Get Hands-On experience and learn about ethical hacking and penetration testing & bug Bounty
Joined April 2026
- Tweets71
- Following21
- Followers472
- Likes177
hackerz.space retweeted
Most people can collect a subdomain list. Almost nobody knows what to do with it.
I dropped new video about: the entire recon process my AI hackbot runs on its own, and how that data actually turns into findings.
youtu.be/v9v9eGpy87M
#bugbounty #hacking
hackerz.space retweeted
Do you think I should make a YouTube video how you make your own hack bots?
By the way I already have how to build Hermes agents video
tell me what you think!
If you're still struggling to build your own hackbot, you should focus on learning the basics first.
I've yet to see a beginner build a successful hackbot, because they don't have the skills or the instructions to make it work. It all comes down to the guidance you give the AI to perform tasks you already know how to do, or have done in the past.
Build your own skill set. Get very good at doing it manually. Then AI can automate it and help you scale.
hackerz.space retweeted
Email spoofing still works. I sent a mail that looked like it came from a real company, and watched it land in the inbox.
Then the fix: SPF, DKIM and DMARC on your domain, and the reports that catch the next attempt.
youtu.be/b9p3SsZnGUk
#bugbounty
#infosec
#cybersecurity
The FBI got hacked, and the first thing the attackers asked for was not money.
They gave the bureau one week to pull a report they say is false.
The full story, the PeopleSoft flaw and the timeline:
youtu.be/pfCg7kjBF4Y
#cybersecurity
#infosec
Nothing stings more than finding out about a new subdomain from someone else's report.
Set a job to run at midnight. It pulls the target, looks for new subdomains, diffs them against yesterday's list and scans whatever is new, then reports back what it found. You wake up to a list instead of a race.
Full video is on YouTube: youtube.com/watch?v=zNG8Mnkv…
#bugbounty
#hacking
#cybersecurity
#infosec
#ethicalhacking
The fastest way to waste a weekend is chasing a finding that was never real.
AI will hand you false positives all day, so before you write anything up, validate the finding with a second model. One model hunts, a different one checks the work. Only then do you start writing the report.
Full video is on YouTube: youtube.com/watch?v=zNG8Mnkv…
#bugbounty
#hacking
#cybersecurity
#infosec
#ethicalhacking
A report is one thing. A POC is what makes the triager's job easy.
Even for a simple IDOR, build a small Python or batch script and hand it over. They run it, it works, and triage on your report gets way faster.
Full video is on YouTube:
youtube.com/watch?v=zNG8Mnkv…
#bugbounty
#hacking
#cybersecurity
#infosec
#ethicalhacking
Everyone shows you how to set up a Hermes agent. Nobody shows you how to set it up as a hacker.
Full build on YouTube:
youtube.com/watch?v=zNG8Mnkv…
#BugBounty #EthicalHacking #AlAgents #CyberSecurity #Hacking
Practice your hacking skills on labs that mimic real world scenarios:
hackerz.space
hackerz.space retweeted
Everyone shows you how to set up a Hermes agent. Nobody shows you how to set it up as a hacker.
Full build on YouTube:
youtube.com/watch?v=zNG8Mnkv…
#BugBounty #EthicalHacking #AlAgents #CyberSecurity #Hacking
I built my own AI hacker using Hermes Agent.
In this video, I show you how to set up Hermes from a penetration testing perspective and turn it into an agent that can help with:
→ Recon
→ Vulnerability hunting
→ Hacking workflows
→ Reporting
Not another basic “how to install Hermes” tutorial.
I’m building it specifically for hackers and pentesters.
🎥 Watch the full video:
youtube.com/watch?v=zNG8Mnkv…
hackerz.space retweeted
1-Click wordpress RCE 👀
That's easy to exploit; just send a link to contact@Domain[.]com
So... we decided to hack WordPress Core, AGAIN! 🔥 ⛓️ Click2Shell is a one-click unauthenticated remote command execution chain (Preauth RCE) affecting every WordPress website. Wordpress rolled out a fix yesterday! The story about how one preview link made WordPress click Install, load an inactive theme's PHP, and hand us RCE is below. Happy Friday!
pwn.ai/blog/click2shell
hackerz.space retweeted
Privacy no longer exists on the internet.
I was planning to buy a crypto wallet, but before making the purchase, I decided to do some research on a brand by performing quick subdomain enumeration and content discovery.
I was able to find over 1,000 endpoints.
These endpoints were tracking links for other users' orders, and they included:
· Full names
· Full addresses
· Phone numbers
· Email addresses
If this information fell into the wrong hands, it would not end well , using recox.hackerz.space.
#BugBounty #BugBountyTips #Hacking #CyberSecurity #InfoSec #InformationSecurity #Hacker
QR login flows can hide some nasty bugs 👀
A poorly implemented QR authentication flow can turn a simple link click into a full account takeover.
Always test how QR tokens are generated, validated, expired, and tied to the correct session.
One small implementation mistake can make a huge difference.
Learn web hacking ( %15 OFF ) 🔥 : hackerz.space/
#BugBounty #BugBountyTips #CyberSecurity #AppSec
🤖 Made with AI
Did you know a PDF file can steal your username and password ? 🫣
youtu.be/9lXeWyWIWJA
#bugbounty #bugbountytips #hacking
hackerz.space retweeted
✨This video is inspired by @GodfatherOrwa, @garethheyes and @PortSwigger, showcasing how a simple PDF upload can silently steal your credentials on any website.
🟥Full video on youtube :
🎥 youtu.be/9lXeWyWIWJA
#bugbounty #bugbountytips #hacking
Most people think a PDF is just a file.
But what if I told you that a PDF uploaded to a real website can steal your username and password
without you even knowing?
No fake login page.
No phishing link.
Just a PDF.
I found this vulnerability on a real target,
built an open source tool so YOU can test it,
and broke down the entire attack in 11 minutes.
File upload endpoints will never look the same to you again.
Full video is on YouTube right now 👇
youtu.be/9lXeWyWIWJA
#bugbounty #bugbountytips #hacking
Most people think a PDF is just a file.
But what if I told you that a PDF uploaded to a real website can steal your username and password
without you even knowing?
No fake login page.
No phishing link.
Just a PDF.
I found this vulnerability on a real target,
built an open source tool so YOU can test it,
and broke down the entire attack in 11 minutes.
File upload endpoints will never look the same to you again.
Full video is on YouTube right now 👇
youtu.be/9lXeWyWIWJA
#bugbounty #bugbountytips #hacking