Sign in

s1r1us | Mohan Sri Rama Krishna Pedhapati

@mohansrk.bsky.social
437 followers 117 following 14 posts

Founder @ElectrovoltSec Browser and Web Security @cure53berlin, Blockchain Security @osec_io, Rambling on mohansrkp.substack.com

PostsRepliesMedia
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 13/06/2025
Hacking Windsurf: I asked the AI for the shell, it said yes. new video’s out. I show how I could’ve hacked you… just by getting you to click my link. Link posted below. www.youtube.com/watch?v=23Mz...
youtube.com
Hacking Windsurf: I Asked the AI for System Access — It Said Yes
YouTube video by Mrgavyadha
141
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 17/01/2025
elon is the epitome of a perpetual dopamine-craving machine fueled by social validation. sends rockets to space, yet still hunger for something more, X became the playground, recent gaming fiasco says it all. gotta keep the right brain in check with the left brain.
020
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 15/12/2024
just wondering, infosec people using this site 🤔? just looked at analytics of same post on linkedin, x and this. there is no reach here, good that I didn't deleted the other app.
050
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 14/12/2024
Imagine opening a Discord message and suddenly your computer is hacked. We discovered a bug that made this possible and earned a $5,000 bounty for it. Here's the story and a beginner-friendly deep dive into V8 exploit development. watch: youtu.be/R3SE4VKj678?...
youtu.be
Hacking Discord for $5000 Bounty
YouTube video by Mrgavyadha
1188
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 06/12/2024
yes
020
Reposted by s1r1us | Mohan Sri Rama Krishna Pedhapati
thomas🌦️ @zemn.me · 04/12/2024
via @mohansrk.bsky.social on the other site
031
Reposted by s1r1us | Mohan Sri Rama Krishna Pedhapati
shubs @shubs.io · 23/11/2024
queued up tonight but just missed out, if anyone is selling tickets, looking for two tickets to ccc #38c3
052
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 30/11/2024
was looking at gitlab code and damn @joaxcar.bsky.social is everywhere. talk about niche 😅
040
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 30/11/2024
i hate that they didn’t used real galaxy not some fake dots. it literally haunts me every-time i open this app.
010
Reposted by s1r1us | Mohan Sri Rama Krishna Pedhapati
ϻг_ϻε @steven.srcincite.io · 26/11/2024
I just wrote a new blog post! This is how I (ab)used a jailed file write bug in Tomcat/Spring. Enjoy! Remote Code Execution with Spring Properties :: srcincite.io/blog/2024/11...
srcincite.io
Remote Code Execution with Spring Properties
Recently a past student came to me with a very interesting unauthenticated vulnerability in a Spring application that they were having a hard time exploiting...
17636
Reposted by s1r1us | Mohan Sri Rama Krishna Pedhapati
Freddy @freddyb.bsky.social · 27/11/2024
Modern solutions against cross-site attacks (frederikbraun.de/modern-solut...): An article about cross-site leak attacks and browser-based defenses. You will also learn why web security best practices is always opt-in and finally how YOU can get increased security controls.
frederikbraun.de
Modern solutions against cross-site attacks
Modern solutions against cross-site attacks
03419
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 22/11/2024
So there is no algorithm for intelligence? Elephants, whales, and dolphins = Big brains (large N), but limited data (D) & compute (C). Falcons, dragonflies, hummingbirds = Insane compute (C), but tiny brains (N) & limited data (D). Humans have balanced D, C, and N?
000
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 21/11/2024
How can I do ROP with a reliable offset to the libc base or libsystem_c.dylib? I am calculating the system address using the printf pointer from GOT table, but the offset to the GOT table or the offset from printf to system seems to vary across computers with different configurations for same app.
100
s1r1us | Mohan Sri Rama Krishna Pedhapati @mohansrk.bsky.social · 18/11/2024
hello world
020