-
Tweets373
-
Followers311
-
Following279
-
Likes1K
Bugs happen but it's rare you see a bug that grabs you so hard and makes you nod like a little dog.. CVE-2023-44487 did that for me good god what a bug and here's why
Decided to publish the Lexmark printer exploit + writeup + tools instead of sell it for peanuts. 0day at the time of writing: github.com/blasty/lexmark -- enjoy!
Curious about exploiting VMs or memory bugs in a safe language? Read my new blog post, where I attack Firecracker, AWS' VMM written in Rust. Learn about the various layers of virtualization + the attack surface, and how design decisions impact security. graplsecurity.com/post/attacking…
secwiki.cloud is our internal cloud knowledgebase, and this release is a culmination of work from 33 of our current staff and alumni going back to 2018. Some thoughts on the wiki, and why I pushed for us to release it:🧵
secwiki.cloud is our internal cloud knowledgebase, and this release is a culmination of work from 33 of our current staff and alumni going back to 2018. Some thoughts on the wiki, and why I pushed for us to release it:🧵
Dead code elimination with Triton is now available. Example with VMProtect's junk code: github.com/JonathanSalwan…
If you want to hear about new stuff in Windows security my session was just posted: techcommunity.microsoft.com/t5/video-hub/t…
Excited to finally publish my lockdown project from earlier this year: an iOS zero-click radio proximity exploit odyssey. googleprojectzero.blogspot.com/2020/12/an-ios…
Introducing FireWalker: A New Approach to Generically Bypass User-Space EDR Hooking mdsec.co.uk/2020/08/firewa… by @peterwintrsmith #redteam #firewalker #MDSec
یکی از دلایل اصلی که من و خیلی از دوستام دیگه به ایران برنمیگردیم. دم بهداد گرم که اینو نوشت. من حداقل دو تا مورد دیگه میشناسم که مامورا رفتن منزلش و ازشون خواستن که پسرشون باهاشون همکاری کنه.
یکی از دلایل اصلی که من و خیلی از دوستام دیگه به ایران برنمیگردیم. دم بهداد گرم که اینو نوشت. من حداقل دو تا مورد دیگه میشناسم که مامورا رفتن منزلش و ازشون خواستن که پسرشون باهاشون همکاری کنه.
Yesterday's Patch Tuesday included a PhoneBook use-after-free vulnerability (CVE-2020-1530) I reported. I decided to do a step-by-step write up on how I discovered it. It covers some basic sample gathering, harnessing, fuzzing, analysis and exploitation symeonp.github.io/2020/12/08/pho…
You are invited to Fuzz Week 2020! The week where I demonstrate some of the basics of fuzzers, all the way to my thoughts about cutting edge fuzzing. We'll write some of our own basic fuzzers, learn how to use AFL, read some papers, rant a lot, and more! gamozolabs.github.io/2020/07/12/fuz…
Have you ever needed to get an earlier version of the Windows binary you're analyzing? Did you end up downloading Windows ISOs or update packages just for that? Not anymore! Introducing Winbindex: m417z.com/winbindex/ m417z.com/Introducing-Wi…
Well, since people wanted to know, here is my write-up for the Citrix vulnerabilities I found last January (including local file disclosure!): dmaasland.github.io/posts/citrix.h…
My writeup is about the LNK windows bug. blog.vincss.net/2020/06/cve49-…
Self promotion time - if you are testing a payment system or a shop, check the whitepaper that I had written and updated last year: nccgroup.trust/globalassets/o… 💰💰💰 #bugbountytip #pentest #Financial
Just posted my talk "Keeping Windows Secure" touching on security assurance process and vuln research in Windows from @BlueHatIL 2019: github.com/dwizzzle/Prese…
For those who attended our talk with @ScepticCtf at #s4x20 , I will push the client utility for Siemens S7 bootloader arbitrary code execution here: github.com/RUB-SysSec/Sie…
I'll make my tech report and poc public soon. It was a fun bug affecting most major distributions. one exploit to rule them all w/ all kernel expl mitigation bypasses - no rop chains / hardcoded crap duasynt.com/blog/ubuntu-ce…
I am so delighted to be in the list.
I am so delighted to be in the list.

Hamid Kashfi @hkashfi
9K Followers 999 Following I do computers @ https://t.co/DKXRMmnzya . Previously Immunity Inc & Trail of Bits. Hobbyist photographer @[email protected]
Silverfoxy @imsilverfoxy
896 Followers 1K Following PhD in Computer Science - Senior Systems Eng at Cloudflare - Ex Researcher at Stony Brook University (PragSec Lab) Web Security - [email protected]
Hossein Lotfi @hosselot
6K Followers 60 Following Vulnerability researcher at ZDI (views are my own). Check #hosselot_tips for vulnerability research tips. 'A machine never faults. It reflects human's faults.'
Soroush Dalili @irsdl
20K Followers 909 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, @SecProjectLtd founder 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Reza Zamiri @d3c0der
2K Followers 2K Following Computer science @Saar_Uni | Past @ CISPA | CyberSecurity Engineer
Will Dormann is on Ma... @wdormann
26K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
Danzo @Far0zad
44 Followers 677 Following 🇦🇺 🦋 Always a Learner and seeking wisdom, an infosec guy living by Bushido 武士道.
Kathie Nail @kathie_nail
242 Followers 1K Following MSSW social worker with years of experience in finance, credit, credit card fraud and collections. I still do hours and hours of volunteer work in 12 step
H @H12V21H
2 Followers 146 Following
Packet Phantom @NtAlexio2
124 Followers 1K Following Offensive Developer | Cyber Security Enthusiast | Network Protocols Researcher | @Metasploit contributor | Enjoy breaking things and remaking them!
Or Duan @hacking_this
871 Followers 1K Following CTO @ Sayfer | White-hat Hacker 🚀 We are hiring! If you care about web3 security - talk with us!
Ehsanodin @ehsanodin1
255 Followers 769 Following
Elizabeth @Elizabe666888
14 Followers 1K Following
Mirhossein Rahmani @mirhossein_
2 Followers 179 Following
creamy chicken soup @creamychickens1
65 Followers 1K Following Security researcher. Noob of the noob of the noob in #RE #ExploitDev
Nick Jones @nojonesuk
1K Followers 822 Following Global Head of Research @ WithSecure, Programme Lead @ fwd:cloudsec EU. AWS/cloud security, automation, DevOps and attack detection. Opinions are my own.
Rust Security 🦀 �... @RustSecurity
4K Followers 4K Following News about #Rustlang Security & Fuzzing. Not affiliated with @rustlang core team. 🎉 #Rust security Audit and Fuzzing training is now available 🥳
Ehsanoo @Ehsano00
10 Followers 754 Following
Andu 🇷🇴🇩🇰... @SonAndrada
220 Followers 441 Following Genuinely interested - Brutally honest at times @Bsideskbh @OWASPcph @[email protected]
Mahdi Mirsoltani @MirsoltaniMahdi
2K Followers 1K Following 🏍️ 🎾 :) #DFIR 🕊️ #Cyber_security #Data_Analyser
philippe owens @philippeowens1
2 Followers 761 Following
seyyid @__seyyid__
953 Followers 554 Following #تبریز Kazanan hiç olmadı hayat oyununda مثلا اکانت شخصیمه https://t.co/H11NBhIs5r https://t.co/jd0zgnyo2r
Rx @secoder_hunter
105 Followers 308 Following برنامه نویس از پشت ، محقق امنیت , اندک فعالیتی در جامعه FOSS💻🐧
Jallal @captain__jalal
287 Followers 821 Following
FuzzingLabs @FuzzingLabs
8K Followers 4K Following Research-oriented Cybersecurity startup specializing in #fuzzing, Vulnerability Research & Offensive security on Mobile, Browser, AI/LLM, Network & Blockchain.
xdevman @xdevman
532 Followers 1K Following
0ffxGo0d @0ffxGo0d
13 Followers 95 Following
linkerrors @fengjixuchui123
89 Followers 3K Following
Mohammad Torabi @mohtorab
54 Followers 490 Following A dad, husband, and have passion for Cyber Security, a Photo enthusiast
vmkernel @vmkernel
3 Followers 379 Following
Zest @zestexposed
368 Followers 3K Following Geek, Tinkerer, Maker & Breaker lecturer at @Afeka_College. Tweets and opinions are my own.
Timur Snoke @SecuriTimur
11 Followers 436 Following
gsong @gs0ng
10 Followers 1K Following
🅷🅰🅼🅴🅳 @Snbig_
319 Followers 2K Following
Aether113 @Aether113
11 Followers 1K Following
sky @m3hrd4d2
12 Followers 394 Following
Lili @Lili63678358
1 Followers 114 Following
F34.Black @f34_black
16 Followers 193 Following
Rick @Nt2Zw
6 Followers 1K Following
Omidam @Omidam20
29 Followers 828 Following
Hamid Kashfi @hkashfi
9K Followers 999 Following I do computers @ https://t.co/DKXRMmnzya . Previously Immunity Inc & Trail of Bits. Hobbyist photographer @[email protected]
Trend Zero Day Initia... @thezdi
83K Followers 16 Following Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Ben Sadeghipour @NahamSec
233K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
Nicolas Krassas @Dinosn
146K Followers 735 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3
James Forshaw @tiraniddo
49K Followers 339 Following Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
Hossein Lotfi @hosselot
6K Followers 60 Following Vulnerability researcher at ZDI (views are my own). Check #hosselot_tips for vulnerability research tips. 'A machine never faults. It reflects human's faults.'
Stephen Sims @Steph3nSims
24K Followers 832 Following Perpetual Student | SANS Fellow | Musician | Braggart Hater | Gray Hat Hacking | VR | 🏂 | deadcode | https://t.co/CadJehomsU
lcamtuf @lcamtuf
38K Followers 498 Following Substack: https://t.co/yFvmNisGW3 Homepage: https://t.co/iFAXZxCO5H
DirectoryRanger @DirectoryRanger
35K Followers 96 Following This account assembles and disseminates information related to Active Directory and Windows security.
Ivan Fratric 💙💛 @ifsecure
18K Followers 207 Following Security researcher at Google Project Zero. Author: Jackalope, TinyInst, WinAFL, Domato. PhD. Tweets are my own. Backup @[email protected]
Richard Johnson @richinseattle
18K Followers 3K Following Computer Security, Reverse Engineering, and Fuzzing; Training & Publications @ https://t.co/mloVP6rPB7; hacking the planet since 1995; Undercurrents BOFH
Soroush Dalili @irsdl
20K Followers 909 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, @SecProjectLtd founder 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Reza Zamiri @d3c0der
2K Followers 2K Following Computer science @Saar_Uni | Past @ CISPA | CyberSecurity Engineer
Samuel Groß @5aelo
24K Followers 501 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
CVE @CVEnew
56K Followers 3 Following Official account maintained by the CVE™ Program to notify the community of new CVE IDs. Posts contain abbreviated details. Full CVE Records on https://t.co/ALn4YvUtom
Ray Torabi @RayTorabi8
7K Followers 169 Following Ex-MEK child soldier and 18 year member. I share my extraordinary life stories and shed light on this cult's atrocities
Today In Infosec @todayininfosec
41K Followers 1 Following Tweeting news from the world of information security that occurred or was announced on today's date in a previous year. Managed by @stevewerby.
Daniel Cuthbert @dcuthbert
32K Followers 2K Following Documentary photographer, old creaky hacker. Co-author of @OWASP ASVS standard. Blackhat/Brucon Review Board & Co_chair UK Gov Cyber Security Advisory Board
Styrelsen for Samfund... @samfundssikker
10K Followers 22 Following Kontakt samsik@samsik. Pressen henvises til presse©https://t.co/F0sgnOuFM7
AWS Blog Unofficial. @AWSBlogUnreal
942 Followers 272 Following Unofficial Twitter feed of the #AWS Blog by @babypolitics. First time authors denoted by an *
Mastering Burp Suite ... @MasteringBurp
16K Followers 0 Following Tips and tricks for Burp Suite Pro Managed by @Agarri_FR | Not affiliated with @Portswigger More free resources at https://t.co/MWqXmV66lr
Solidity @solidity_lang
40K Followers 11 Following Solidity is an object-oriented, high-level language for implementing smart contracts. 🌐 - an @argotorg project
GCHQ @GCHQ
184K Followers 327 Following The UK's intelligence, security and cyber agency, helping to keep the UK safe online and in the real world. Follow the cyber security arm of our mission @NCSC.
shirts that go hard @shirtsthtgohard
1.3M Followers 771 Following DM for credit! I tag original creators whenever possible. Designs I sell are my own. We’re @/goodshirts on IG!
☣ KitPloit - Hacker... @KitPloit
119K Followers 3K Following Hacking and PenTest Tools for your Security Arsenal!
Donato Capitella @dcapitella
533 Followers 404 Following I'm a Software Engineer and Ethical Hacker, but mostly a tech enthusiast who likes to discover how things work by breaking them apart.
No Context Brits @NoContextBrits
1.8M Followers 0 Following A mordant celebration of British mediocrity according to the Washington Post. Contains sarcasm, irony and context.
Spy Collection @SpyCollection1
3K Followers 0 Following Videos/historical research on espionage, intelligence, counter-intelligence, and secure communications. Always seeking more spy gadgets and stories! Contact us!
AWS Security Digest @AwsSecDigest
1K Followers 15 Following 📥 Stay Up-to-Date on the latest AWS Security News with our Weekly Digest.
NASA Webb Telescope @NASAWebb
3.5M Followers 64 Following The world's most powerful space telescope. Launched: Dec. 25, 2021. First images revealed: July 12, 2022. Verification: https://t.co/ChOEslj1j5
AttackerKB @AttackerKb
917 Followers 15 Following Community-driven information, analysis, and discussion of vulnerabilities and threats. Part of the @Rapid7 family.
Hacksplained @hacksplained
12K Followers 35 Following Hacksplained is an intro to hacking by @PascalSec 📺 https://t.co/pVsQptuz2d 💖 https://t.co/uQl641e6Li 🥨 https://t.co/qh5mPse7N5
HackerRats - Uncle Ra... @theXSSrat
154K Followers 945 Following Alone we survive, together we prosper. Are you with me? https://t.co/AfnDsVhqqA
Paul Seekamp @nullenc0de
17K Followers 608 Following I spend a significant amount of time reading security stuff. Co-Founder/Partner @CoastlineCyber https://t.co/ZQT5L8q2RO
Nick Jones @nojonesuk
1K Followers 822 Following Global Head of Research @ WithSecure, Programme Lead @ fwd:cloudsec EU. AWS/cloud security, automation, DevOps and attack detection. Opinions are my own.
Rust Security 🦀 �... @RustSecurity
4K Followers 4K Following News about #Rustlang Security & Fuzzing. Not affiliated with @rustlang core team. 🎉 #Rust security Audit and Fuzzing training is now available 🥳
Alfie Champion @ajpc500
2K Followers 523 Following Founder at @delivr_to | Author of Practical Purple Teaming | Detection & Emulation at @github | Tweets my own
FuzzingLabs @FuzzingLabs
8K Followers 4K Following Research-oriented Cybersecurity startup specializing in #fuzzing, Vulnerability Research & Offensive security on Mobile, Browser, AI/LLM, Network & Blockchain.
Alexander Popov @a13xp0p0v
7K Followers 365 Following Linux Kernel Developer / Security Researcher / Free Software Maintainer. Admin of @linkersec. This is my personal account.
Brian Caswell @evilcazz
858 Followers 494 Following 'Boffin at Microsoft Research', Shmoo Group, and Sk3wl of Root. https://t.co/J4svCaqyCR
Microsoft Threat Inte... @MsftSecIntel
187K Followers 1K Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
Tom Van de Wiele @0xtosh
3K Followers 616 Following Principal Cyber Security Consultant • Hacker • Advisor • Speaker Founder Hacker Minded https://t.co/vUexQ0rpvQ | https://t.co/rMzYCRJQn0
Michal Melewski @carste1n
3K Followers 343 Following Security Engineer @ Cloudflare, ex-Google ISE, I use bad software and bad machines for the wrong things. My writing: https://t.co/Z7uucr5BYW
Mav Levin @MavLevin
3K Followers 876 Following hacked my high school's grading system, found 0days for national security, did @stanford, and still hacking ;)
Rado RC1 @RabbitPro
5K Followers 658 Following Exploitation, hardware, embedded, reverse engineering, automotive security. Pwn2Own Master of Pwn Flashback team (@FlashbackPwn).
Google VRP (Google Bu... @GoogleVRP
39K Followers 0 Following We ❤️ 🐜🐞🦗🦟🦋. {echo,{{{Google,Chrome,Android,Abuse,Mobile,OSS,Cloud}Vulnerability,Patch}Reward,VulnerabilityResearchGrants}Program}
Lucas Lundgren @Acidgen
1K Followers 351 Following Security researcher / exploit dev / pen- tester / security consultant.- My opinions are mine, and mine alone
Shodan @shodanhq
108K Followers 2 Following Monitor your external network, search the Internet of Things and perform empirical market research. You can also find us on https://t.co/nPLFbFy8R5
Tetrane @tetrane
1K Followers 1 Following Creator of REVEN - Timeless Debugging & Analysis Platform. Software Reverse-Engineering for Vulnerability & Malware Analysis Now part of eShard
THE Bookie Basher @TBB_666
3K Followers 57 Following Join THE Bookie Basher's VIP Friends NOW...Bet alongside a Professional...When you lose, I lose..Simples. No 30% cut to the bookies!...Email sent to YOU daily🤑