hexa@Labost909

security researcher 🪩 18 yo hacker

discord.gg/2qvTGbkCRa
Joined February 2025
20 Photos and videos
Pinned Tweet
hexa@Labost909
Oct 3
If hackerone can contain a critical Idor bug like this who I'm I to tell anyone websites, software are secure lol 👀👀
2
4
197
12,271
when my agents has gone crazy @rez0__ blog:josephthacker.com/hacking/20… is always the perfect motivation to bring my mindset and to remind me of any mistake im doing. love you bro😀

The Bug Bounty Singularity: Our Hackbot

This past December, it became feasible for any skilled hacker to scale up a hacking agent, spending hundreds in token cost to find thousands in bounties. I call this the “Bug Bounty Singularity”....

josephthacker.com
1
17
104
5,548
another rce on a major app most of us are using discord
Karim
@kymu___
Oct 16
RCE in Discord 👀 bugcrowd.com/disclosures/638…
3
235
I Was just scrolling here and there on a major movie website to download something and I found this
1
5
688
Frr @Bugcrowd is broken this traige is shit
1
76
This is the report by the way hackerone.com/reports/386264…

HackerOne disclosed on HackerOne: IDOR allows user to access report...

**Summary:** An information disclosure vulnerability on the `/reports/{id}/reference.json` endpoint allowed VDP accounts created via `hackerone.com/vdp-sign-up` to access certain private report...

hackerone.com
9
62
6,246
Hmm 🤔😏 no dup,n/a and oos lmao 🤣
Pyro
@0x3b33
Apr 5
Lazarus group has been paid ~1.6B in bug bounties last year
1
220
hexa retweeted
Pyro
@0x3b33
Apr 5
Lazarus group has been paid ~1.6B in bug bounties last year
79
159
2,638
328,103
crazy exploits 🔥🔥
TrendAI Zero Day Initiative
@thezdi
May 15
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
133
hexa retweeted
Govind Jha@cyberx00t
Sep 21
Replying to @BugcrowdSupport
@BugcrowdSupport I’m seeking an update regarding 3 vulnerability reports that have been pending for over a year My support ticket has also been open for several months and was previously escalated to the CEM/Program Owner,but there has still been no substantive update @Bugcrowd
9
2
53
3,977
My situation 😂 but I'm more using Kali
Ahmedkhan
@Ahmed___khaan
Sep 16
intel CORE i3 with kali linux installed
1
1
114
Damnit 😂 I gotta find a program to hack on
Z A D D Y
@Zaddyzaddy
Sep 16
Inspired by @mdp_sec’s win, decided to throw some assets from the same program into @BugBunny_ai 👀
1
125
Oops it's high time to grind and build rep on bug crowd Company pentesting left for now 🙂‍↔️
1
80
Note 🖊️
Shad0w@Itx_Shad0w
6 Mar 2025
“Every time you quit, you’re choosing failure over progress. The world doesn’t care about your excuses.”
1
3
114
hexa retweeted
Mohsin Khan@tabaahi_
Sep 12
Thank you @Bugcrowd @inspectiv @Hacker0x01 ❤️‍🔥 This video is for those who think their life can’t change from where they are.
196
141
2,866
126,582
Got my first bounty after long time learning,hard work it was pretty fun honestly and thanks to you guys @hunt_n27493 @Mhiztabjay and to the legend bugmithalchemist 🔥🫡
1
6
262
For the rest of the moth I would be studying every bypass, techniques and methologies on on ssrf and file upload ssrf:medium.com/@mazene432/server… Fille upload:hackviser.com/tactics/pentes… threatmon.io/what-is-file-up…

Server-Side Request Forgery (SSRF) Explained: From Basics to Advanced Attacks

Introduction

medium.com
1
159
FREE $200 IN AI CREDITS Agent Router is giving new users $200 in free API credits. Current models to try out: gpt-5.6-sol, claude-opus-5, claude-opus-4-8. Eligibility: >Your GitHub account must have been created before 2025 How to claim it: Visit agentrouter.org/register?aff… -Sign up with GitHub -Don’t use the Gmail or username sign-in options That’s all. I tested the credits with my Hermes agent and successfully ran GPT-5.6 Sol. Don’t miss this opportunity if you qualify.
328
100
1,099
409,636
Love this guy website #bugbounty
مچهول الهويه@adce626
May 17
Just launched VULNEX – my new website!A clean library with ready payloads, vulnerability testing techniques, useful commands, Google Dorks, and resources for Bug Bounty & Cybersecurity.Everything neatly organized for easy use.Check it out: vulnex.vercel.app/Hope #BugBounty
120
Just launched VULNEX – my new website!A clean library with ready payloads, vulnerability testing techniques, useful commands, Google Dorks, and resources for Bug Bounty & Cybersecurity.Everything neatly organized for easy use.Check it out: vulnex.vercel.app/Hope #BugBounty
2
21
91
4,102
Load more