Devansh (⚡, 🥷)
@0xAsm0d3us
Followers
15K
Following
2K
Media
490
Statuses
1K
Pwn, Security Research & Maths ⚡ Views are personal
Joined December 2019
After about five years of sifting through and triaging thousands of vulnerability reports, I’ve got a pretty good sense of what makes a report stand out, and what makes it a slog to read. Lately, I’ve noticed more and more folks using AI to jazz up their reports with flowery,.
5
19
105
RT @nav1n0x: Simple LFI using my path traversal script on GitHub. Used @0xAsm0d3us’s ParamSpider to gather URLs, filtered for relevant para….
0
46
0
We're hiring in Pune for Product Security Analyst roles! . If you're passionate about ethical hacking, cybersecurity, tackling real-world challenges to enhance internet safety, or just want to help in making the internet a safer place for the world, we want to connect with you.
1
1
7
Interesting Read! . DevOps Tools Targeted for Cryptojacking: Wiz Threat Research identified a broad cryptojacking campaign targeting publicly accessible DevOps web servers including exposed Nomad, Consul, Docker and Gitea applications.
0
0
14
Some good news!! OpenID Connect (OIDC) Support for npm Registry is coming soon. Which means, the attack surface for supply chain attacks targeting npm will cut down to some extent. OIDC support will allow you to publish npm packages from your CI/CD workflows without managing
0
2
14
Good weekend read!. Localhost dangers: CORS and DNS rebinding.
0
15
51
Stealing HttpOnly cookies with the cookie sandwich technique - by PortSwigger's Research.
0
1
11
If you are someone who writes/manages GitHub actions. This piece of writing is a must-read. How to secure your GitHub Actions workflows with CodeQL:
0
2
14
One of the most fascinating vulnerabilities in tech history, a true relic of the past. In 2017, CloudFlare had a severe buffer overflow vulnerability, later termed as "Cloudbleed," which led to the exposure of sensitive customer data, including HTTP cookies, authentication
0
2
23
This is pretty neat phishing technique . Google Spoofed Via DKIM Replay Attack: A Technical Breakdown.
0
0
8
RT @xvonfers: (CVE-2025-0612)[385155406][$8000][compiler]OOB memory access is now open. Simplified repro:. https://t….
0
4
0
RT @flatt_sec_en: We have published a blog post by RyotaK @ryotkak !. It showcases techniques for achieving RCE by chaining multiple issues….
0
33
0
RT @ryotkak: SECCON CTF 13 Finalsで出題した「super-fastcgi」と「not-that-short」に関しての作問者Writeupを公開しました。.
0
17
0
Fun Fact: The term "pwn" was created accidentally by the misspelling of "own" due to the keyboard proximity of the "O" and "P" keys.
2
0
14
