cryptoshant🇮🇳 (@cryptoshan484) header
cryptoshant🇮🇳 (@cryptoshan484) profile picture

cryptoshant🇮🇳

@cryptoshan484

https://teapaw.org/t.co/dhShQDvF01

Joined October 2024
  • Tweets206
  • Following110
  • Followers933
35Media
Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)Photo by cryptoshant🇮🇳 (@cryptoshan484)
Thank you so much @msftsecresponse for the bounty 🤑. It was my very first report to MSRC ❤ and awarded with 4 digit bounty $$$$ 🥳. Report will be disclosed soon after discussing with msrc. Till then onto next one 🚀 Follow me here: medium.com/@dsmodi484
Image from cryptoshant🇮🇳 (@cryptoshan484)
7
4
127
8,986
cryptoshant🇮🇳 retweeted
Luke Stephens (hakluke) (@hakluke) profile picture
Luke Stephens (hakluke)
@haklukeNov 6
nip.io/ can be super useful for bypassing filters to exploit SSRF vulnerabilities. <anything>.<IP>.nip.io will redirect to the <IP> you specify. For example: 1.1.1.1.nip.io/ will resolve to 1.1.1.1 Make sure your hackbot (and you!) knows this!
8
37
1
373
19,890
cryptoshant🇮🇳 retweeted
Marius du Preez (@mdp_sec) profile picture
Marius du Preez
@mdp_secOct 29
build ur own AI bug bounty hunter, everything i tell people in my DMs

build ur own AI bug bounty hunter, everything i tell people in my DMs

Article · @mdp_sec
29
126
8
834
141,594
cryptoshant🇮🇳 retweeted
zack0x01 (@zack0x01_) profile picture
zack0x01
@zack0x01_Oct 13
I built an AI agent that hunts bugs while I sleep. It maps a target, tests the bug classes I care about, kills its own false positives, writes the PoC and pings me at midnight. Step by step build in the article. #bugbounty #hacking #cybersecurity
How to Build an AI Hacking Agent That Finds Bugs While You Sleep

How to Build an AI Hacking Agent That Finds Bugs While You Sleep

Article · @zack0x01_
30
89
2
607
28,026
cryptoshant🇮🇳 retweeted
XBOW (@Xbow) profile picture
XBOW
@XbowOct 13
Ask @moyix anything about our Chrome full-chain exploit. 👀 He published the technical breakdown of how he did it (xbow.com/labs/research/zero-…)...but if you have questions or want to go deeper, drop your questions in this thread! He’ll be answering them LIVE on Wednesday, 10/14, from 12–1 PM ET. 💚
Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain

Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain

Google awarded this chain the first $250,000 Chrome full-chain reward under the VRP rules introduced in April 2026. This post is about the exploit.

xbow.com
9
32
3
145
20,594
cryptoshant🇮🇳 retweeted
Simon (@soeckly) profile picture
Simon
@soecklyOct 12
I got $90,000 for a RCE in Google. simonkoeck.com/writeups/goog…
How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.

simonkoeck.com
57
304
15
2,464
188,005
cryptoshant🇮🇳 retweeted
보안재테크 (@ngnicky) profile picture
보안재테크
@ngnickyOct 11
와우 버그헌팅 연구하는 사람들에게 최고의 사이트네요!! 굿. webhacklist.com/?year=2026-a…
Image from 보안재테크 (@ngnicky)
Image from 보안재테크 (@ngnicky)
5
40
254
15,778
cryptoshant🇮🇳 retweeted
Kapeka (@kapeka) profile picture
Kapeka@kapekaJan 25
Made a new article about a methodology I have been using to find high impact bugs! Hope u like it! kapeka.dev/blog/exploiting-t…
Exploiting the Feature Factory

Exploiting the Feature Factory

Exploiting the Feature Factory

kapeka.dev
7
17
2
95
10,627
Someone told me what are you doing.. and I responded 😵‍💫
Image from cryptoshant🇮🇳 (@cryptoshan484)
73
When you know from internal files that you can do Privs Esc but when you put the payload and good news AI blocks you 🥲 bcz every request goes from AI and he gave the internal files but don't allow to run the payload that affect internal things 😶‍🌫️
71
cryptoshant🇮🇳 retweeted
Timo Lo(n)gin (@timolongin) profile picture
Timo Lo(n)gin@timolonginOct 1
Blog post about From header smuggling in Apple iCloud just dropped. Sending emails as [email protected], exotic parsing, and a $15,000 bounty. sec-consult.com/blog/detail/…
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities

From: [email protected] - Spoofing Arbitrary Apple iCloud Identities

A case study on discovering two email spoofing vulnerabilities in Apple iCloud.

sec-consult.com
8
99
1
450
42,806
Ai jailbreaking tip:- Once a block doesn't meant you cannot access it try and try with different methods within few time or may be in days you will able to extract it. 😉 I recently done with /etc/passwd it was quite fun still exploring to demonstrate more impact. 🤞
165
cryptoshant🇮🇳 retweeted
Nicolas Krassas (@Dinosn) profile picture
Nicolas Krassas
@DinosnSep 30
From AI Agents to RCE - Building a Vulnerability Research Workflow blog.quarkslab.com/from-ai-a…
2
78
417
28,153
cryptoshant🇮🇳 retweeted
PWN AI (@pwn_ai) profile picture
PWN AI
@pwn_aiSep 28
How pwn agents escaped the hardest-known sandbox setup: Google’s KVM (kvmCTF). pwn.ai/blog/kvmescape To celebrate 10K followers 🥳, we’re launching Stories from Inside the Sandbox, our new sandbox escape series.
Inside the Sandbox: How pwn Escaped Google kvmCTF (Before the Watershed)

Inside the Sandbox: How pwn Escaped Google kvmCTF (Before the Watershed)

Before sandbox escapes became one of AI security’s loudest conversations, pwn spent weeks inside nested KVM, built a 14,338-line exploit harness, and made Google’s live kvmCTF host return the flag....

pwn.ai
7
92
9
437
323,510
cryptoshant🇮🇳 retweeted
zonduu (@zonduu1) profile picture
zonduu
@zonduu1Sep 28
How I got RCE and full cloud takeover on Meta at their in-person event in Taiwan zonduu.me/posts/meta-graphra…
Root RCE and full cloud takeover on a Meta service

Root RCE and full cloud takeover on a Meta service

A hardcoded key plus two path traversals plus an unsafe pickle load, chained into root RCE and a full cloud compromise on a Meta service.

zonduu.me
21
103
9
638
67,226
cryptoshant🇮🇳 retweeted
Raunak Gupta (@OreoB1scuit) profile picture
Raunak Gupta@OreoB1scuitSep 26
Built techdetect CLI that headlessly renders pages, fingerprints tech stack (CMS, JS, analytics, CDN) as text/JSONL. Bulk-ready for 100+ subdomains, scriptable for agents. github.com/Raunaksplanet/tec… #BugBounty #Recon
Image from Raunak Gupta (@OreoB1scuit)
3
17
863
cryptoshant🇮🇳 retweeted
Swissky (@pentest_swissky) profile picture
Swissky@pentest_swisskySep 15
SQL Injection - Bypassing Baffin Bay WAF to Exploit PostgreSQL ORDER BY Injection - @p3n7a90n p3n7a90n.github.io/blogs/sql…
1
13
102
6,286
📢📢📢 Attention bug hunters! Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage? If yes, check out his blog post 👇 bughunters.google.com/blog/b…
Blog: Breaking into Google's GFile for $100k

Blog: Breaking into Google's GFile for $100k

This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.

bughunters.google.com
8
84
4
551
47,909
cryptoshant🇮🇳 retweeted
zhiniang peng (@edwardzpeng) profile picture
zhiniang peng@edwardzpengSep 14
Sharing my for keynote talk for Offbyone security conference #OB12026 : <A year of hacking with LLMs> sites.google.com/site/zhinia…

A Year of Hacking with LLMs

This blog is a summary of my talk at the Offbyone 2026 cybersecurity conference. It records some of my thoughts as a cybersecurity researcher after spending a year using LLMs for research. Slides:...

sites.google.com
5
146
6
570
43,401
cryptoshant🇮🇳 retweeted
/r/netsec (@_r_netsec) profile picture
/r/netsec@_r_netsecSep 13
Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 slcyber.io/research-center/e…

Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25

Adam Kues used a $200 GPT5.6 Sol Ultra subscription to discover a pre-authentication SQL injection and full RCE exploit chain in WordPress Core – a chain that chains a batch API desync, cache...

slcyber.io
3
13
1
109
13,402
cryptoshant🇮🇳 retweeted
Swissky (@pentest_swissky) profile picture
Swissky@pentest_swisskySep 12
$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain - @whoareme33 whoareme.com/blog/cspt-accou…
$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain

$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain

A client-side path traversal in the front-end's URL builder turned into arbitrary PUT/DELETE on the API, then chained with an inherited-property lookup bug to bypass 2FA

whoareme.com
3
45
1
176
8,034
Load more