Include Security @IncludeSecurity

Simply stated: Give us any kind of app and we'll hack it better than the rest. Our clients include awesome tech companies in Silicon Valley, NYC, and beyond. includesecurity.com Brooklyn and the world Joined May 2012

Tweets

209
Followers

2K
Following

1
Likes

33

Include Security @IncludeSecurity

5 months ago

Do you use or exploit WebSockets? Check out our new blog post to see how modern browsers may (or may not) be protecting you from Cross-Site WebSocket Hijacking! blog.includesecurity.com/2025/04/cross-…

2 6 14 912 8

Include Security @IncludeSecurity

5 months ago

See you all at BSidesSF later this month! @IncludeSecurity will be there with a lot of our team!

BSidesSF @BSidesSF

5 months ago

See you all at BSidesSF later this month! @IncludeSecurity will be there with a lot of our team!

0 0 1 304 0

Download Gif

0 0 2 175 0

Include Security @IncludeSecurity

5 months ago

Today our team at IncludeSec is releasing a site to help with key collision concerns. We've known for a while that private keys should not be shared, use this site to ensure they are not! ismyprivatekeypublic.com

0 2 3 509 0

Include Security @IncludeSecurity

6 months ago

New research🤩 on old tech👴! Our team's latest blog post demonstrates many ways memory vulnerabilities can occur in your legacy Delphi code despite being described as a "memory safe" language by the NSA. blog.includesecurity.com/2025/03/memory…

0 2 4 224 1

Include Security @IncludeSecurity

7 months ago

It's winter, so hacking space heater IoT devices to completely control their firmware seems like the thing to do! In our latest blog post, you'll see some of the things we do for our IoT/HW clients!! blog.includesecurity.com/2025/02/replac…

0 3 4 363 4

Include Security @IncludeSecurity

8 months ago

Hey folks, for those who like the HTB community we've done a collab contribution of a challenge box (free, no subscription needed), give it a spin if you like to hack the hackers! 🪓 👩‍💻 hackthebox.com/machines/backf… Hint: It's a tough box, check our github and our blog for info.

0 0 2 175 0

Include Security @IncludeSecurity

9 months ago

We're happy to sponsor great learning resources like @OpenSecTraining, the world is awash with a lot of bad training/certs, here's some courses that are solid and open/free!😀

OpenSecurityTraining2 @OpenSecTraining

9 months ago

We're happy to sponsor great learning resources like @OpenSecTraining, the world is awash with a lot of bad training/certs, here's some courses that are solid and open/free!😀

1 9 30 6K 2

0 0 4 325 0

Include Security @IncludeSecurity

10 months ago

New blog! Join us as we explore seemingly safe but deceptively tricky ground in Elixir, Python, and the Golang standard library. Well-documented behavior is not always what it appears! blog.includesecurity.com/2024/11/spelun…

0 2 5 287 1

Include Security @IncludeSecurity

12 months ago

Who hacks the hackers? We do! Our new research on vulns in multiple common C2 frameworks used by netpen and red teams. If you use any of these take a look and patch up. blog.includesecurity.com

1 41 121 15K 61

Include Security @IncludeSecurity

a year ago

It's always great to work on open source security, even better when it helps users who need secure and private access online!

Open Technology Fund @OpenTechFund

a year ago

It's always great to work on open source security, even better when it helps users who need secure and private access online!

0 1 1 879 0

0 0 2 479 0

Include Security @IncludeSecurity

a year ago

Fresh blog post for ya; We introduce coverage-guided fuzzing as a concept to hunt down bugs faster via modification of the Fuzzilli fuzzer from Google Project Zero. blog.includesecurity.com/2024/04/covera…

0 5 9 2K 4

#BSidesNYC @BSidesNYC

a year ago

Check out this @BSidesNYC 0x03 interview by @cybersnacker with Erik Cabetas where he discusses how BSidesNYC is different from the other New York conferences, how he started @IncludeSecurity, and what it's like to consult for #hacker movies. youtube.com/watch?v=ktk8px…

0 1 2 427 2

Include Security @IncludeSecurity

a year ago

We're happy to support great open/free security training to get more folks into our industry. If you want to learn low-level RE/hacks/OS check out OST2! ost2.fyi/Home.html

OpenSecurityTraining2 @OpenSecTraining

a year ago

We're happy to support great open/free security training to get more folks into our industry. If you want to learn low-level RE/hacks/OS check out OST2! ost2.fyi/Home.html

0 1 2 2K 1

0 1 6 1K 1

Include Security @IncludeSecurity

2 years ago

We're still seeing a lot of Ruby code out there in the tech world. If we see it we hack it! Latest blog post on advanced Ruby deserialization gadget chains for exploitation of application is up blog.includesecurity.com/2024/03/discov…

0 6 15 1K 4

Include Security @IncludeSecurity

2 years ago

This is why we're thinking through though AI/ML security problems for our clients and the public, thanks for the appreciation @ZanderMackie

Alexander Mackie @ZanderMackie

2 years ago

This is why we're thinking through though AI/ML security problems for our clients and the public, thanks for the appreciation @ZanderMackie

0 0 1 413 0

0 0 2 363 0

Alexander Mackie @ZanderMackie

2 years ago

One of the better posts on prompt injection I’ve seen. And this is because it gives actionable advice to developers! Attack insights without defense is insufficient.

Include Security @IncludeSecurity

2 years ago

One of the better posts on prompt injection I’ve seen. And this is because it gives actionable advice to developers! Attack insights without defense is insufficient.