Medusa @medusa_0xf profile

Medusa

@medusa_0xf

Followers

2,480

Following

141

Media

119

Statuses

959

https://t.co/yHG0KeyQ1t

Joined January 2022

Don't wanna be here? Send us removal request.

Explore tweets Explore followers Explore following

Explore trending content on Musk Viewer

Maggie Smith • 746199 Tweets

Netanyahu • 580584 Tweets

Beirut • 425902 Tweets

Nasrallah • 260382 Tweets

Zelensky • 260337 Tweets

Harry Potter • 202034 Tweets

بيروت • 143908 Tweets

حسن نصر • 108625 Tweets

الزمالك • 101070 Tweets

Acapulco • 92825 Tweets

I-40 • 70557 Tweets

Downton Abbey • 69619 Tweets

マクゴナガル先生 • 49762 Tweets

#الاتحاد_الخليج • 47750 Tweets

حامد • 34088 Tweets

Van Gogh • 27088 Tweets

Willie • 26149 Tweets

FONDEN • 24207 Tweets

Rennes • 15702 Tweets

Dortmund • 14815 Tweets

#حسن_نصر_الشيطان • 13761 Tweets

Barcola • 13186 Tweets

#السوبر_الافريقي • 11924 Tweets

بن رمضان

عمر كمال

Morata

Luton

Deathstroke

اكرم توفيق

Bartesaghi

Newell

زيزو

Martino

Riestra

عاشور

كاكا

الشوط التاني

Gazir

يحيي عطيه

Bochum

احمد بلال

مدحت شلبي

تركي الشيخ

Dembele

Beraldo

كانتي

الشناوي

ناصر منسي

#JordinSparks

#دوله_فلسطينيه_اولويه_السعوديه

Last Seen Profiles

@GokyaySatrancM

@alex16421894259

@yzffie

@Paula_Lean

@TorecloythfuB

@_amihachi

@weishuige

@EmmetTorp20742

@erkezkyTrbanl1

@audreymadstowe

@kwsyeung

@panflound

@siskdnjak

@kademeskisehir

@Chandl3rBin6

@CoachSkeltzy

@dirty_feli

@i_nivethathomas

@Hokkaido_to_JP

@WinenotitalyLtd

Pinned Tweet

Medusa

@medusa_0xf

2 years

New Blog! Exploiting XSS with Javascript/JPEG polyglot. #xss #infosec #javascript

Exploiting XSS with Javascript/JPEG Polyglot

What is a polyglot?

infosecwriteups.com

20

257

770

Medusa

@medusa_0xf

11 months

Can you spot the API Vulnerability? 👀 #Hacking #API

51

79

735

Medusa

@medusa_0xf

2 years

Powershell commands are kinda overwhelming but I'm ok. #tryhackme #infosec

34

28

570

Medusa

@medusa_0xf

7 months

Check out my site 🙌

12

51

256

Medusa

@medusa_0xf

14 days

My First Bug got Triaged on @Hacker0x01 🩶 Profile:

15

1

224

Medusa

@medusa_0xf

9 months

I solved @PortSwigger labs so much that I typed "wiener:peter" while loggin into my computer 💀 I think I've lost it.

15

11

187

Medusa

@medusa_0xf

1 year

Check out my New Blog on SQL Injection, it covers:- 🐞Understanding SQL Injection 🐞Types of SQL Injection attacks 🐞Techniques used by attackers 🐞Demonstration of SQLi in API Endpoint 🐞Prevention #API #Hacking

SQL Injection: Example | Types | Guide | Attack - Akto Security

SQL Injection (SQLi) is a type of attack where an attacker injects malicious SQL code into a vulnerable application's database query.

www.akto.io

5

54

144

Medusa

@medusa_0xf

2 years

Quick Commands to Enumerate Windows after Gaining Access. #windows #infosec A thread 🧵🤩

7

37

135

Medusa

@medusa_0xf

2 years

Hello 2023, As a beginner, I learned a lot and I'm so happy to announce that I've completed the #eJPT exam from @eLearnSecurity !!!

15

2

103

Medusa

@medusa_0xf

12 days

2nd Bug Got Triaged on @Hacker0x01 🤍 #BugBounty

1

0

97

Medusa

@medusa_0xf

1 year

New Video Out! How to Discover API Subdomains? #infosec #BugBounty #API #Hacking

1

28

87

Medusa

@medusa_0xf

2 years

Favourite tool of the month - httpx What's yours?

27

4

75

Medusa

@medusa_0xf

2 years

Good Ways to Use a Computer A thread 🧵 #infosec #computers

5

8

73

Medusa

@medusa_0xf

2 months

All the @PortSwigger LLM Walkthroughs are up on my site, do check them out!

4

14

73

Medusa

@medusa_0xf

1 year

Swags ❤️ @Aktodotio

5

1

61

Medusa

@medusa_0xf

1 year

This is Therapy ✨

8

0

49

Medusa

@medusa_0xf

29 days

Launched my first podcast series (On Hacking), Check out the Ep. 1 👇

0

6

47

Medusa

@medusa_0xf

9 months

Feels good when you solve a lab without checking solution 😀

3

45

Medusa

@medusa_0xf

11 months

Check Out My New Video!😈 How Broken Functionality Level Authorization Occurs? | Code Analysis and Prevention | #API #owasp #Hacking

1

13

42

Medusa

@medusa_0xf

5 months

New Blog out! Explore multiple cases and their exploitation. Let me know your thoughts on it. 👀

2

15

43

Medusa

@medusa_0xf

2 months

Check out the new vid! ⚠️

0

8

41

Medusa

@medusa_0xf

2 years

VERSION="2022.2" GNOME 42 ❤️ Theme: Sweet-Dark Icons: Candy-icons #KaliLinux #kaliversion #GNOME

7

6

39

Medusa

@medusa_0xf

9 months

Don't miss out this playlist! 😎

PortSwigger API Labs

Explanation along with walkthrough, enjoy the playlist :)

www.youtube.com

2

4

37

Medusa

@medusa_0xf

3 years

Check out my new blog on Attacking Kerberos! #infosec #hacking

This blog covers how to attack Kerberos with Kerberoasting and AS-REP Roasting attacks.

systemweakness.com

0

12

36

Medusa

@medusa_0xf

1 year

Discipline is when you're like "Damn, I really don't feel like doing this rn", but then you sit and do it.

1

7

34

Medusa

@medusa_0xf

5 months

In which field you were interested to have a career in before entering #cybersecurity ? Mine: E-Sports

26

1

35

Medusa

@medusa_0xf

9 months

Check out my new blog on Medium:

0

4

33

Medusa

@medusa_0xf

3 years

Again with a blog on Attacking Kerberos. Check this out! #infosec

Golden/Silver Ticket Attack | Kerberos | Active Directory |

In this blog, we are going to talk about golden and silver ticket attacks.

link.medium.com

1

13

33

Medusa

@medusa_0xf

1 year

Check out my new Blog on "BOLA vs BFLA in APIs" Explore examples and Mitigations👇🔥

2

11

32

Medusa

@medusa_0xf

11 months

@Shaheem_Anthony @Ke_Cyber @app Solution with explanation here!

0

6

31

Medusa

@medusa_0xf

3 years

Post-Exploitation Basics - I have just completed this room! Check it out: #tryhackme #mimikatz #bloodhound #powerview #active directory #post -exploitation #metasploit #msfvenom #powershell #golden tickets #windows #postexploit via @realtryhackme

0

29

Medusa

@medusa_0xf

2 years

Check Out my new blog on Social Engineering. #infosec #hacking #Phishing

Creating a Malicious PDF File to launch a Phishing Attack

PDF is a very popular document format and is trusted among users, so it’s easy to manipulate users to open a pdf and perform some actions.

link.medium.com

1

5

27

Medusa

@medusa_0xf

2 years

The more I study, the more I realize how much I don't know 🥲

4

1

27

Medusa

@medusa_0xf

6 months

3K complete, thanks a lot 🩷

2

0

28

Medusa

@medusa_0xf

4 months

0

2

25

Medusa

@medusa_0xf

11 months

2k subs crossed on YouTube! This makes me happy 💚

6

0

24

Medusa

@medusa_0xf

2 years

Infographic of Common Linux Privilege Escalation. #Linux #infosec

0

8

24

Medusa

@medusa_0xf

9 months

The new GraphQL feature in BurpSuite is so amazing, it builds queries for you! 🤯

3

24

Medusa

@medusa_0xf

7 months

One follower only? 🥲

7

2

22

Medusa

@medusa_0xf

3 months

⚠️NEW VIDEO UP !!

0

6

23

Medusa

@medusa_0xf

7 months

Must Watch! #API

0

4

23

Medusa

@medusa_0xf

1 year

I just created a server where hackers interested in API Hacking can discuss and share resources!!

1

0

23

Medusa

@medusa_0xf

5 months

Let's talk hackers! Join the discord server by @remonsec 👇✨

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com

1

5

23

Medusa

@medusa_0xf

10 months

Me creating "API Security content." Comment section: Love your voice.

5

0

21

Medusa

@medusa_0xf

1 year

Check out my Mass Assignment Blog at @Aktodotio

Mass Assignment Vulnerability | Test API Mass Assignment - Akto Open Source

This blog is about learning mass assignment vulnerability, how to find it manually, how to test for it using Akto and finally how to prevent it.

www.akto.io

0

5

22

Medusa

@medusa_0xf

6 months

Let's make it 3k guys 👉👈

3

0

22

Medusa

@medusa_0xf

5 months

New! ⚠️

IDOR In Shopify GraphQL API | Report Explained

This video explains Insecure Direct Object Reference vulnerability In Shopify GraphQL API reported in hackerone...Hackerone report: https://hackerone.com/rep...

www.youtube.com

0

4

21

Medusa

@medusa_0xf

2 years

I've earned the OWASP Top 10 Badge on TryHackMe for Understanding every OWASP vulnerability #tryhackme via @realtryhackme

Medusa0xf was awarded a badge!

Sharing Your Badge

tryhackme.com

0

22

Medusa

@medusa_0xf

10 months

Bro using 200% of his brain 💀 #programmer

3

0

22

Medusa

@medusa_0xf

9 months

New Video Out!

Accessing Private GraphQL Fields

Accessing Private GraphQL Fields (PortSwigger Lab)This video is a walkthrough of PortSwigger GraphQL Lab 'Accessing Private GraphQL Fields' along with explan...

www.youtube.com

2

0

21

Medusa

@medusa_0xf

2 years

Check this out hackers! I just published Log Poisoning to Remote Code Execution | LFI | cUrl | #infosec #ctf #hacking

Log Poisoning to Remote Code Execution | LFI | cUrl|

In this article, we will see how to perform Remote Code Execution through Log Poisoning which is a type of Local File Inclusion.

link.medium.com

1

5

20

Medusa

@medusa_0xf

8 months

Something I wrote for developers 👀🔥 #developers

SQL Injection Prevention | Avoid SQL Injection | How to Prevent - Akto

This blog is a guide that provides best practices and techniques for preventing SQL Injection, which is a common web application vulnerability where an attacker can manipulate SQL queries in order to...

www.akto.io

0

3

19

Medusa

@medusa_0xf

11 months

@Ke_Cyber @app If you answered this without watching my YouTube video then it's pretty "impressive".

4

1

18

Medusa

@medusa_0xf

5 months

Cybersec is like doin something cool everyday and still you can't say it to anyone. (P.S. they won't understand)

0

3

18

Medusa

@medusa_0xf

6 months

Isn't this the coolest? Check out my new post 🔥

2

18

Medusa

@medusa_0xf

9 months

@intigriti This blog is the perfect answer

People who say “PHP is insecure” are uninformed

I hear a lot of folks parrot the opinion that PHP is somehow less secure than other languages. This simply isn't true. Here's why.

hakluke.com

1

18

Medusa

@medusa_0xf

10 months

My Next Video Thumbnail is inspired from "Blue Lock". Check out the New Upload! How To Perform DOS Attack in GraphQL | Circular Relationship | Prevention |

1

3

18

Medusa

@medusa_0xf

1 year

This is why the signing key should be complex in JWT #developers #hackers #BugBounty

Bypass JWT Authentication By Bruteforcing Secret Key | PortSwigger |

In this video we'll see:0:00 Intro0:26 What is the secret key?1:19 How server verifies JWT Token?2:36 Goal2:40 Practical Demonstration 3:41 Bruteforcing secr...

www.youtube.com

0

7

17

Medusa

@medusa_0xf

3 years

Pickle Rick - I have just completed this room! Check it out: #tryhackme #ctf #dirbuster #linux #picklerick via @realtryhackme

1

16

Medusa

@medusa_0xf

11 months

@preemptible Yes, any user can simply change the HTTP method to "DELETE" and perform unauthorised action.

0

17

Medusa

@medusa_0xf

5 months

What application or software you use to increase your productivity? Mine: Notion

8

1

17

Medusa

@medusa_0xf

5 months

Ever heard of a ransomware group with a bug bounty program? Uncover the shocking truth behind LockBit ransomware in @redsentry_tech latest blog! 🔥

LockBit: The Rise, The Fall, and Law Enforcement’s Take Down of The LockBit Empire

www.redsentry.com

0

5

15

Medusa

@medusa_0xf

8 months

Worth Checking out👀

API Security Best Practices | API Security Guide - Akto API Security Platform

A comprehensive guide on the top 10 API security best practices, covering authentication, encryption, testing, and vulnerability prevention.

www.akto.io

0

1

16

Medusa

@medusa_0xf

1 year

How to Exploit SQL Injection in a GraphQL Endpoint? A small thread 🧵😎

2

3

15

Medusa

@medusa_0xf

10 months

NEW Video Out!

How Can Fuzzing Help You Find Hidden API Endpoints?

How Can Fuzzing Help You Find Hidden API Endpoints?...Blogs: https://medusa0xf.medium.com/...Social media:Twitter: https://twitter.com/medusa_0xf...Discord: ...

www.youtube.com

1

14

Medusa

@medusa_0xf

10 months

Love the new @PortSwigger API Labs, so I created this video.

1

14

Medusa

@medusa_0xf

7 months

Thank you!

InfoSec Community

@InfoSecComm

11 months

@Medusa0xf has very well explained the differences between Broken Object Level Authorization and Broken Functionality Level Authorization in a recently published post at InfosecWriteups Do checkout this informative article here:

0

13

46

0

2

14

Medusa

@medusa_0xf

2 years

1. System Enumeration Commands:- systeminfo -> info about a computer's OS, security info, product ID, and hardware properties. systeminfo | findstr /b /c:"OS Name" /c:"OS Version" /c:"System Type" -> To display o specific info from systeminfo.

1

0

14

Medusa

@medusa_0xf

3 months

New Vid Up! 🔥

0

2

13

Medusa

@medusa_0xf

2 years

@Hellfire0x01 @Barbarossa0x @IamRenganathan @Hac10101 @RealTryHackMe @imabhisarpandey @0x_Havoc @dccybersec @JacobDjWilson @onelastdance01 @PhillipWylie @wh0dar3swins @wearyandroid @cybersecmeg @Nouureldin_Ehab @ADanielHill This brought a smile to my face, Thank You.

1

0

11

Medusa

@medusa_0xf

5 months

@theXSSrat

API Basics: A Hacker's Starter Guide

Learn the fundamentals of APIs, including HTTP methods, CRUD operations, and see practical code examples.

medusa0xf.com

0

1

11

Medusa

@medusa_0xf

11 months

My brain when I'm on: Windows - ls Mac - dir

2

0

11

Medusa

@medusa_0xf

2 years

New Article! Exploiting Stack Buffer Overflow | Reverse Engineering | Step by Step #infosec #reverseengineering #hacking

Exploiting Stack Buffer Overflow| Step by Step | Reverse Engineering

In this blog, we are going to see every step that is required to exploit Stack Buffer Overflow with the help of Immunity Debugger.

systemweakness.com

1

2

12

Medusa

@medusa_0xf

2 years

3. Network Enumeration ipconfig or ipconfig /all -> Shows IP, architecture,DNS,gateway etc. arp -a -> Shows the device's IP when it was resolved along their MAC addresses. route print -> Displays the routing table. netstat -ano -> Shows network status and protocols.

1

2

12

Medusa

@medusa_0xf

3 months

Thanks for the feedback on my blog! @theXSSrat

They Made A Hacking Tool - Exploring Viewer Projects

https://x.com/theXSSrat/status/1790802298307850583https://0xhunterr.gitbook.io/the-nen-book/bug_bountyhttps://bohradjayesh.github.io/blogs/https://jasonrowe....

www.youtube.com

1

0

12

Medusa

@medusa_0xf

4 months

Okay anime fans, "Blue Eye Samurai" anyone? #anime

4

0

12

Medusa

@medusa_0xf

11 months

My life has been a total bore, that is until I discovered this form of ego called "curiosity" just now. - Blue Lock (Anime)

1

12

Medusa

@medusa_0xf

11 months

If you never admit defeat, you'll never know true frustration.

5

0

12

Medusa

@medusa_0xf

7 months

Some people said, they can't access the site while some can. So I'm trying to resolve the issue and that's why the site will be officially down for the next 24 hr.

0

1

12

Medusa

@medusa_0xf

2 months

Let's make it 4k subs please 🥺

0

12

Medusa

@medusa_0xf

3 years

I created my Lofi avatar. Create yours it's fun and show me too👇 #lofigenerator #lofibeats

5

0

12

Medusa

@medusa_0xf

2 years

I installed KDE Plasma only to switch back to GNOME -_- #kalilinux #Linux

2

0

11

Medusa

@medusa_0xf

7 months

Fixed the issue, site should be up and running! 🔥

0

11

Medusa

@medusa_0xf

2 years

These days are like Eat. Sleep. Study. Repeat.

3

0

10

Medusa

@medusa_0xf

2 years

wmic qfe -> To see the last patch or updates in the system. wmic qfe Caption,Description,HotFixID -> To get particular columns of info related to the system.

1

11

Medusa

@medusa_0xf

3 years

people don't like what they don't understand.

3

1

11

Medusa

@medusa_0xf

10 months

Mouse >> touchpad

4

0

11

Medusa

@medusa_0xf

9 months

Let's make it 3k guys 👉👈

2

0

11

Medusa

@medusa_0xf

10 months

Check out the new Video 💚

0

1

11

Medusa

@medusa_0xf

3 years

Hackers don't hide online, they just make it more difficult to trace them.

1

10

Medusa

@medusa_0xf

2 years

I just pwned LoveTok in Hack The Box! Learned about weird functionalities of PHP programming that led to RCE. #hackthebox #htb #cybersecurity

Owned LoveTok from Hack The Box!

I have just owned challenge LoveTok from Hack The Box

www.hackthebox.com

0

11

Medusa

@medusa_0xf

3 years

making notes are important.

1

11

Medusa

@medusa_0xf

1 year

🚀Excited to share my latest blog post on "Server-Side Template Injection"! 🔍😈 A powerful yet potentially risky technique used by hackers to manipulate server-side templates and execute arbitrary code.

0

7

11

Medusa

@medusa_0xf

3 years

Prioritize peace

3

2

11

Medusa

@medusa_0xf

3 months

I'm posting LLM @PortSwigger walkthroughs on my site. Follow for more updates!

Exploiting LLM APIs with excessive agency

Learn how attackers exploit excessive agency in LLM APIs and find out how to safeguard against these threats.

medusa0xf.com

0

1

10

Medusa

@medusa_0xf

7 months

Happy women's day y'all 💚

0

10

Medusa

@medusa_0xf

2 years

The relaxation that 7 hours of sleep can't give me, meditation does in 25 min. I want to share this peaceful music with anyone who wants to meditate ❤️ #meditation #peace #Buddha

1

0

10

Medusa

@medusa_0xf

9 months

New Vid Up! 🔥 Reason why using regex to disable Graphql introspection is bad idea.

Finding a Hidden GraphQL Endpoint

In this video, we will see how we can bypass authentication when introspection query is disabled and identify hidden graphql endpoints...Introspection Query:...

www.youtube.com

1

2

9

Medusa

@medusa_0xf

2 years

net user -> Shows all users on the computer. net user "username" -> Shows a user's full name, last name, password last set, last logon, etc. net localgroup -> displays the name of the server and the names of local groups on the computer.

1

10

Medusa

@medusa_0xf

9 months

Opened my Java program after months and now asking ChatGPT what it is doing.🙂

3

0

9