rafa (@rafabyte_) header
rafa (@rafabyte_) profile picture

rafa

@rafabyte_

Security Researcher https://teapaw.org/t.co/1SOxGFQMNm

 BR
rafa.hashnode.dev/
Joined August 2023
  • Tweets46
  • Following136
  • Followers947
4Media
Photo by rafa (@rafabyte_)Photo by rafa (@rafabyte_)Photo by rafa (@rafabyte_)Photo by rafa (@rafabyte_)
Lesson from building a hackbot with @rafabyte_: Don’t use non-Daybreak models on Codex for security work. They won’t refuse you. They’ll quietly do something dumb, skip what you asked for, and never mention it.
Image from Vitor Falcão "busfactor" (@busf4ctor)
8
3
1
52
4,956
rafa retweeted
Jorian (@J0R1AN) profile picture
Jorian
@J0R1ANJul 3
This new HTML feature just shipped in Chrome 150, it's gonna be veeeeery interesting 👀 github.com/WICG/declarative-…
https://yeswehack.github.io/Dom-Explorer/shared?id=e7b1b80d-8bd8-4643-bab0-de6898d7b35b

ALT https://yeswehack.github.io/Dom-Explorer/shared?id=e7b1b80d-8bd8-4643-bab0-de6898d7b35b

5
27
1
135
16,408
We’re excited to announce the top 3 winners from H1-361 Bali 🌴🏆 Huge congrats to these incredible security researchers for an unforgettable live hacking event: 🥇 1st Place — @nahuelrm_ 🥈 2nd Place — @zere 🥉 3rd Place — @joaxcar Thanks to everyone who joined us in Bali and helped make this event a great week of collaboration and community. #TogetherWeHitHarder
6
13
2
157
18,568
Things you must read to slowly step up your client-side game AuxClickjacking by @rafabyte_: blog.bugport.net/auxclickjac…
AuxClickjacking

AuxClickjacking

In this small and fun research, I will show how I developed a Clickjacking technique that leaks iframe contents by prompting the user to perform a click…

blog.bugport.net
19
1
102
6,222
Amsterdam brought the 🔥! @salesforce + #H13120 = one incredible Live Hacking Event 🇳🇱 Security researchers tackled AI challenges head-on—finding vulnerabilities, sharing insights, and shaping the future of secure innovation. #HackForGood #AISecurity #TogetherWeHitHarder
Image from HackerOne (@Hacker0x01)
Image from HackerOne (@Hacker0x01)
Image from HackerOne (@Hacker0x01)
8
8
2
116
12,783
If you ever need help with a bug, you can always count on our community! 🫂
4
31
2,832
Unbelievable exploitation journey documented in a thread in the # critical-thinkers on the CTBB discord. Shout out to @rafabyte_ for finding the solution, and @TomAnthonySEO for doing WORK. Assists: @joaxcar, Balint, @J0R1AN, @kevin_mizu @7urb01, and yours truly, among others.
Image from Justin Gardner (@Rhynorater)
2
9
1
113
10,207
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2023! portswigger.net/research/top…
Top 10 web hacking techniques of 2023

Top 10 web hacking techniques of 2023

Welcome to the Top 10 Web Hacking Techniques of 2023, the 17th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year

portswigger.net
6
156
9
470
86,553
Articles worth reading discovered last week: 🗞 rafa.hashnode.dev/exploiting… 🗞 labs.watchtowr.com/cve-2023-… 🗞 blog.isosceles.com/exploit-e… 🗞 pathonproject.com/zb/?a291b7… #PentesterLabWeekly
7
21
7,308
#100DaysOfHacking Day 16: - Still bug hunting :D (Currently trying to bypass WAF for XSS) - Found a cool research about exploiting HTTP Parsers Inconsistencies rafa.hashnode.dev/exploiting…
1
1
4
1,352
Exploiting HTTP Parsers Inconsistencies by Rafael da Costa Santos rafa.hashnode.dev/exploiting… #BBRENewsletter59 Subscribe to get the next issue: bbre.dev/nl
Image from Bug Bounty Reports Explained (@gregxsunday)
1
22
94
10,200
Check out the latest issue of BBRE Newsletter🔥 bbre.dev/59
Image from Bug Bounty Reports Explained (@gregxsunday)
Image from Bug Bounty Reports Explained (@gregxsunday)
Image from Bug Bounty Reports Explained (@gregxsunday)
Image from Bug Bounty Reports Explained (@gregxsunday)
1
5
15
4,309
Load more