@Labost909

security researcher 🪩 18 yo hacker

discord.gg/2qvTGbkCRa
Joined February 2025
  • Tweets290
  • Following356
  • Followers72
21Media
Pinned Tweet
hexa@Labost909Oct 3
If hackerone can contain a critical Idor bug like this who I'm I to tell anyone websites, software are secure lol 👀👀
2
4
1
197
12,330
Tf 👽 so fast
Burp Suite
@Burp_SuiteOct 21
🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST. Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using: 🟧 ActiveScan++ v2.0.13 (portswigger.net/bappstore/31…) 🟧 Bambda scan checks (github.com/PortSwigger/bambd…) 🟧 BChecks (github.com/PortSwigger/bchec…) Start scanning for the vulnerability now → portswigger.net/bappstore/31…

Active Scan++

Extends Burp's active and passive scanning capabilities.

portswigger.net
50
when my agents has gone crazy @rez0__ blog:josephthacker.com/hacking/20… is always the perfect motivation to bring my mindset and to remind me of any mistake im doing. love you bro😀

The Bug Bounty Singularity: Our Hackbot

This past December, it became feasible for any skilled hacker to scale up a hacking agent, spending hundreds in token cost to find thousands in bounties. I call this the “Bug Bounty Singularity”....

josephthacker.com
1
17
109
5,910
another rce on a major app most of us are using discord
Karim
@kymu___Oct 16
RCE in Discord 👀 bugcrowd.com/disclosures/638…
3
261
I Was just scrolling here and there on a major movie website to download something and I found this
1
5
699
Frr @Bugcrowd is broken this traige is shit
1
78
This is the report by the way hackerone.com/reports/386264…

HackerOne disclosed on HackerOne: IDOR allows user to access report...

**Summary:** An information disclosure vulnerability on the `/reports/{id}/reference.json` endpoint allowed VDP accounts created via `hackerone.com/vdp-sign-up` to access certain private report...

hackerone.com
9
1
61
6,255
Hmm 🤔😏 no dup,n/a and oos lmao 🤣
Pyro
@0x3b33Apr 5
Lazarus group has been paid ~1.6B in bug bounties last year
1
222
hexa retweeted
Pyro
@0x3b33Apr 5
Lazarus group has been paid ~1.6B in bug bounties last year
79
159
45
2,634
328,125
crazy exploits 🔥🔥
TrendAI Zero Day Initiative
@thezdiMay 15
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
135
Replying to @BugcrowdSupport
@BugcrowdSupport I’m seeking an update regarding 3 vulnerability reports that have been pending for over a year My support ticket has also been open for several months and was previously escalated to the CEM/Program Owner,but there has still been no substantive update @Bugcrowd
9
2
2
53
3,999
My situation 😂 but I'm more using Kali
Ahmedkhan
@Ahmed___khaanSep 16
intel CORE i3 with kali linux installed
1
1
116
Damnit 😂 I gotta find a program to hack on
Z A D D Y
@ZaddyzaddySep 16
Inspired by @mdp_sec’s win, decided to throw some assets from the same program into @BugBunny_ai 👀
1
127
Oops it's high time to grind and build rep on bug crowd Company pentesting left for now 🙂‍↔️
1
82
Note 🖊️
Shad0w@Itx_Shad0w6 Mar 2025
“Every time you quit, you’re choosing failure over progress. The world doesn’t care about your excuses.”
1
3
116
Thank you @Bugcrowd @inspectiv @Hacker0x01 ❤️‍🔥 This video is for those who think their life can’t change from where they are.
196
141
23
2,870
126,915
Got my first bounty after long time learning,hard work it was pretty fun honestly and thanks to you guys @hunt_n27493 @Mhiztabjay and to the legend bugmithalchemist 🔥🫡
1
6
263
For the rest of the moth I would be studying every bypass, techniques and methologies on on ssrf and file upload ssrf:medium.com/@mazene432/server… Fille upload:hackviser.com/tactics/pentes… threatmon.io/what-is-file-up…

Server-Side Request Forgery (SSRF) Explained: From Basics to Advanced Attacks

Introduction

medium.com
1
161
FREE $200 IN AI CREDITS Agent Router is giving new users $200 in free API credits. Current models to try out: gpt-5.6-sol, claude-opus-5, claude-opus-4-8. Eligibility: >Your GitHub account must have been created before 2025 How to claim it: Visit agentrouter.org/register?aff… -Sign up with GitHub -Don’t use the Gmail or username sign-in options That’s all. I tested the credits with my Hermes agent and successfully ran GPT-5.6 Sol. Don’t miss this opportunity if you qualify.
328
100
103
1,097
410,165
Love this guy website #bugbounty
مچهول الهويه@adce626May 17
Just launched VULNEX – my new website!A clean library with ready payloads, vulnerability testing techniques, useful commands, Google Dorks, and resources for Bug Bounty & Cybersecurity.Everything neatly organized for easy use.Check it out: vulnex.vercel.app/Hope #BugBounty
120
Load more