Omar Kurt (@omarkurt) header
Omar Kurt (@omarkurt) profile picture

Omar Kurt

@omarkurt

[email protected]

 Diyarbakir, Turkey
rosecurify.com
Joined July 2008
  • Tweets337
  • Following1.5K
  • Followers1.1K
7Media
Photo by Omar Kurt (@omarkurt)Photo by Omar Kurt (@omarkurt)Photo by Omar Kurt (@omarkurt)Photo by Omar Kurt (@omarkurt)Photo by Omar Kurt (@omarkurt)Photo by Omar Kurt (@omarkurt)
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzNov 1
Seclog - #202 rosecurify.com/seclog-202/
Seclog - #202

Seclog - #202

Security research, vulnerability disclosures, and application security insights.

rosecurify.com
1
1
36
Ewê ji nû şîn bibin gul û kulîlken zozana Küçük bedenlerde, koca yükler… Mükemmel bir eser. 🥺🥺
1
4
64
2,444
Şop #HappyHackingSpace #Mesopotamia
3
4
222
Omar Kurt retweeted
Swissky (@pentest_swissky) profile picture
Swissky@pentest_swisskyOct 22
Image from Swissky (@pentest_swissky)
1
2
1
17
1,445
Omar Kurt retweeted
SinSinology (@SinSinology) profile picture
SinSinology
@SinSinologyOct 21
To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.
phpbleed

phpbleed

Welcome, Wiz. Beat you to the checkout.

phpbleed.com
51
263
29
1,926
174,537
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 19
Seclog - #200 rosecurify.com/seclog-200
Seclog - #200

Seclog - #200

Security research, vulnerability disclosures, and application security insights.

rosecurify.com
1
31
Omar Kurt retweeted
Matt Johansen (@mattjay) profile picture
Matt Johansen
@mattjayOct 17
🚨 Confirmed. OpenCode hacked. Keys stolen. Telling customers to revoke.
Image from Matt Johansen (@mattjay)
Matt Johansen (@mattjay) profile pictureMatt Johansen
@mattjayOct 17
Seems OpenCode customers getting notices of a breach. Got some DMs that people’s API keys are running up charges. Not seeing it on the news yet. Anyone else?
136
393
217
2,263
790,627
Omar Kurt retweeted
Calif (@calif_io) profile picture
Calif
@calif_ioOct 16
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
176
571
119
5,003
757,010
Ev ez im ❤️ @hackerkrd youtu.be/YJ1HuWMVJpU?si=9cht… via @YouTube
Ev ez im | Dogan Can Bakir

Ev ez im | Dogan Can Bakir

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
1
2
5
254
Bu ayki HHH bizde. 20 Ekim Salı, 17:30'dan itibaren HHS HQ'dayız. happyhacking.space/contact/ #HappyHackingSpace #Diyarbakir #HHH
Image from Happy Hacking Space (@happyhackings)
1
3
4
183
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 13
PIChef: prompt-injection workbench like CyberChef - 66 ops + 12 presets chain transforms, all local in browser - Stack FlipAttack, Task-in-Prompt, framing, QR/HTML carriers - Shareable recipe URLs keep payload/trigger fields out by Sentry blog.sentry.security/pichef-…
PIChef. A tool for Prompt Injection inspired by CyberChef

PIChef. A tool for Prompt Injection inspired by CyberChef

Manual prompt-injection payloads get fiddly quite quickly and require experimentation. PIChef gives that experimentation a workbench. Inspired by CyberChef, it lets you combine transformations into...

blog.sentry.security
1
1
58
Gave the CTF to @neo_ai_engineer with no extra prompt, just the instructions on the page. It solved it and wrote a writeup while I was busy. It acts like a curious kid who learns by trying things.
Image from Omar Kurt (@omarkurt)
Image from Omar Kurt (@omarkurt)
Critical Thinking - Bug Bounty Podcast (@ctbbpodcast) profile pictureCritical Thinking - Bug Bounty Podcast
@ctbbpodcastOct 7
Have you solved @Macabely97021's challenge yet? 👀 lab.ctbb.show/research/chall…
Image from Critical Thinking - Bug Bounty Podcast (@ctbbpodcast)
1
3
1
9
1,688
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 12
How I Found a $90,000 Remote Code Execution Vulnerability in Google by @soeckly simonkoeck.com/writeups/goog… #rce #googlevdp #bugbounty #bugbountytips
How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.

simonkoeck.com
1
47
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 12
Seclog - #199 rosecurify.com/seclog-199/
Seclog - #199

Seclog - #199

Security research, vulnerability disclosures, and application security insights.

rosecurify.com
1
15
Hacker'lar da esner. 🧘
3
5
135
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 8
A Single POST Freezes Any Next.js Server - by @soeckly • React Server Components FormData rebuild scans every field per `$K` pointer, so one 900 KB POST with 10k pointers/filler fields forces 100M checks and blocks Node's event loop pre-auth (CVE-2026-23870). simonkoeck.com/writeups/reac… #nextjs #vulnerability #cve202623870
CVE-2026-23870: A Single POST Freezes Any Next.js Server | Simon Koeck

CVE-2026-23870: A Single POST Freezes Any Next.js Server | Simon Koeck

To rebuild one submitted form, React scanned every field in the request once for each reference it contained. Nothing capped either number, so one 900 KB POST makes the server do 100 million checks...

simonkoeck.com
1
1
3
31
Omar Kurt retweeted
Seclog (@seclogz) profile picture
Seclog
@seclogzOct 7
security.txt on the Czech web: Scanning 1k popular .cz domains Adding security.txt to the web should be easy. The RFC is fairly simple, and there aren’t many ways to fail. Well, at least I thought that, until now. Let’s look at how a very small sta… vavkamil.cz/blog/2026-10-02-…
Image from Seclog (@seclogz)
1
32
Mişko artık açık kaynak. Laboratuvar farelerindeki davranış deneylerini yönetiyor: denekler, gruplar, protokoller, videolar ve bilgisayarlı görünün çıkardığı ölçümler. MIT. Yolun başında, issue'lar açık. github.com/HappyHackingSpace… #HappyHackingSpace #Diyarbakir
2
5
200
Happy Hacking Space Şırnak Üniversitesi, kulüp tanıtım günlerinde!
Image from Happy Hacking Space (@happyhackings)
3
6
261
Bugün Final Okulları'ndaydık. 5-8. sınıflarla bir soru-cevap yaptık! Davet ve plaketler için teşekkürler. #HappyHackingSpace #Diyarbakir
Image from Happy Hacking Space (@happyhackings)
1
3
4
136
Load more