Penetration Testing | Application Security (Mobile, Web, APIs) | Reverse Engineering | Zero Day Researcher | Bug Bounty Hunter 🙂 | Bug Bounty Triage ... e.t.c
Area 51
Joined October 2020
- Tweets14.6K
- Following1.1K
- Followers6.2K
- Likes58.2K
It's Steiner254 retweeted
HuntDeck is live in demo mode 🎯
One board for H1, Bugcrowd, Intigriti and YesWeHack: fresh scope/changes, bounty changes and disclosures
I want feedback before I open source it, so tell me what's missing/broken
drop a follow/repost plz... would help heaps with algo ⬇️⬇️
It's Steiner254 retweeted
This one is so amazing, super good
as example for the bros here, if you're doing an AI scan and you're thinking that maybe there's a SQL, you can tag this for your AI to read ALL reports about SQL from this
And for sure, a lot of other cool things can be done with huntdeck
nice work mate
It's Steiner254 retweeted
Subdomain enumeration won’t show you every domain your target trusts... 👀
csprecon by @edoardottt2 reads the Content Security Policy of your targets and pulls out every domain it allows, from API hosts to CDNs and third-party services! 🤠
🔗 github.com/edoardottt/csprec…
It's Steiner254 retweeted
We’re aware of CVE-2026-119618, a race condition in Apache mod_http2 that can lead to heap corruption and potentially RCE. We’re actively investigating. It appears to be configuration-specific, with only hosts with h2 enabled in Protocols being exposed. Patch now or drop h2 until you can.
It's Steiner254 retweeted
Equity Group is developing AI tools to predict potential staff exits and identify employees who may be planning to leave.
The system will help the lender plan ahead and retain critical skills through salary reviews, promotions, bonuses and career development opportunities.
It's Steiner254 retweeted
Getting your hands on source code is a MUST for finding critical bugs. It can happen without it, but if you're looking for zero days, it's very much worth the time investment.
Even further, once you've got source code from docker containers or trials, @infosec_au suggests...
It's Steiner254 retweeted
Our researchers HexRabbit(@h3xr4bb1t) and NiNi(@terrynini38514) are speaking at #POC2026: “Obvious Was Only the Beginning: A WebKit Exploit Chain for #Pwn2Own”
With LLMs advancing this fast, where does AI have the edge, and where do humans still lead?
powerofcommunity.net/talk/20…
It's Steiner254 retweeted
A technical breakdown of three attack scenarios: chaining Android deep links with WebView misconfigurations, insufficient URL validation, bypassable host checks, and file:// URI exploitation to exfiltrate app data: 8ksec.io/android-deeplink-an…
Each one includes a working PoC against InsecureShop.
More Android app attack-surface deep dives on @8kSec
It's Steiner254 retweeted
AI can be very annoying sometimes cuz of long replies for just simple question !
here is a tip how you can solve that :
create a skill named "/sa" and add :"answer in one phrase " , so next time when you want direct answer you can just ask it using :
/sa what should i do here ?
/sa what this function do ?
that way you will spend less tokens , and save alot of time too !
happy hacking 😄
It's Steiner254 retweeted
The recording is finally out! 🎉
Here’s my talk from @defcon 34, presented at the @BugBountyDEFCON !
🤖 AI Nightmare: Hacking at 0-Hour
Once again, a huge thank you to the Bug Bounty Village team for the opportunity!
🎥 Watch the talk here: youtube.com/watch?v=0pJet2AA…
#DEFCON #BugBounty
It's Steiner254 retweeted
They understood the assignment literally.
We recently celebrated the graduation of our latest Africa Hackathon cybersecurity class, and we couldn’t be prouder.
These graduates gave months of hands-on training, labs, and problem-solving to build skills that Africa’s digital future really needs. They didn’t just finish a course. They walked out ready to defend systems, protect data, and lead in a field that’s growing fast.
To every graduate: you showed up, you pushed through, and you delivered. This is only the beginning.
Congratulations to the class, and thank you to the trainers, mentors, and partners who made it possible.
#AfricaHackathon #Cybersecurity #graduation
It's Steiner254 retweeted
It seems Anthropic really trained its models to hate on Chinese models (Zhipu & DeepSeek), because why else would Opus 4.8 be advising me against using them?
Also, when I asked about Z Code Harness, Opus claimed it was a wrapper around Claude Code that uses GLM models. 😂💔
It's Steiner254 retweeted
They understood the assignment literally.
We recently celebrated the graduation of our latest Africa Hackathon cybersecurity class, and we couldn’t be prouder.
These graduates gave months of hands-on training, labs, and problem-solving to build skills that Africa’s digital future really needs. They didn’t just finish a course. They walked out ready to defend systems, protect data, and lead in a field that’s growing fast.
To every graduate: you showed up, you pushed through, and you delivered. This is only the beginning.
Congratulations to the class, and thank you to the trainers, mentors, and partners who made it possible.
#AfricaHackathon #Cybersecurity #Graduation
It's Steiner254 retweeted
Back before AI, hacking was actually fun. Leaked creds, vulnerable WP plugins, cPanel, mass exploiting new CVEs with scripts that takes you ages to write, defacing with really bad HTML that u stole from an other hacker. Now nothing’s fun anymore, even hacking NAZA is boring now.
