k0x
@k0x_offsec
Followers
321
Following
154
Media
7
Statuses
75
RT @MrTuxracer: As promised! Here's a root/SYSTEM-level RCE (aka CVE-2025-47812) affecting Wing FTP Server in versions before 7.4.4. Enjoy….
0
12
0
RT @sw33tLie: I've recently put more work into my ffuf fork, uff, and I think every ffuf user should at least give it a try - and maybe eve….
0
77
0
RT @VakninHai: CONTEXT-only injection. No VirtualAllocEx. No WriteProcessMemory. We show how pure register-/stack manipulation can:.Load a….
0
67
0
Had to focus on my main biz this month, so no bug bounty grinding. 😥. But past-me came through — got rewarded for a few older reports and even unlocked a Hacker Achievement from @Hacker0x01 for a vuln in @ASWatsonGroup! 🔥. #TogetherWeHitHarder
0
0
1
RT @RedByte1337: 📧 GraphSpy 1.5.0 is out now and brings a brand new Outlook Graph module!. ✅Read emails in any folder.✅Send HTML-formatted….
0
24
0
Yay! Just scored a $5,000 bounty on @Hacker0x01! 🎉💰 #TogetherWeHitHarder. Seems unreal, but. another one, this time on a different app! 😆 This one was a bit trickier—a bypass of OTP leading to full account takeover. The flaw? In summary, the OTP could.
2
5
149
Yay! Just scored a $5,000 bounty on @Hacker0x01! 💰🔥 #TogetherWeHitHarder. The bug? A mobile quiz app that awarded points when requests were sent in the right order with the correct answers. Once completed, the quiz disappeared from the UI—but the server.
8
14
224
RT @orangecyberch: 💻🛡️In this blog post, Clément Labro explains how he developed a tool that lets you run Powershell without the various sy….
0
49
0
Yay, I was awarded a $1,000 bounty on @Hacker0x01! #TogetherWeHitHarder. Multiple Stored XSS vulnerabilities, exploitable in three different ways—plus one triggered via a PDF. 🔥.
2
2
86
Stumbled upon a self-triggering XSS today - looks like someone tried patching it before (rediscovery?). Observation: When finding these, sometimes just opening a support ticket for “account review” lets the payload execute by someone else…
0
0
3
Yay, I was awarded a $3,000 bounty on @Hacker0x01! #TogetherWeHitHarder . The vulnerability I discovered was a critical Remote Code Execution (RCE) that leads access to Domain Admin access in a billion-dollar revenue company. While the bounty is.
2
5
96
RT @rootedcon: That's right, the hacker night is back for another year! 🔥. As every year, the outstanding HackerNight will take place 🙌 A n….
0
9
0
RT @RedByte1337: GraphSpy just hit 600 stars on GitHub after releasing version 1.4!✨. This version introduces the new Entra ID module, bett….
0
24
0
During the weeks I won't be publishing, I will improve my articles to make them more readable!.
0
0
2