🇷🇴 cristi ✓

@CristiVlad25 · joined 11 Nov 2013

56 206Followers

697Following

16 441Posts total

80.6KViews on collected posts

โพสต์ล่าสุด

🇷🇴 cristi ✓@CristiVlad2515 Sep

when someone sells you OpenAI/Anthropic models for a cheap price, think twice: "Customers believed they were buying discounted Claude access, but their traffic was in fact silently proxied to a different AI model while the reseller’s tooling installed a credential harvester, 1.3K views · 4 likes · 0 reposts · 3 replies Open on X →

🇷🇴 cristi ✓@CristiVlad2515 Sep

incoming 6 sol! 1.5K views · 1 likes · 0 reposts · 0 replies Open on X →

🇷🇴 cristi ✓@CristiVlad2515 Sep

stuff I look into for bounties. 2.5K views · 29 likes · 1 reposts · 1 replies Open on X →

🇷🇴 cristi ✓@CristiVlad2515 Sep

🔁 Broken access controls are among the most common and impactful vulnerabilities still affecting applications today! 🧐 As applications grow more complex with role-based access, multi-tenant architectures, and granular permissions, the chances of missing an authorization check h

8.9K views · 96 likes · 10 reposts · 2 replies Open on X →

🇷🇴 cristi ✓@CristiVlad2514 Sep

it's never been more engaging to learn new things interactively and very fast. https://t.co/jv0yrfzgdJ

1.7K views · 9 likes · 0 reposts · 0 replies Open on X →

🇷🇴 cristi ✓@CristiVlad2514 Sep

main agent alone gets you farther, if you know what you are doing. 1.8K views · 2 likes · 0 reposts · 0 replies Open on X →

🇷🇴 cristi ✓@CristiVlad257 Sep

a bit of traceback: - traced the login flow between the app, IdP, and backend. - saw weird automated call to reauth endpoint. was authenticated call. - the xx-char hex UID being sent as the password. It’s an account ID, not a UUID or secret. - the backend never checked the 2.2K views · 5 likes · 0 reposts · 0 replies Open on X →

🇷🇴 cristi ✓@CristiVlad255 Sep

@CristiVlad25 Nice 👍 out of the box thinking 2.5K views · 4 likes · 0 reposts · 1 replies Open on X →

🇷🇴 cristi ✓@CristiVlad255 Sep

GPT-5.6 Sol found a very cool authentication bypass. - you submitted the uuid as password, pass confirmation and erp_code and it spilled out the access token for that user. I couldn't enum uuids so CVSS only 7.4. https://t.co/RLC7gh1y8r

58.1K views · 394 likes · 23 reposts · 15 replies Open on X →

เทียบกับบัญชีขนาดเดียวกัน

9 โพสต์จาก 90 วันที่ผ่านมา เทียบกับช่วง 10K–100K ผู้ติดตาม การเข้าถึงปกติสำหรับขนาดนี้ แต่การตอบสนองอ่อนกว่าส่วนใหญ่.

ยอดดูมัธยฐาน2 230บัญชีนี้924ค่ามัธยฐานของ 10K–100K

การเข้าถึง, %3.97%บัญชีนี้3.62%ค่ามัธยฐานของ 10K–100K

การมีส่วนร่วม, %0.52%บัญชีนี้1.52%ค่ามัธยฐานของ 10K–100K

ตัวชี้วัด	บัญชีนี้	ค่ามัธยฐานของ 10K–100K	อัตราส่วน
ยอดดูมัธยฐานต่อโพสต์	2 230	924	2.41×
การเข้าถึง (ยอดดู ÷ ผู้ติดตาม)	3.97%	3.62%	1.10×
อัตราการมีส่วนร่วม	0.52%	1.52%	0.34×

บัญชีอื่นในช่วงนี้ → เปรียบเทียบกับบัญชีอื่น → ค่าอ้างอิงเหล่านี้คำนวณอย่างไร →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

58.1K5 Sep

2.5K

2.2K7 Sep

1.8K14 Sep

1.7K

8.9K15 Sep

2.5K

1.5K

1.3K

Last 9 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.75%5 Sep

0.20%

0.22%7 Sep

0.11%14 Sep

0.52%

1.23%15 Sep

1.24%

0.07%

0.54%

Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.52%.

What the audience does

Likes58.4%544 in total

Reposts3.6%34 in total

Replies2.4%22 in total

Quotes0.4%4 in total

Bookmarks35.2%328 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

Followers by day

16 Sep

Daily snapshots since 16 Sep 2026; the dashed line is the starting count.

โพสต์ล่าสุด

เทียบกับบัญชีขนาดเดียวกัน

Growth & engagement

Views per post

Engagement rate per post

What the audience does

Followers by day

บัญชีที่คล้ายกัน