AndrewMohawk⁽ⁿᵘˡˡ⁾ (@AndrewMohawk) / X

AndrewMohawk⁽ⁿᵘˡˡ⁾

12.9K posts

AndrewMohawk⁽ⁿᵘˡˡ⁾

@AndrewMohawk

Sec/Madness @privy_io principal security , @_seal_org technical council prev: HoS @uniswap, D&R/IR @RobinhoodApp, IR @BitMEX, Built @Paterva Maltego with RT

New York, USA

andrewmohawk.com

Joined February 2008

Pinned
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Dec 11, 2025
Fun react bug, (CVE-2025-55183) if you have a server side component and it explicitly or implicitly exposes a stringified argument you can get the source code for that function. Also found DoS, but reported it to vercel instead of meta and some else reported the next day 🙃
00:00
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
2h
I really do think harnesses are falling away, but mines still going for now, forgot to add this to the list from Aug 04 CVE-2026-15830 --
djangoproject.com
Django security releases issued: 6.0.8 and 5.2.17
Posted by Natalia Bidart on Aug. 4, 2026
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 8
Uhhh @_JohnHammond , @endingwithali is looking for you
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 6
wordpress.org/news/2026/08/w… Another lil find for the latest Wordpress
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 6
Token usage: total=1,886,178 input=1,699,072 (+ 106,108,672 cached) output=187,106 (reasoning 91,845) About $67.16 used in 5.6-sol playing the CTF fwiw
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 6
Was such a fun ctf, was really neck and neck with one team (maybe @TheoriqAI ?) till the last minute! Thanks so much @Tenzai_Labs , looking forward to training my own models! Go play tomorrow and you can win another DGX!