Koupon (@Shabosec) header
Koupon (@Shabosec) profile picture

Koupon

@Shabosec

Security Researchers | Ethical Hacker | Bug Hunting

 Lagos, Nigeria
Joined May 2025
  • Tweets2K
  • Following930
  • Followers1.8K
143Media
Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)Photo by Koupon (@Shabosec)
Alhamdulilahi 🙏🙏🙏 My First Critical on Amazon I dedicate this to @Olamdeen @4osp3l @GodfatherOrwa @fattselimi @badcrack3r The power of Yandex Dorking🚀🚀🚀🚀 Never Back Down is the Key 🚀🚀🚀🚀
Image from Koupon (@Shabosec)
30
6
2
248
38,815
I see the money coming 🚀🚀🚀🚀 BAC 🔥🔥🔥 SHABOMALA X YANDEX 🔥🔥🔥 I LOVE Next.JS 😋😋😋 Big up @GodfatherOrwa @4osp3l @Olamdeen @sachin_pandey98 @ladebw @lostsec_ @XHackerx007
Image from Koupon (@Shabosec)
4
2
29
561
Wheel up 🔥🔥🔥 More To come My Pengame with Yandex is Crazy 🔥🔥🔥 Big shout out to my brother from another mother @ladebw @sachin_pandey98 for Yandex dork tool 🔥🔥🔥 and also @Olamdeen OG 🔥🔥🔥 Big up @lostsec_ @Olamdeen @4osp3l @GodfatherOrwa @ladebw @sachin_pandey98
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
7
3
28
1,160
My 3 Swag Arrived 🔥🔥🔥 Thank you Yandex Dork My PenGame with Yandex is On Another Level 🔥 My Pen is my Sword 🚀🚀 Big up up 🔥🔥🔥 @Olamdeen @GodfatherOrwa @fattselimi @lostsec_ @XHackerx007 @badcrack3r @commando_skiipz @4osp3l @ladebw @sachin_pandey98
Image from Koupon (@Shabosec)
4
2
27
1,298
Fact Hack a Big Company make a lot of money 😋😋😋
Joseph Thacker (@rez0__) profile pictureJoseph Thacker
@rez0__Oct 22
My non-hacking buddy asked me how much the person who found the php2shell made. Then he made a good observation: Hack a small company, make a little. Hack a big company, make a lot. Hack 70% of the world, make nothing.
4
440
Very Crazy PHPSHELL 😋😋😋
Dr. Anton Chuvakin (@anton_chuvakin) profile pictureDr. Anton Chuvakin
@anton_chuvakinOct 20
Replying to @_JohnHammond
I mean who could have imagined PHP would have a ... bug? That's like... never happens dude :-)
1
362
Another Cooked 😋😋😋😋
The PHP Foundation (@ThePHPF) profile pictureThe PHP Foundation@ThePHPFOct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
243
Another Bounty & Swag🚀🚀🚀 UPS & USPS F**** crazy 🔥🔥🔥🔥 Yandex Never fail Always Deliver 🔥🔥🔥 Big up @Olamdeen @fattselimi @badcrack3r @ladebw @XHackerx007 @lostsec_ @GodfatherOrwa @sachin_pandey98
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
2
2
32
1,250
Burnout lead to Bounty🔥🔥🔥 Yandex dork deliver me and Back with the Result 🔥🔥🔥 Another Bounty 🚀🚀🚀
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
8
3
1
37
1,193
Yandex deliver me and turn me to a Beast🚀🚀🚀 I’m Already There 🔥🔥🔥
2
1
13
1,111
I found Admin Cookie Embedded in View Page Source i refresh it so many times time it don’t generate so I paste it on Cookies Editor and refresh it and boom 💥 Big up @yandex @Olamdeen @ladebw @sachin_pandey98 @Yassineaboukir @GodfatherOrwa
Koupon (@Shabosec) profile pictureKoupon@ShabosecSep 22
Always look into View Page Source you might find Hidden Gem in a staging site ( stg.domain.com) which lead me to Admin Email Account (office.com) which I found a lot of payroll employees check,bank accounts,Adp information,Chat conversation and lot more
Image from Koupon (@Shabosec)
1
5
26
1,727
Always look into View Page Source you might find Hidden Gem in a staging site ( stg.domain.com) which lead me to Admin Email Account (office.com) which I found a lot of payroll employees check,bank accounts,Adp information,Chat conversation and lot more
Image from Koupon (@Shabosec)
1
1
18
2,597
More to come 🔥🔥🔥🔥 Never give up is the Key
Koupon (@Shabosec) profile pictureKoupon@ShabosecSep 15
Some Self-hosted programs are funny , I found BAC which I found All Transactions folder and there invoice which consist of there due,Account payable and Aging Report They fixed it silently without getting back to me that’s Crazy 🤪 F THEM Pissed 😡
Image from Koupon (@Shabosec)
8
561
Some Self-hosted programs are funny , I found BAC which I found All Transactions folder and there invoice which consist of there due,Account payable and Aging Report They fixed it silently without getting back to me that’s Crazy 🤪 F THEM Pissed 😡
Image from Koupon (@Shabosec)
6
1
1
19
2,346
Yandex Dork is Insane Big up bro @Jfreeg_
Alex (@Jfreeg_) profile pictureAlex@Jfreeg_Sep 12
Replying to @Shabosec @ladebw @sachin_pandey98 @Olamdeen @fattselimi
That is a wild find, huge props to the team for tracking that down 🤯
3
909
Never Give up is the Key to My Strength 💪🏾 Up Up Way 🔥🔥🔥🔥
Koupon (@Shabosec) profile pictureKoupon@ShabosecSep 12
Yandex dork is on Fire 🔥🔥🔥 Admin payment Dashboard via Unrestricted API endpoint (v2) embedded in JS which lead me to 697 million credit transaction F 🔥🔥🔥 Tips: /admin/v2/dashboard/alltransaction/ Big up @ladebw @sachin_pandey98 @Olamdeen @lostsec_ @fattselimi
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
2
12
742
Yandex dork is on Fire 🔥🔥🔥 Admin payment Dashboard via Unrestricted API endpoint (v2) embedded in JS which lead me to 697 million credit transaction F 🔥🔥🔥 Tips: /admin/v2/dashboard/alltransaction/ Big up @ladebw @sachin_pandey98 @Olamdeen @lostsec_ @fattselimi
Image from Koupon (@Shabosec)
Image from Koupon (@Shabosec)
11
19
1
199
10,863
Reference: nitter.gq/ladebw/status/20528393…
Walid Ladeb (@ladebw) profile pictureWalid Ladeb@ladebwMay 8
Hidden Gems Inside Yandex Dork

Hidden Gems Inside Yandex Dork

Article · @ladebw
3
16
1,167
Abi I don return am ni 😂😂😂🔥😂😂😂😂😂😂😂
tony ϟ (@tonyioi) profile picturetony ϟ
@tonyioiSep 7
them: I'm a whitehat hacker proceeds to keep 600 btc lol
1
462
And the Transfer Apikey and endpoint allow me to transfer to any bank 🏦 But wtf the Security Team doing OMFG 🔥🔥🔥
Koupon (@Shabosec) profile pictureKoupon@ShabosecSep 6
Hacking on Sunday Give me Joy 🔥🔥🔥 Preparing My Bug Report Yandex dork + Next.js= RCE😋😋😋 which I found transfer endpoint and Apikey in Aws container My Level with Yandex Dork is Crazy 🤪 😜 🔥🔥 Big up @Olamdeen @GodfatherOrwa @badcrack3r @fattselimi @XHackerx007
Image from Koupon (@Shabosec)
1
22
1,786
Hacking on Sunday Give me Joy 🔥🔥🔥 Preparing My Bug Report Yandex dork + Next.js= RCE😋😋😋 which I found transfer endpoint and Apikey in Aws container My Level with Yandex Dork is Crazy 🤪 😜 🔥🔥 Big up @Olamdeen @GodfatherOrwa @badcrack3r @fattselimi @XHackerx007
Image from Koupon (@Shabosec)
10
2
1
87
7,360
thecybersecguru.com/news/nex…
Next.js RCE Vulnerability: Critical AVIF & libheif Flaws Explained | The CyberSec Guru

Next.js RCE Vulnerability: Critical AVIF & libheif Flaws Explained | The CyberSec Guru

Critical Next.js RCE vulnerabilities affect AVIF image optimization and Windows servers. Learn about libheif, GHSA-2xp9-vwfh-vxw4, CVE-2026-75604

thecybersecguru.com
1
1
14
965
Load more