Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt. ➡️ https://xitter.cf/t.co/BOy1tiLLBr
Joined October 2016
- Tweets1.2K
- Following159
- Followers20.8K
- Likes2.6K
Ed retweeted
The Swiss Federal Government has adopted a report on ethical hacking referencing two @swisscyberstorm 2023 speakers: @EdOverflow and @_oakgul. Read the report here (in German and French): lnkd.in/dye5-qkY
Watch all SCS talks here: youtube.com/@swisscyberstorm…
#SCS23 #bugbounty
Ed retweeted
Where did you first hear about security.txt?
68%Twitter
6%GitHub
8%Conference talk
19%Other (comment below 👇)
167 votes • Final results Ed retweeted
How do you pronounce "security.txt"?
65%security dot "T.X.T."
22%security dot "text"
10%security "text" (no dot)
3%Other (comment below)
745 votes • Final results
Ed retweeted
I love that the Dutch government is actively promoting security.txt and encouraging companies to establish a route for reporting security incidents 😊 /cc @EdOverflow digitaltrustcenter.nl/nieuws…
Ed retweeted
Where can ethical hackers report vulnerabilities at your organization? Publish a security.txt file and test it with Internet․nl.
Check the new @securitytxt test: en.internet.nl/article/secur…
@DTC_NL @AlertOnline #cybersecuritymonth
ALT Picture with green check mark and text "security.txt"
Ed retweeted
💡 Want to support security.txt?
Consider contributing to the Wikipedia page: en.wikipedia.org/wiki/Securi…. 🙏
Ed retweeted
Day 40 of #100DaysOfHacking
I read an interesting writeup on DOM XSS by @EdOverflow xitter.cf/EdOverflow/status/1490…
which gave me some ideas to try on JS.
The goal was to get your payload placed in window.location.href can lead to DOM XSS, so I started looking for the instances of ...
New blog post: "What Bypassing Razer's DOM-based XSS Patch Can Teach Us" — edoverflow.com/2022/bypassin….
Ed retweeted
IT Security team from @ameli_actu (French public Health Insurance) has launched its blog site to contribute back to the Security community its (little) experience:
assurancemaladiesec.github.i…
First post: our @securitytxt implementation - assurancemaladiesec.github.i…
RT appreciated :)
Ed retweeted
As much as I've railed over the years about how hard it is to notify so many companies about legit security issues and breaches, this post was long overdue. krebsonsecurity.com/2021/09/…
Ed retweeted
‘Soft skills are the most under-researched area of the bug bounty industry’ – ‘Reconless’ YouTubers (@0xReconless ) on filling a gap in infosec education portswigger.net/daily-swig/s…
Ed retweeted
After a long journey, the @securitytxt draft by @EdOverflow is finally moving forward to the next step in the standard process (IESG evaluation): mailarchive.ietf.org/arch/ms…
Ed retweeted
Find an XSS on an out-of-scope/sandboxed domain? Check how Cookie Tossing helps demonstrate the impact in this new @0xReconless video! Featuring @S1r1u5_'s bug on Google AI Hub where he abused a hidden feature in Tornado Web Server on JupyterLab.
youtube.com/watch?v=tl6JCLAj…
Ed retweeted
I called @LiveOverflow, @EdOverflow TWICE on my stream so far.. :/
Ed retweeted
How easy is it to tweet as somebody else? The recent Twitter hack motivated us to cover some previous security issues in Twitter that could have been leveraged to target high-profile accounts too.
youtube.com/watch?v=yVgfF_Yu…
Ed retweeted
Another walk-through video on how to solve @intigriti's June XSS challenge! A real life bug on URL validation and bypassing via RegExp and IPv6.
youtube.com/watch?v=KpkrTUHo…
Ed retweeted
I've become a YouTuber (not really)! My first video on
@0xReconless
on how to solve
@intigriti 's latest XSS challenge in Firefox with an RPO attack.
youtube.com/watch?v=0-sA_kAV…
@EdOverflow
@ngalongc
Ed retweeted
🔴 LIVE MENTOR SESSION: @EdOverflow will answer your questions for the next 3 hours! Comment with your question! 👇
Ed retweeted
📣 We’ll be hosting an exclusive Twitter Q&A session with @EdOverflow, tomorrow! 🐸
🕒 Fri May 22th, 3 - 6 PM CET
💬 Got questions for Ed? Post them below! 👇