m4t (@szilak44) 's Twitter Profile
m4t

@szilak44

20 | itsec | ctf(1337B01S co-founder) | bugbounty | cve-2021-34422 | pentester | gymbro

ID: 2909676694

linkhttps://m4t3sz.gitlab.io calendar_today07-12-2014 18:29:12

2,2K Tweet

557 Takipçi

2,2K Takip Edilen

zhero; (@zhero___) 's Twitter Profile Photo

the research paper is out: Next.js and the corrupt middleware: the authorizing artifact result of a collaboration with inzo that led to CVE-2025-29927 (9.1-critical) zhero-web-sec.github.io/research-and-t… enjoy the read!

the research paper is out:

Next.js and the corrupt middleware: the authorizing artifact

result of a collaboration with <a href="/inzo____/">inzo</a> that led to CVE-2025-29927 (9.1-critical)

zhero-web-sec.github.io/research-and-t…

enjoy the read!
Web Security Academy (@websecacademy) 's Twitter Profile Photo

URL validation holding you back? Don't stress, we've got your back! Our URL Validation Bypass Cheat Sheet has 200+ Payloads for all occasions! Check it out: portswigger.net/web-security/s… #burpsuite #hacking #bugbounty #pentesting #cybersecurity

Gergely Kalman (@gergely_kalman) 's Twitter Profile Photo

Here's my slightly longer talk from earlier this year at BSidesBUD 🇭🇺: give this a watch if you are interested in the Apple bug bounty. Unfortunately with the latest changes TCC bypasses are worthless now, but the rest of the talk is still pretty useful youtube.com/watch?v=AYtH63…

celeste @ eh22 (@vmfunc) 's Twitter Profile Photo

tetsuo still has me blocked and his team says that kind of bs.. alright then, i just looked at the repo that he published, and took the time to review the code again: found 12+ critical security vulnerabilities. executable stack enabled via setjmp/longjmp with comments claiming

tetsuo still has me blocked and his team says that kind of bs..

alright then, i just looked at the repo that he published, and took the time to review the code again:

found 12+ critical security vulnerabilities. executable stack enabled via setjmp/longjmp with comments claiming
vx-underground (@vxunderground) 's Twitter Profile Photo

This is incredible news. Google Gemini can now connect to your Google email, Google Photos, Google search history, and your YouTube. All for free! If you've ever wanted Google to know everything you do, with literally zero privacy, now is your chance. Hooray!

Nicolas Hulscher, MPH (@nichulscher) 's Twitter Profile Photo

A SINGLE 20g dose of creatine increases cognitive processing speed by 24.5% within 3.5 hours. A placebo-controlled trial found that creatine rapidly enhanced brain bioenergetics and improved cognitive performance during sleep deprivation, with effects lasting up to nine hours.

ℏεsam (@hesamation) 's Twitter Profile Photo

Anthropic studies how AI coding affects 52 professional developers: > the group who used AI felt “lazy” and noticed gaps in their understanding and the group which didn’t use AI felt the task was “fun” > AI significantly hurts skills formation of a new library by 17% > AI didn’t

Anthropic studies how AI coding affects 52 professional developers:
&gt; the group who used AI felt “lazy” and noticed gaps in their understanding and the group which didn’t use AI felt the task was “fun” 
&gt; AI significantly hurts skills formation of a new library by 17%
&gt; AI didn’t