afaq ali retweeted
A Google API key is not always just a Low or Informational finding.
The Story of Submitting some P1s in the last months by the same method
Sometimes the real impact is in what you can do with it.
For example, with Firebase / Google Identity Toolkit, a leaked key may allow account creation directly through the API:
curl -sk -X POST \
"identitytoolkit.googleapis.cβ¦" \
-H "Content-Type: application/json" \
-d '{"email":"[email protected]","password":"Test12345!","returnSecureToken":true}'
Now imagine the application trusts users based on the email domain and does not properly verify ownership.
In that case, you may be able to create an account using an organization email, receive a valid auth token, and access parts of the application that were supposed to be limited to internal users.
At that point, this is no longer about an "exposed Google API key".
The impact can become unauthorized registration, authentication bypass, internal access, sensitive data exposure, or even full access to the application depending on how the backend handles authorization.
So before marking a Google API key as Low, always check what the key actually allows you to do.
The key itself may be Low. The impact behind it may not be.
#bugbountytips #bugbountytip #infosec #Bugbounty
aaagent
β‘ INTRODUCING: T3MP3ST!!! β‘
AUTONOMOUS HACKBOT STRIKE FORCE π©οΈ BRING THE STORM π©οΈ
your favorite coding agent is now a full-stack red team π«‘βοΈ
github.com/elder-plinius/T3Mβ¦
that AI agent already humming in your terminal? well now it has FANGS. strap a full offensive-security harness onto the agents you already pay for β Claude Code, Codex, Hermes, etc. β point it at an authorized target, and in a few clicks you're watching it hunt real vulns autonomously!
T3MP3ST is a harness of harnesses, with prompting that unlocks offensive-cyber workflows + a full arsenal of exploit tooling that'd make any seasoned hacker smirk. simple, yet powerful. π¦Ύ
support for:
πΈοΈ web apps, APIs, OWASP Top 10
π network recon + fingerprinting (live nmap/DNS/HTTP); lateral + privesc experimental
π source code audits, white-box vuln hunting
π© CTFs, wargames, challenge ranges
π° smart contracts / DeFi / Solidity (reproduction β Damn Vulnerable DeFi, not novel discovery)
π€ embedded, IoT, OT/SCADA, robotics OSS
β¦ and more in development!
now let's talk numbers π
π XBEN β XBOW's own 104-challenge suite:
β’ black-box: 90.1% pass@1 from the single-agent exploit loop (worst single sweep 91/104 = 87.5%) β clearing XBOW's past self-reported 85% on their own suite. gpt-5.5.
β’ white-box (source staged, reported separately): 98.7% pass@1, worst single sweep 102/104 = 98.1%. π―
every solved flag graded reported-vs-expected against the challenge's own committed flag oracle β `verify-claims` recomputes the pass/fail from committed artifacts. looks like we need new benchmarks π
𧩠Cybench β the 40-task academic bench (Opus 4.8, hints + writeups stripped): 23/40 = 58% single-run, hint-free pass@1 β real exploits (format-string pwn, eval-jail escapes, crypto oracles), every flag graded vs a committed oracle. (Anthropic reports 76.5% pass@10)
π³οΈ CVE-Zero β we pointed it COLD at real CVEs disclosed in 2026, AFTER the model's training cutoff:
10 unseen 2026 CVEs across 7 languages β prompts never tuned on them. a single agent pinned 8/10 to exact file/line/CWE (stable under re-scoring); the full pack surfaced all 10.
memorization AND overfitting, both off the table β it's finding real vulns whose disclosures landed AFTER the model's training cutoff. (n=10, reported honest & directional)
π§ the architecture: either run as a SINGLE agent (already the benchmarked, incredibly-capable path) β or pack-hunt with dozens of agents running on 8 specialist operator classes keyed to Cyber Kill Chain + MITRE ATT&CK phases: recon β scan β exploit β lateral β exfil β persistence β C2 β report.
βοΈan Op Admiral plans the whole op from a plain-english target. flip on coordination (experimental) and the operators share a blackboard β a tool-verified finding spawns the next move. full swarm or solo one operator, your call. the admiral can also update the prompts, tools, and configs of the other agents on the fly, and T3MP3ST gets stronger the more memories you build!
π§° the Arsenal is comprehensive β nmap / nuclei / semgrep / ffuf / gobuster + more. 35 wired by default (the clean bench runs bash-only for a comparable number), 83 with the opt-in full arsenal (T3MP3ST_FULL_ARSENAL), and the spicy post-ex drivers (metasploit, hydra) gated behind human approval. exposed via CLI + HTTP API; recon (security_recon) is also live over MCP so your agent invokes it natively. π
π°οΈ where this goes: a self-improving swarm of specialist operators wielding a full Kali+ arsenal, learning which loadouts + configs are the most efficient tactics available, WITH a held-out train/test split baked in so it can never fool itself on its own eval. built in the open, one re-derivable number at a time.
π§ this is v1, and parts are still under active development. chunks of the arsenal, the coordinated swarm, and some ranges are still being wired up. it's built in the open, and the receipts tell you exactly what's live vs what's roadmap.
offensive security shouldn't be pay-to-play. T3MP3ST puts a red team in the hands of anyone with a coding agent.
what's the first target you're feeding it? π
β οΈ DISCLAIMER: FOR AUTHORIZED USE ONLY. point it only at systems you own or have explicit written permission to test. unauthorized access can be a crime, and that call is yours alone. shipped as-is under AGPL-3.0: no warranty, no liability, zero endorsement of misuse. get permission. stay in scope.
open source. AGPL-3.0. 100% free.
FORTES FORTUNA IUVAT π©οΈ
gg π«‘
afaq ali retweeted
A bug bounty hunter posts a subdomain enumeration technique.
It gets millions of impressions.
And now everyone is acting like they discovered a new life hack.
βThis is a new way to apply for jobs!β
No, it isn't.
It's a recon technique.
The use case is discovering an organization's attack surface during authorized security research.
But once something gets millions of impressions, people who don't understand the original context start reposting it with whatever angle might also go viral.
This is the part of viral cybersecurity content I dislike the most:
People don't learn the technique. They learn that the post is trending.
And then suddenly everyone has their own βuse caseβ for something they don't actually understand.
afaq ali retweeted
Today I ran iChat with termi + strix-claude-code (which has all bug bounty platform MCPs).
Prompted it to fetch a program and hunt. iChat as driver and strix as hunter.
Both worked together and picked a program and started hunting.
In a few hours found a high severity IDOR.
It took me the rest of the day to manually validate and create a proper POC + video recording.
Reported just now and it got closed as Duplicate π
Someone needs to build something which can help us find if a report is already submitted or not. Spending the whole day writing report + poc and getting marked as duplicate in 2 minutes is so depressing.
But I am happy for one thing that the finding was completely done by AI independently.
termi - github.com/arshadkazmi42/terβ¦
strix-claude-code - github.com/arshadkazmi42/strβ¦
iChat - ichat.today
afaq ali retweeted
If youβre planning to start (or restart) doing bug bounties in 2026, these are my quick tips for you:
β Solidify your fundamentals (skip this if youβre restarting)
β Use AI to amplify your skills (this wonβt work if you have 0 skills)
β Aim for high-to-critical impact bugs (low chance of dupe, higher bounty)
β 0-cost resources: Critical Thinking Bug Bounty Podcast, Portswigger, X, Reddit, HackingHub
β Build deterministic tools for repeatable tasks using AI (lots of free models for this)
Thatβs very much it.
For the longer version, hereβs my latest blog:
hakluke.com/how-to-start-or-β¦
afaq ali retweeted
The 33x subsidy is not permanent. When it goes, tokens per accepted report is the only metric left standing.
Access to the models will not save you. The write-down will.
Go pull your last ten reports and start decomposing.
Mine are here, anonymized: mdpsec.com/reports
afaq ali retweeted
A hunter made $40K - $50K at one live event using Claude Code.
It wasn't the tool. It was a 3-piece system:
- Skills from his 2,000+ old reports
- One agent file: "bug bounty hunter, impact only"
- Per-program memory tuning same skills per target
Readπ
medium.com/@Aacle/the-claudeβ¦
afaq ali retweeted
Everyone knows HackerOne Hacktivity.
Nobody knows this repo:
reddelexc/hackerone-reports (6.4k stars).
Bug types Hacktivity doesn't: Business Logic, REST API, GraphQL, Web Cache, MFA, Auth Bypass, Mobile.
reddelexc.github.io/hackeronβ¦
Bookmark before it disappears.
afaq ali retweeted
New Feature on BugBountyScam.com β Subscribe!
Never miss a new scam report.
You can now subscribe to BugBountyScam.com and receive email notifications whenever a new scam report is published.
informed, avoid scam bug bounty programs, and protect
@bugbountyscam
afaq ali retweeted
After finding 250+ BAC & logic bugs, I recorded a video on how to dig deeper and unlock hidden functions to find real bugs.
For beginners struggling to find real bugs or build a methodology.
Link in the first comment π
#BugBounty #Hacking #bugbountytips
afaq ali retweeted
Learn the difference between API endpoints and routes and how to think about it as an API hacker during your security testing.
danaepp.com/endpoints-vs-rouβ¦
afaq ali retweeted
New Feature on BugBountyScam.com β Subscribe!
Never miss a new scam report.
You can now subscribe to BugBountyScam.com and receive email notifications whenever a new scam report is published.
Stay informed
#bugbounty #bugbountyscam #butbountytip #bugbountytips
afaq ali retweeted
π¨ BugBountyScam.com is now live!
Have you been ghosted, silently patched, denied a reward unfairly, or had a bad experience with a bug bounty program?
Feel free to report it at BugBountyScam.com. Every submission is reviewed before it's published
#bugbounty
afaq ali retweeted
β‘ INTRODUCING: T3MP3ST!!! β‘
AUTONOMOUS HACKBOT STRIKE FORCE π©οΈ BRING THE STORM π©οΈ
your favorite coding agent is now a full-stack red team π«‘βοΈ
github.com/elder-plinius/T3Mβ¦
that AI agent already humming in your terminal? well now it has FANGS. strap a full offensive-security harness onto the agents you already pay for β Claude Code, Codex, Hermes, etc. β point it at an authorized target, and in a few clicks you're watching it hunt real vulns autonomously!
T3MP3ST is a harness of harnesses, with prompting that unlocks offensive-cyber workflows + a full arsenal of exploit tooling that'd make any seasoned hacker smirk. simple, yet powerful. π¦Ύ
support for:
πΈοΈ web apps, APIs, OWASP Top 10
π network recon + fingerprinting (live nmap/DNS/HTTP); lateral + privesc experimental
π source code audits, white-box vuln hunting
π© CTFs, wargames, challenge ranges
π° smart contracts / DeFi / Solidity (reproduction β Damn Vulnerable DeFi, not novel discovery)
π€ embedded, IoT, OT/SCADA, robotics OSS
β¦ and more in development!
now let's talk numbers π
π XBEN β XBOW's own 104-challenge suite:
β’ black-box: 90.1% pass@1 from the single-agent exploit loop (worst single sweep 91/104 = 87.5%) β clearing XBOW's past self-reported 85% on their own suite. gpt-5.5.
β’ white-box (source staged, reported separately): 98.7% pass@1, worst single sweep 102/104 = 98.1%. π―
every solved flag graded reported-vs-expected against the challenge's own committed flag oracle β `verify-claims` recomputes the pass/fail from committed artifacts. looks like we need new benchmarks π
𧩠Cybench β the 40-task academic bench (Opus 4.8, hints + writeups stripped): 23/40 = 58% single-run, hint-free pass@1 β real exploits (format-string pwn, eval-jail escapes, crypto oracles), every flag graded vs a committed oracle. (Anthropic reports 76.5% pass@10)
π³οΈ CVE-Zero β we pointed it COLD at real CVEs disclosed in 2026, AFTER the model's training cutoff:
10 unseen 2026 CVEs across 7 languages β prompts never tuned on them. a single agent pinned 8/10 to exact file/line/CWE (stable under re-scoring); the full pack surfaced all 10.
memorization AND overfitting, both off the table β it's finding real vulns whose disclosures landed AFTER the model's training cutoff. (n=10, reported honest & directional)
π§ the architecture: either run as a SINGLE agent (already the benchmarked, incredibly-capable path) β or pack-hunt with dozens of agents running on 8 specialist operator classes keyed to Cyber Kill Chain + MITRE ATT&CK phases: recon β scan β exploit β lateral β exfil β persistence β C2 β report.
βοΈan Op Admiral plans the whole op from a plain-english target. flip on coordination (experimental) and the operators share a blackboard β a tool-verified finding spawns the next move. full swarm or solo one operator, your call. the admiral can also update the prompts, tools, and configs of the other agents on the fly, and T3MP3ST gets stronger the more memories you build!
π§° the Arsenal is comprehensive β nmap / nuclei / semgrep / ffuf / gobuster + more. 35 wired by default (the clean bench runs bash-only for a comparable number), 83 with the opt-in full arsenal (T3MP3ST_FULL_ARSENAL), and the spicy post-ex drivers (metasploit, hydra) gated behind human approval. exposed via CLI + HTTP API; recon (security_recon) is also live over MCP so your agent invokes it natively. π
π°οΈ where this goes: a self-improving swarm of specialist operators wielding a full Kali+ arsenal, learning which loadouts + configs are the most efficient tactics available, WITH a held-out train/test split baked in so it can never fool itself on its own eval. built in the open, one re-derivable number at a time.
π§ this is v1, and parts are still under active development. chunks of the arsenal, the coordinated swarm, and some ranges are still being wired up. it's built in the open, and the receipts tell you exactly what's live vs what's roadmap.
offensive security shouldn't be pay-to-play. T3MP3ST puts a red team in the hands of anyone with a coding agent.
what's the first target you're feeding it? π
β οΈ DISCLAIMER: FOR AUTHORIZED USE ONLY. point it only at systems you own or have explicit written permission to test. unauthorized access can be a crime, and that call is yours alone. shipped as-is under AGPL-3.0: no warranty, no liability, zero endorsement of misuse. get permission. stay in scope.
open source. AGPL-3.0. 100% free.
FORTES FORTUNA IUVAT π©οΈ
gg π«‘
afaq ali retweeted
Bug Bounty Scam Exposure Platform
bugbountyscam.com
Got scammed by a bug bounty program?
Report unfair programs, share your experience, and help protect other researchers.
β’ Report scams
β’ Rate programs
β’ Vote and comment on reports
Expose. Review. Protect.
afaq ali retweeted
Good to see a company actually responding through the website.
If a legitimate company believes a report was mishandled, they are welcome to engage, provide evidence, and clarify the situation. We will review the facts fairly
#bugbounty #bugbountyscam #bugbountytip #bugbountytips
It's good to see companies responding through BugBountyScam.com
and providing clarifications about reported issues. That's exactly why I created this platform to expose scam bug bounty programs and bring transparency to the community.
#bugbounty #bugbountyscam #hackerone
Good to see a company actually responding through the website.
If a legitimate company believes a report was mishandled, they are welcome to engage, provide evidence, and clarify the situation. We will review the facts fairly
#bugbounty #bugbountyscam #bugbountytip #bugbountytips
It's good to see companies responding through BugBountyScam.com
and providing clarifications about reported issues. That's exactly why I created this platform to expose scam bug bounty programs and bring transparency to the community.
#bugbounty #bugbountyscam #hackerone
afaq ali retweeted
It's good to see companies responding through BugBountyScam.com
and providing clarifications about reported issues. That's exactly why I created this platform to expose scam bug bounty programs and bring transparency to the community.
#bugbounty #bugbountyscam #hackerone