Mantis @MantisSTS

Husband and Father of 2 | Hacks things | InfoSec Stuff | Twitch: https://t.co/ugfxJm4z7U | YT: https://t.co/mJsgSxa0qO ios.pentestglobal.com United Kingdom Joined July 2011

Tweets

8K
Followers

2K
Following

2K
Likes

13K

Mantis @MantisSTS

3 days ago

My son has started streaming Minecraft on twitch - go show some love :) twitch.tv/mantis_ds #Minecraft

1 1 2 197 0

To detect low-and-slow evasive scans, log and correlate IP, TLS JA3, and session/cookie. Alert when one fingerprint touches many unique URLs over hours at low RPS with mixed 200/404s. This exposes distributed probes. #AppSec #DetectionEngineering #WebSecurity #BlueTeam

1 0 0 226 0

Tom Dörr @tom_doerr

2 months ago

self-hosted file converter for 1000+ formats

27 371 5K 348K 7K

Download Image

Mantis @MantisSTS

2 months ago

github.com/MantisSTS/Auto…

0 2 2 386 6

Mantis @MantisSTS

2 months ago

31545 million installs is crazy 🤣 @Huawei

1 0 0 141 0

Download Image

Adam Langley @BuildHackSecure

2 months ago

I created a tool called "Creatures Of Habit" which accepts a GitHub username/organisation finds all public repos and extracts endpoints from popular web frameworks github.com/BuildHackSecur…

1 13 74 7K 47

Mantis @MantisSTS

2 months ago

github.com/MantisSTS/Note… Notes app because sometimes you just want to fetch everything by category (payloads, urls, etc) from your notes app but they suck. Maybe it will help you? ¯\_(ツ)_/¯ #bugbounty #pentesting #notes #bugbountytips

1 2 4 689 2

Vangelis tix Stykas @evstykas

3 months ago

As promised today as my brithday gift we are going to (check notes...) access the infrastructure of Quad7 (or 7777) a monitored and really well known botnet which is used for brute forcing microsoft 365 accounts and its members are mostly compromised routers.🧵

3 31 218 33K 174

Maddy 🐝 @Cyb3rMaddy

3 months ago

🔥 BYPASS WINDOWS DEFENDER XOR-obfuscate a Sliver C2 payload on Kali, forge a stealth C++ loader, and drop a reverse shell on Win10 in seconds. OUT NOW: youtu.be/lC9zh3_S-zg

23 270 2K 98K 1K

Download Image

LaurieWired @lauriewired

3 months ago

DON’T vibecode sysadmin type tasks lol configuring some network switches, I woke up to a reimplementation (???) of SSH in python

27 61 1K 53K 177

Download Image

Vangelis tix Stykas @evstykas

3 months ago

You know what ? Today I woke up strange. So LETS BURN SOME North Korean info! Lets see how their backend works. Shall we ? I am going to yolo explain what is happening here (as with most of my research), and if my ADHD mind does not distrupt me it should take 10 minutes!

Vangelis tix Stykas @evstykas

3 months ago

1 0 10 60K 7

3 29 193 59K 164

Mantis @MantisSTS

3 months ago

Everyone crying about vibe coding but as an ex-developer, I've managed to knock out some very quick projects without many issues. There have been some manual changes but as long as you know the basics of security and coding in the language you should be fine! #NotFinancialAdvice

1 0 0 103 0

Adam Langley @BuildHackSecure

3 months ago

IT professionals, I’m interested, if you could swap to a totally different career with no financial penalties at all ( salary, training etc) would you? RT to get around.

3 3 2 2K 0

@zephrfish.yxz.red @ZephrFish

4 months ago

Weekends are for random projects Here is a blog post all around Kerberos errors and a bonus interactive app built in collaboration with @TheContractorio Errorism Index for Kerberos blog.zsec.uk/common-tool-er… kerberos.errorism.io

0 10 22 2K 10

/r/netsec @_r_netsec

5 months ago

BBRadar.io - The Bug Bounty Program Aggregator - Find the latest bug bounty programs from all major platforms. bbradar.io

0 2 12 1K 7

/r/netsec @_r_netsec

5 months ago

Cross-Site WebSocket Hijacking Exploitation in 2025 - Include Security Research Blog blog.includesecurity.com/2025/04/cross-…

0 5 13 1K 9

/r/netsec @_r_netsec

5 months ago

New writeup: a vulnerability in PHP's extract() function allows attackers to trigger a double-free, which in turn allows arbitrary code execution (native code) ssd-disclosure.com/ssd-advisory-e…

0 7 15 3K 8

bytehx @bytehx343

6 months ago

I am releasing Ollama AI analyzer burp extension. It runs right on your local computer and uses Ollama's AI models to analyze your HTTP requests and response while keeping your data private. github.com/byt3hx/ollama-…

6 28 194 14K 135

Download Image

Joseph Thacker @rez0__

6 months ago

I'm a hacker and AI researcher who has reported vulnerabilities to OpenAI, Google, and others. I wrote this guide as a reference of all of the ways that you can hack AI. It has saved me hours. Bookmark this if you need a reference for what all to try (AND includes mitigations).

72 749 4K 331K 7K

Download Image

CryptoCat @_CryptoCat

6 months ago

I hit the 40k subscribers milestone on YouTube this week 🥳🎉 Thank you to everyone who has checked out my content 🙏🥰 If you haven't yet and are interested in CTF walkthroughs; web, pwn, rev etc Hope you will take a look and help me get to 50k! 😎 yt.cryptocat.me