Radman @radsec01

Security enthusiast Joined February 2023

Tweets

103
Followers

1K
Following

585
Likes

730

watchTowr @watchtowrcyber

4 weeks ago

What do we even say at this point? CVE-2026-8451, a zero-day Memory Overread that watchTowr Labs identified in Citrix NetScaler appliances in March, has just been publicly disclosed with patches. We're not done yet... speak soon... ;-) labs.watchtowr.com/citrixbleed-to…

6 54 119 11K 30

View Details

Radman @radsec01

a month ago

New subdomain went live Yii2 debug mode enabled → Full database credentials leaked in stack trace Just 3 hours later → Access Forbidden Continuous monitoring isn’t optional Note: This subdomain was only discoverable via DNS brute-force

0 0 9 378 3

View Details

skull @brutecat

2 months ago

Hacking Google with A.I. for $500,000 brutecat.com/r/hacking-goog…

63 531 3K 356K 3K

View Details

Radman @radsec01

2 months ago

@MrMSA16 Adapt to change or be shaped by it

0 0 3 350 0

View Details

Radman @radsec01

3 months ago

@0xHo3ein0xploit @voorivex Congrats bro🔥

1 0 1 110 0

View Details

Radman @radsec01

3 months ago

@patterniha @vahidfarid @iSegar0 @markpash @mahsanet @ircfspace @amin_o__o دمت گرم واقعا خیلی کار خفنی انجام دادی

0 0 0 316 0

View Details

Radman @radsec01

4 months ago

@jorjandii تاحالا ندیده بودم که آخوند OSINT سوپر سنگین انجام بده که اینم دیدم از عجایب آخوند هر چی بگم کم گفتم

0 0 2 254 0

View Details

Yasho @YShahinzadeh

5 months ago

It's time for sharing, this is not a simple write-up, we are sharing our methodology and reasoning, detailing how we approached and hunted the flaw, I hope you like it :] blog.voorivex.team/uxss-on-samsun…

Omid Rezaei @omidxrz

5 months ago

We got permission from the Samsung Security team to disclose this uXSS that we found in Samsung Browser, it was assigned a CVE (CVE-2025-58485) and patched. Here is the PoC, expect the write-up in the next upcoming days.

15 14 241 38K 44

12 55 335 26K 246

View Details

Radman @radsec01

11 months ago

@zseano sorry for your loss🖤

0 0 2 103 0

View Details

Radman @radsec01

12 months ago

Yay, i was rewarded $1500 Bug: Stored XSS via an SVG file led to full account data exposure Tip: Always try to exploit XSS and don’t just report it with a simple alert

7 11 203 11K 63

View Details

Radman @radsec01

a year ago

@voorivex 🔥🔥🔥

0 0 1 157 0

View Details

Radman @radsec01

a year ago

@Fara_dst @voorivex Congrats🍾

1 0 2 152 0

View Details

Radman @radsec01

a year ago

@cyber_advising 🧐

1 0 13 4K 1

View Details

Radman @radsec01

a year ago

I just found a WAF bypass for Akamai and Cloudflare: <address onscrollsnapchange=window['ev'+'a'+(['l','b','c'][0])](window['a'+'to'+(['b','c','d'][0])]('YWxlcnQob3JpZ2luKQ==')); style=overflow-y:hidden;scroll-snap-type:x><div style=scroll-snap-align:center>1337</div></address>

14 189 1K 82K 1K

View Details

Radman @radsec01

a year ago

@mosyo_hunt نه اینطوری نبود چون که تونستم وارد حساب یکی دیگه بشم. Zero click ATO

1 0 0 135 0

View Details

Radman @radsec01

a year ago

@iSegar0 خوشتیپ😁😂

0 0 2 254 0

View Details

Radman @radsec01

a year ago

@NahamSec @YShahinzadeh @AmirMSafari 🔥🔥

0 0 1 130 0

View Details

Radman @radsec01

a year ago

IDOR + Auth Bypass = Admin takeover😎😈

1 7 122 5K 57

View Details

Radman @radsec01

a year ago

rXSS via url parameter 1. I discovered reflection in a URL parameter 2. All inputs I submitted were being HTML encoded 3. I submitted the following input: https://sss'"<>, and in the response, my payload was displayed without proper sanitization. #xss #BugBounty #infosec