
hexkaster retweeted
Ended up awake for the whole night banging my head against LLMs trying to make a PoC for the PHP bug that's getting published today and managed to get something working!
Pretty interesting chain. The exploit I came up with has a prereq for leaking addresses (its in php.ini, wont add details for now just in case) but i think there might be a better leak oracle that I (ermm.. gpt-5.6-sol) couldn't find.
Seems like all public PoCs are mostly (unfiltered, lol) AI slop so far..
MEU PRIMEIRO BOUNTY FOI NO TWITTER E ME PAGOU $5000 NA @Hacker0x01!
hackerone.com/p1ra
ATUALMENTE LIDERO O RANKING DO X EM 2026!!
NOIS EH A TROPA DO TREM BALA PORRAAAAAAAA 🚄🚄🚄🚄🚄
SQLI? Não rico.
XSS? Pobre.
SSTI? Rico {{7*7}}.
Race Condition? Rico. Muito rico.
CSRF? Pobre. Mas muito, muito pobre.
Open Redirect? Hahahaha NÃO.
RCE? No mínimo 10 gerações de riqueza.
IDOR? Quer ser rico, mas não.
Business Logic? Rico. Rico de verdade.
hexkaster retweeted
❗️Pryx just replied with the cheapest MacBook, a cheap Taurus gun and about 80 USD worth of Kazakhstani tenge.
❗️Meet Hellcat ransomware group operator 'Pryx' — responsible for high-profile hacks like Jaguar Land Rover, Telefonica, Schneider Electric and many more.
He started doing cybercrime as a kid.
He got 4 people killed and 27 injured after starting a fire by hacking into the SCADA network of Telecom Egypt.
An OSINT researcher just revealed who he is and how he tracked him down.








































