Hossam A. Mesbah 🇵🇸 (@m359ah) profile picture

Sr. Cybersecurity consultant @Tawuniya| Bug bounty hunter | https://teapaw.org/t.co/tuKTyrFrWo | https://teapaw.org/t.co/PGSwsav7HG | https://teapaw.org/t.co/Z6BCawM3XF

Joined December 2019
Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)Photo by Hossam A. Mesbah 🇵🇸 (@m359ah)
خخخخخخخ
朝鲜王牌黑客朴镇赫,就很符合命理里一种比较典型的财象:财来得快,但自己控制不了,也未必享受得到。 他的技术能力再强,参与的黑客行动再成功,所产生的财富也不一定属于他个人。 无论是索尼网络攻击、WannaCry 勒索病毒,还是孟加拉央行盗窃案,公开指控都将相关行动与朝鲜政权获取资金、规避国际制裁,以及核导项目的资金需求联系起来。 说白了,他更像是一个替系统创造财富的工具,而不是一个能够自由支配财富的人。 即使被外界视为顶尖黑客,他个人依然受到国家体制、国际制裁、通缉和组织任务的多重限制,甚至连自由流动都很困难。 从八字的通俗语言来讲,这就很像财星生官杀、官杀攻身,印可以是朝鲜政府给他当的保护伞,朝鲜这个印不可能护他一辈子。 #币安被盗
2
740
Hossam A. Mesbah 🇵🇸 retweeted
my turn , here is my poc for CVE-2026-109618 / CVE-2026-109619 ,exact build PHP 8.5.11 / Apache mod_php . Includes fresh-leak validation, evidence handling and an execution diagram. Exact-build only not a universal PHP exploit. For authorized lab research. github.com/jayy-hub1490/php8… #AppSec #PHPの脆弱性だと思うもの #infosec #PHP
4
14
1
81
6,344
طب انا كنت راجل غلبان شقيان وصورة بال AI - الدور والباقي ع الراجل الكويس اللي قاعد وسط رجالة بيشرب ماكس كولا @theblack1eagle
عمر الشغل ما كان عيب
3
1
16
2,719
These guys are out here solving the CWEE exam in 2–3 HOURS?!! BRO, HOW CAN YOU BE THIS DUMB?! At least when solve it using leaked report, have the common sense to let some time pass before submitting it 😂😂😂 There is no leaks at the interview dude 😉
1
27
1,668
Hossam A. Mesbah 🇵🇸 retweeted
CVE-2026-115560: PHP session.upload_progress (on by default) + serialize_handler swapped at runtime (php_serialize -> php via ini_set before session_start) = cross format decode -> object injection -> __destruct in session_start(). No patch yet. Fix: upload_progress.enabled=0 #CVEALERT #PHP2Shell
2
5
1
11
2,734
Hossam A. Mesbah 🇵🇸 retweeted
It was promised to Wiz 3000 years ago
i am confused. is it wiz, or calif who found the bug?
8
23
4
274
11,897
Hossam A. Mesbah 🇵🇸 retweeted
php2shell Tomorrow is a helluva day.
275
1,829
687
16,173
3,716,988
انا مش قصدي حاجة، بس كان في حد بيتكلم ان صفحات زي @SpeakUp_00 والصفحات والحجات ال زيها بردو بيتكلمو في القضايا الجندرية و و و ف هل ال بيحصل في اذربيجان في المدارس حاليا دة تبعهم ولا ايه الدنيا
5
6
27
4,727
It’s my 26 birthday 🎉 Alhamdulillah for everything, This year was contains a lot of great things ❤️, and lessons as well 😂 I know some people might be surprised to hear that I’m only 26, but life has its own way of making you grow up faster than expected, Someone literally guessed I was 38 just last week 😂💔, anyway thanks to Traumatic experiences 😂😂 الحمد لله علي كل النعم ❤️❤️
15
116
2,767
The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII). While the point of breach is still undetermined—whether a third-party or the FBI’s enterprise—we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk.
14
1,258
Hossam A. Mesbah 🇵🇸 retweeted
الاسوأ من الاكتئاب انك مش قادر تعمل حاجة تخرجك من اللى انت فيه
3
238
16
749
20,156
انا اتهديت الفترة دي وربنا
4
4
2
16
2,041
Recommendation دي واحد يدخلك الانترفيو مش اكتر، ف انت لو مش fit مش هتشتغل بردو ف اتمني تعرفي الفرق بين الواسطة وال recommendation
ده التبرير اللي الناس اللي اشتغلوا بريكومينديشن بيقولوه لنفسهم عشان ميتضايقوش لما حد يقول على الريكومينديشن واسطه مش عارفة بنضحك على مين
3
21
2,537
CTF بتاع FDC دة انا مش مبسوط ب حاجة غير انهم منعو ال AI منو 😂😂
2
45
2,662
ميكس العبط مع المرض النفسي دة خلاني هقفل X خالص هو كمان
3
12
1,833
I was missing you b🍑
24
2,787
Hossam A. Mesbah 🇵🇸 retweeted
Story time...
they fired me for no reason, it was never abount bounties.
33
178
27
1,418
339,008
Hossam A. Mesbah 🇵🇸 retweeted
Trying the Hebrew appeal lifehack on my HackerOne account.
22
17
1
342
25,432
Hossam A. Mesbah 🇵🇸 retweeted
I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.
20,453
166,938
39,454
799,874
175,492,702