PoC

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

The redteam when they do social engineering over the phone and the client download and execute the file "invoice.pdf.exe"

#CVE-2023-42793 github.com/H454NSec/CVE-2…

CVE-2023-42793 Authentication Bypass in JetBrains TeamCity CI/CD github.com/H454NSec/CVE-2… #cve #cybersecurity #infosec

Gone in 61 seconds. The keys were left near the front door.

⚡️ CVE-2023-42793: Exploit ( H454N  ) 📣 Exploit link : github.com/H454NSec/CVE-2… 📝 Link to Rapid7 report : rapid7.com/blog/post/2023… #cve #exploit #bugbounty #CyberSecurity #infosec

Somebody tell me this is not a dream 😅 Yay, I was awarded a $200,000 🔥 bounty on HackerOne! hackerone.com/haqpl #TogetherWeHitHarder

Let's start with Crypto auditing (Web-3) Thread 🧵:👇 Here is how to Learn web3 testing : 1) Web3 security materials and resources For Pentesters and Bug Hunters. #bugbountytips #infosec #smartcontract #web3_hacking #web3

NVIDIA just released FREE online courses in AI. Here are 9 courses you can't afford to miss:

One of the best resources for Mobile Security mobisec.reyammer.io/slides

We uploaded a backdoored AI model to @HuggingFace which we could use to potentially access other customers’ data✨ Here is how we did it - and collaborated with Hugging Face to fix it 🧵⬇️

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on Anthony Weems POC