CX SENJU @Inumarqy
17 |Security researcher @intigriti. |@g2rainbow6 @anyoneslegend @teamvitality @shopifyrebels Joined October 2024-
Tweets3K
-
Followers23
-
Following469
-
Likes15K
2000$🫀 Business Logic bug I feel like I want to do more
This new HTML feature just shipped in Chrome 150, it's gonna be veeeeery interesting 👀 github.com/WICG/declarati…
A recent bug bounty experience was a good reminder that initial decisions aren't always final. One of my reports spent five months going from Informational to P1. Then, just three days ago, something even more unexpected happened: Google reopened four of my reports that had previously been closed as duplicates and accepted them. Another report was also moved from Duplicate back to Assigned for re-evaluation. If you genuinely believe in your technical analysis, don't be afraid to respectfully challenge a decision. Sometimes persistence makes all the difference. #bugbounty #appsec #googlevrp #bugcrowd
Ever since I started out in bug bounty hunting with zero experience in auditing or penetration testing a few years ago, I never imagined I'd reach this milestone—I'm now in the global top 100 on @Hacker0x01! Thanks to HackerOne for giving me the opportunity to achieve my dreams❤️
It's friday so you know what that means, time for a critical vulnerability! Okay... we announced it 4 weeks ago already to be fair, but now we can talk about the technical parts 🙌 Read how authentication could be bypassed on every online phpBB instance: aikido.dev/blog/authentic…
From Default IIS Page to Critical SQL Injection medium.com/@mugh33ra/from… Join team 👉t.me/luckyhacker43
Participated in my first Live Hacking event on @yeswehack - GovTech Made over $6800 in bounties. Not bad bad for a first try :) Thank you @yeswehack
Advanced Bug Bounty Tip #8 When testing authenticated features, don't just compare User A vs User B. Also compare: - New account vs old account - Verified vs unverified account - Free vs premium account - Owner vs manager vs member - Invited user vs self-registered user - Suspended vs active account Many business logic vulnerabilities exist because developers validate who you are but forget what state your account is in. State transitions are where high-impact bugs often hide. #BugBounty #AppSec #CyberSecurity #BusinessLogic #EthicalHacking
In June, I ranked #1 on @Bugcrowd leaderboard. I also crossed 299 P1s in total . Dropped multiple P1-P3 this month alone > mostly auth bypasses + bac issues bugcrowd.com/leaderboard/p1… Thanks to bugcrowd and triage team ❤️
The hackbot @xssdoctor and I made has found 126 reportable bugs this year 😊 88 were High or Critical!! :) Check it out: josephthacker.com/hacking/2026/0…
Yay ! I was awarded $4000 from @Hacker0x01 Bug-type:- stored XSS No AI , No recon— just fully manual work.
I reported once again the same issue today, within 4hrs the report got triaged🙂 @Hacker0x01 #bugbounty #bugbountytips
Reported an unauthenticated admin account creation on one of the AT&T subdomain & they closed the report as duplicate of an informative report. Look at the duplicate report title 😅& the subdomain also different, still goes to duplicate. Hard side of BB #bugbounty #bugbountytips
how do you read android contacts without the contacts permission? you don't. you ask an app that already has it, and let it hand you the bytes. google messages did exactly that. writeup 👇
A fun SQL injection in 2026 with a bit of help from Claude! It is pretty crazy that simple unauthenticated vulnerabilities can still exist in core production systems like this. Technical details: ian.sh/fgt
Security researcher @iangcarroll found Claude could independently code an exploit to hack into Front Gate Tickets, the ticketing platform for almost every major US music festival from Lollapalooza to Bonnaroo. He could then issue any tickets at will. wired.com/story/claude-h…
I haven’t tested this, but this looks like the best implementation I’ve seen. Where are you at @busf4ctor
The best hackers I know aren't smarter than me. They've just read more than me. Somewhere in their memory is the one obscure writeup that turns a dead end into a finding. Preview is that memory, on tap. For you, and for your agent. -> rag.preview.is
1/ We found a new way to attack GitHub Actions: a TOCTOU inside workflows using find-comment. Cool thing to spray in Bug Bounty btw :P The cool part ? It was found 100% autonomously by Depi. No human in the loop. Here's the whole chain. 🧵
The Urge to Learn Everything.
A Journey of Limited Path Traversal To RCE With $40,000 Bounty! medium.com/@HX007/a-journ… Join team 👉t.me/luckyhacker43
Last one in this series! You may not find the exact same patterns in your targets, but these challenges probably give you a better insight of how to threat-model OAuth flows and break them. So happy hunting. Solo Leveling: Referer Gate: pwnbox.io/challenges/sol…
Solo Leveling 3 is ready! I didn't get a bounty for this one, but it helped me gain better insight when looking at OAuth flows. Maybe the app is secure on its own, but what about third-party JS or iframes that load on the app? ChallengeLink: pwnbox.io/challenges/sol… Good luck
新月 @fubukiyokiyoki
3K Followers 5K Following a.k.a singetu0096 Network | OffensiveSecurity | CTF | BugBounty 白上フブキと蒼宮よづりと羽澄さひろが好き CTF team:@sknb_ctf , @Water_Paddler icon:@hasikureteruna Thanks!
zoeycuthbert07 @zoeycuthbe80811
88 Followers 2K Following 18 🕊️ calm soul, chaotic rounds find me on snap 👻
Albax @ItzAlbax
119 Followers 2K Following
Joshua Fernandes @JoshuaF40392126
0 Followers 37 Following
Tim Desilly @desilly17201
0 Followers 44 Following
Bill Billiams @BillBilliamsR6
28 Followers 388 Following This is just a test. I’m awful at Siege. 🇺🇸🪻#R6
Bhavish Choudhary @Chaos_bhavish
4 Followers 122 Following Er🎓| Becoming a Hacker | Accomplishing Linux privilege escalation | It's exited time in the world right now | Understanding Philosophy | Learning Human anatomy
PerfecT Base 퍼펙�... @PerfecTBase_
286 Followers 380 Following Dedicated to PerfecT || minor || FREE PALESTINE 🇵🇸
Minman @Minman10124074
2 Followers 240 Following
ًً @idcfoh
39 Followers 212 Following chase everything you want, except love and death, they’ll find you when it’s time. | 25
SHFT NhyxD 🦇 @SHFT_nhyxd
105 Followers 478 Following 🇫🇷 | 24 yo | Esport Enjoyer | #JoinTheShift | @ShiftersGG Ultra | 💜 @AlpineGuards Member💜 |
?Purplxxd? @Purplxxd
203 Followers 804 Following | 21 | @AlpineGuards supporter #JoinTheShift 💜RL⭐️⭐️/LEC/R6💜 “unofficial official American hype man🫡”
Bella Dylan {} ベラ... @Dylan6Bella
1K Followers 6K Following 🦋- Digital Artist 🦋- ENG | 日本語 -very little- 🦋- 😈 🦋 🦋- She/Her 🦋- Gamer
Topher07. (Player?/St... @_topherRL
624 Followers 2K Following 18 🇺🇸 | 2k+ | B | Top 64 RLCS | Coaching: https://t.co/5k531uOz2u
Mustafa Adam Gamarald... @wadgamaraldeen
4K Followers 955 Following (Work Hard 💪 = Dream Big💡) WEB Applications Penetration Tester 💻☠️🖤 Junior PHP Developer{}
Missing Child Kenya F... @missingchild_ke
12K Followers 9K Following Search for MISSING CHILDREN ONLY (under 18yrs) •TOLL FREE 0800 22 33 44 • WHATSAPP on 0737 966 370 Support Us https://t.co/dvXUDFMHOF
kernelstub (Prepakis ... @kernelstub
1K Followers 29 Following founder @ skuntir; offensive security #Pwn2Own
ControlZ @ControlZ_1337
2K Followers 255 Following @immunefi Elite All Star | Security Researcher @_blockian | #21 all-time whitehat @immunefi | #8 all-time whitehat @hackenproof
Polymarket Counter-St... @PolymarketCS2
17K Followers 326 Following No limits. No house. Instant cashouts. Real-time odds & forecasts for every CS2 match. Powered by @Polymarket.
LainKusanagi @unknownseeker99
741 Followers 182 Following Systems, people and ideas, all of them have hidden vulnerabilities | CRTO | CRTP | OSCP | PNPT
IlyaO @FLCm0NESY
371K Followers 746 Following Professional CS2 player for @FalconsEsport https://t.co/NQDx6L44gz https://t.co/resY2JzpfT
ArtSec @_ArtSec_
1K Followers 175 Following Bug Bounty Hunter ⚔️ https://t.co/36GnguhsmF If you want to get into Client-Side Hacking : https://t.co/BQH8m2htI9
Mikael @1leakim
135 Followers 432 Following Your future cybersecurity colleague. Learning through bug bounties since April 2024. https://t.co/K0kU811O5f https://t.co/PV5TMs0h2F
Google VRP (Google Bu... @GoogleVRP
42K Followers 0 Following We ❤️ 🐜🐞🦗🦟🦋. {echo,{{{Google,Chrome,Android,Abuse,Mobile,OSS,Cloud}Vulnerability,Patch}Reward,VulnerabilityResearchGrants}Program}
AmirMohammad Safari @AmirMSafari
8K Followers 410 Following Part-time bug hunter, full-time thinker of thoughts nobody asked for
Karim 🇸🇾 @mountainaddict0
1K Followers 394 Following 22 I Security researcher at @Hacker0x01 & @Bugcrowd I Politics & Pentesting
BountyLens @BountyLens
121 Followers 2 Following BB intelligence platform. Real-time scope tracking, smart scoring & alerts across HackerOne, BC, Intigriti & YesWeHack. Hunt smarter, not harder. https://t.co/0zIWdjaOqU
PentesterLand @PentesterLandEn
4K Followers 81 Following WNMC Penetration Tester RedTeamer BugHunter
Тsфdiиg @tsoding
115K Followers 426 Following Recreational Programming - https://t.co/0cNzC7z24Y - https://t.co/EilSXwJsXC - https://t.co/cPjxUvz266 ⠀⢀⣰⣾⡿⣶⣿⠿⣶ ⢠⣼⣿⣿⣷⣿⣿⣶⠉ ⢸⣿⣿⣿⣿⣿⣿⠀⠀
crazyman @crazyman823886
1K Followers 1K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE:CVE-2022-30190 pre account @CrazymanArmy
TruthLover @0xtruthlover
734 Followers 2K Following In God we trust, all others must verify their code.
Awesome Google VRP Wr... @gvrp_writeups
3K Followers 0 Following Automatically tweeting new writeups from the GitHub repository "awesome-google-vrp-writeups".
Praetorian @praetorianlabs
9K Followers 1K Following At Praetorian, our mission is clear: prevent breaches before they happen by emulating real-world attackers. That’s the power of #ContinuousOffensiveSecurity.
Rami Lueso @ramiluesofc
16K Followers 968 Following 🇦🇷 | All the information to follow the competitive EA FC scene is HERE 🫡 | Caster, Analyst & Competitive Content Creator
nicolas99fc @Nicolas99fc
61K Followers 954 Following Jugador Profesional de EA FC de @NIP / Contacto: [email protected] (Manager)
Team Falcons @TeamFalconsGG
698K Followers 204 Following Esports World Cup Champions - أبطال كأس العالم | Esports Updates @FalconsEsport | Home to @Riyadh_Falcons | Sponsored by @NEO_SA | Falcons Store @FLCNSTORE
新月 @fubukiyokiyoki
3K Followers 5K Following a.k.a singetu0096 Network | OffensiveSecurity | CTF | BugBounty 白上フブキと蒼宮よづりと羽澄さひろが好き CTF team:@sknb_ctf , @Water_Paddler icon:@hasikureteruna Thanks!
Laluka@OffenSkill @TheLaluka
6K Followers 1K Following Sharing is Caring, Hacker, Eternel Learner, Cat! =^~^=
SuperDiceCodeLovers @SuperDiceCode
117 Followers 4 Following CTF Team - @SuperGuesser + @DiceGangCTF + @CodeRed_Korea + @SquidProxyLover
Lukasz @Lukaszyr
5K Followers 2K Following Social Media/Marketing: @FIFAe, @EpicGames // Former: @TeamLiquid, @RuleOneGG, @RLEsports, @UpwardsAgency, @LiquipediaRL, @BLASTtv || #CFC STH || #HeatNation
Sam Curry @samwcyo
101K Followers 1K Following
Epieos @epieos
7K Followers 0 Following In just 3️⃣ seconds, uncover the identity and activity behind an email address or phone number. Premium OSINT solution, exclusive intelligence.
Ginger T @cqcore
9K Followers 951 Following OSINT | OPSEC | Obfuscation | Privacy | Digital Exposure Risks, Enthusiast & Blogger. Creator of https://t.co/0ZCsIFgs4j (Opinions & tweets are my own)
Shopify Rebellion @ShopifyRebels
70K Followers 316 Following NA esports org competing globally in: #LCS, SC2, Rocket League, VALORANT, Halo, SF6, Smash, R6, Apex • #ArmTheRebels 💚🚀 • 💙 @SRLOL • 🖤 @SRVAL
Joseph Thacker @rez0__
73K Followers 1K Following christian. father. hacker. advisor: @ethiack & @caidoIO & @StarstrikeAI products: https://t.co/EVhQl8HTlp podcaster: https://t.co/1aFavJN2h8 writer: https://t.co/JBPT1CJWJH
Thach Nguyen Hoang �... @hi_im_d4rkn3ss
4K Followers 350 Following Security Researcher @starlabs_sg. Pwn2Own Mobile 2020, 2021, 2022, 2023. Pwn2Own Vancouver 2022, 2023, 2024, 2025.
Maltego @MaltegoHQ
14K Followers 663 Following This is the official Twitter account of Maltego - The world’s most used all-in-one intelligence platform for complex cyber investigations.
OSINT Combine @osintcombine
24K Followers 651 Following We are leaders in Open Source Intelligence training and services in Australia. #OSINT
Aware Online @aware_online
12K Followers 709 Following Open Source Intelligence (OSINT) Training Center ★ Located in The Netherlands ★ https://t.co/QLk5FICGU6 ★You might like
