswing, Anthropic's controlled-access program for Claude Mythos 5. We'll use it to harden our own security and evaluate it across the full CTEM workflow, including discovery, validation, prioritization, and remediation.
Two things up front, because researchers will ask.
Your reports are not training data. Vulnerability submissions stay where they belong: with the customer and the researcher who found them.
And AI is not replacing the bounty model. In the first 6 months of this year, researchers earned approximately $47M in bounties through HackerOne, up 25% year-on-year. More AI on offense and defense means more code shipped, more attack surface created, more reports filed, and more bounty work.
What we learn from applying Mythos to HackerOne’s internal scope will be shared with the wider community.
Read the announcement. bit.ly/3SW96lx
These idiots using AI in #bugbounty without knowing anything about security — they only see their AI slop say "5 RCE confirmed..." then directly submit reports without any verification. Because they don't have the knowledge to verify the results.
Please go learn and build real knowledge, or go away, you fools, we've had enough! 😡
Fuck AI slop 🤦♂️
Since the last Decmeber, we've seen a huge rise of AI usage in finding and reporting vulnerabilities. And that's already causing a visible impact on the industry- for better or for worse.
I wrote a blog post on my views on the current state of open-source bug bounty along with a deep dive into the Patchstack bug bounty program's stats.
dhakal-ananda.com.np/misc/si…
4
403
This has happened to me for the second time in a short period. Should I request PoC in this case?
#bugbounty
1
342
Just say "Hey agent, find bug for me please", then wait some time to get a lot of bugs. But, don't forget to provide the target 😃
1
1
440
Sorry guys, but I don't know how to say this: I built with my team a model called "The Infallible Superhero." This model discovered lots and lots and lots of thousands of vulnerabilities in large companies. The model detects bugs that haven't been discovered in 60 years (I know there was no internet back then, but yeah, hype). Can you imagine! My model can chain 6 to 7 vulnerabilities into one critical vulnerability (I don't know how, but yeah I want to see this for the hype). This is amazing, yeah. But unfortunately I can't disclose it yet or provide any PoCs. However, this is real.
Asking for proof means you don't understand AI 😀😄
166
With every new model or feature released by @AnthropicAI, I see people getting worried, and the same question always comes up: Is this the end? Will AI replace us?
Honestly, these are legitimate questions.
The question that kept popping into my head was:
If AI replaces a large number of jobs and the global unemployment rate reaches 50% (a hypothetical figure I’m making up 😁), will it only affect individuals who lose their jobs, or will companies be affected too?
Of course, everyone would be affected. If we ever reach such levels, it would be a true economic catastrophe. Not just individuals and small businesses, but entire economies could collapse.
So, will AI completely replace us, as some claim?
Based on what I’ve read and believe, AI will replace some jobs—but it will also create entirely new ones. According to the World Economic Forum’s 2025 report, 92 million jobs may be displaced, while 170 million new ones could be created (link in comments).
This is already happening. Here are some roles that didn’t exist a few years ago:
- AI Prompt Engineer
- AI Content Writer
- Vibe Coding Cleanup
In short, every era sees jobs disappear and others emerge. The difference with AI is the speed.
That’s what scares people: every day there’s a new model, a new feature, and nonstop hype.
But in the end, the people who adapt are the ones who benefit.
That’s it. Hope this was useful.
Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.
It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
anthropic.com/glasswing
1
1
199
In every time that i found a valid bug i tend to reward myself more than every time 😁. In this time, i'm not only competing with other hackers, no i compete with the hackers that already have static tools and now have ai agents added to their workflow, also with companies that used the ai agent and static tools, and even with internal team. Imagine now, the app testing by:
- Internal teams with their tools and ai agents.
- The security companies, that also have specific security teams and private tools.
- Autonomous offensive security by AI like @Xbow
- Hackers, with different mindset and tools
And after all this process you manage to find bugs, it's amazing yeah. You should reward yourself 😅.
All to say keep moving!
10
692
I see a lot of tweets about AI in bugbounty, and most fall into two camps:
One side hypes it like it's replacing every hacker tomorrow.
The other side clowns on it every time it hallucinates.
Both are wrong.
Yeah, AI makes mistakes. It hallucinates. But it's getting better fast, and the people actually using it in their workflow are pulling results others aren't.
If you're still ignoring it entirely, that's going to cost you. Not because AI is magic, but because the hunters using it well are moving faster than you.
Adapt or get left behind. Simple as that.
