d3fp4r4m @defparam

Opinions are my own github.com/defparam Joined May 2014

Tweets

4K
Followers

7K
Following

567
Likes

4K

d3fp4r4m @defparam

2 weeks ago

Between pwn2own, bug bounty and countless amount of sec eng hours invested in securing the web browser, meticulously locking down APIs and other client side exploits just to have product designers slap in an AI subsystem without a proper security review 😂 🍿

1 0 4 826 0

Johan Carlsson @joaxcar

3 weeks ago

@oegerikus @Xbow If you are gonna use H1 as a marketing platform and hint about ”use use instead of humans! just look at out stats” I would please ask of you to start releasing the cost of running this tool. It starts to feel like you are eroding the trust of researchers on these platforms

6 6 95 6K 4

XBOW @Xbow

2 months ago

Even mature products hide critical flaws – and @Xbow just found another one. CVE-2025-49493: XXE in Akamai CloudTest discovered during our climb to #1 on HackerOne. A complete technical breakdown from an error-based detection to a full exfiltration by @djurado9…

7 39 240 46K 92

Download Image

Ryan Barnett (B0N3) @ryancbarnett

4 months ago

I am ecstatic to announce that I will be presenting @ #BHUSA alongside my daughter (@4ng3lhacker)! "Lost in Translation: Exploiting Unicode Normalizations" We created this talk based on response & feedback from our @BugBountyDEFCON workshop last year. blackhat.com/us-25/briefing…

5 17 67 9K 13

d3d aka dead (dead, мёртв, 死了) @deadvolvo

5 months ago

I found a few more cl0 (malformed content-length) gadgets from fuzzing. I used Claude Desktop with Desktop Commander, Burp MCP and my own python tools to help narrow down possible mutations of templates that I know work. New gadget == New CVE affecting major company. (May 21) 😈

3 2 43 3K 8

Axel Souchet @0vercl0k

5 months ago

Woot, thank you @ahpaleus (& everybody else @trailofbits that contributed) for publishing a great walk-through about snapshot fuzzing & how to use github.com/0vercl0k/wtf in their Testing Handbook 🙏 Go check it out: appsec.guide/docs/fuzzing/s…!

Trail of Bits @trailofbits

5 months ago

2 8 70 15K 28

Download Image

0 29 91 12K 57

ytcracker.sol/.eth 🎤💻🔬🗝🏴‍☠️🤙 @realytcracker

5 months ago

i’m hiring elite hardware security nerds for planet hacking if you’re in to that sort of thing, email cv to [email protected]

23 37 169 17K 19

d3fp4r4m @defparam

5 months ago

Can I please pay OpenAI whatever monthly they want to get them to disable "Which response do you prefer?"

0 0 4 428 0

d3fp4r4m @defparam

5 months ago

Remember to AFL_PIZZA_MODE=-1 to know wth your fuzzer is doing today ;)

1 0 2 420 0

d3fp4r4m @defparam

5 months ago

Same for thought leaders

Tom Blomfield @t_blom

5 months ago

Same for thought leaders

625 811 11K 1.9M 3K

0 0 3 667 1

d3fp4r4m @defparam

6 months ago

wtf

0 0 1 395 0

Download Image

chompie @chompie1337

8 months ago

It’s not, but it absolutely could be.

Richard Johnson @richinseattle

8 months ago

It’s not, but it absolutely could be.

3 4 33 30K 1

15 7 148 45K 21

BINSEC Team @ Université Paris-Saclay, CEA, List @BinsecTool

7 months ago

How to detect backdoors efficiently? ▶️ Backdoors were found in firmware & open-source code ▶️ Detection requires much manual reverse-engineering ▶️ Fuzzers cannot see backdoors Our @ICSEconf preprint on finding backdoors with fuzzing is at binsec.github.io/nutshells/icse… A thread ⬇️

2 17 65 7K 22

Download Image

Richard Johnson @richinseattle

8 months ago

Well big news, Friday was my last day at Eclypsium, and I'm officially going all in on being fully independent and running my own companies. Some of you may have seen it coming as I registered my second LLC last month. I just got off a call and locked in a private fuzzing…

49 25 291 20K 29

Download Image

Trung Phan @TrungTPhan

8 months ago

meanwhile, European power sockets

European Commission @EU_Commission

8 months ago

meanwhile, European power sockets https://t.co/LbGEKUJt8H

5K 3K 31K 18.2M 2K

583 1K 15K 2.1M 1K

Download Image

Joseph Thacker @rez0__

9 months ago

🎉 Announcing ⇧Shift - The Cursor of Hacking @Rhynorater and I have been cooking up an awesome AI hacking tool and releasing it to beta testers starting today. ⇧ Shift is a Caido plugin that makes hacking faster and easier so you can make more money in less time. Read on 👇

14 71 404 61K 232

Download Image

James Kettle @albinowax

10 months ago

We’re finally live! You can now watch “Listen to the whispers: web timing attacks that actually work” on YouTube: youtube.com/watch?v=zOPjz-…

4 97 322 27K 140

Matt Brown @nmatt0

10 months ago

First time I've glitched u-boot by grounding out the flash chip during boot! Ending up getting a root shell on a TP-Link security camera 😄 youtu.be/F-G-7-qo7Xg #iot #hacking