Senior Security Engineer, Blue Team @betterhelp ✨

Los Angeles, CA
Joined January 2014
Imagine being frozen 20 years ago and waking up this weekend to find Java is still and thing and it’s even worse than before.
10
23
6
251
btw I do Blue Team stuff over at @betterhelp now 💙
1
1
36
1,893
How’s that for your once every 3 year update?
8
218
I'm now a Staff Security Engineer at @gofundme and @classy 💖💞 🎉
39
3
1
266
35,021
Should I start posting more resources about AppSec? I’m down to start a blog series and GitHub repo if that’s something people would benefit from.
14
9
141
18,095
This is a gold mine of knowledge for anyone who is in AppSec or wants to be in Appsec. So many examples of challenges faced in the Modern Application Security Realm and what skillsets to arm yourself with to be impactful.
Jeevan Singh (@askjeevansingh) describes an #AppSec Engineer superpower -- teaching.
1
8
28
7,516
When your test payload ends up in production
77
777
88
5,706
337,883
Did infosec wake up and decide to be into praise or have we always been like this? Asking for a friend
9
4
42
13,072
When someone uses that cursed script™️ you wrote to solve a problem
8
2
75
10,289
How to make a Red Teamers day as an AppSec person: "Hey... so... I found some hashes"
2
15
5,439
Throwback to 2016 when I was talking about XXE at a conference and someone said it wasn’t a thing because they had never heard of it. Then it was in the Owasp Top Ten 2017. As of 2023 there are 879 Mitre CVE’s including the word XXE.
2
1
21
6,406
Moral of the story: listen to me 😎
3
11
1,665
Hi if ur reading this ur a cute and talented infosec professional Like and subscribe to claim ✨
18
8
211
35,204
This is so cute 🥰
i wanted to share the new pins i’m bringing to sjmade—the terminally embarrassed pin! have you ever debugged for hours just to find out that you left off a semicolon? have you ever accidentally committed a log line that outputs “poop”? join the terminally embarrassed club >_<
17
3,839
Nice approach for discovering XSS vulnerabilities (but also can apply in general as a process for bug hunting 🕵️‍♀️)
One of my first ever bug bounties was an XSS against a WordPress host. It wasn't anything super special but the process I used to find it is one that has yielded loads of bugs over the years. Here's how I found it 👇
2
3
2,383
In some org somewhere: > r u srs I can’t believe they said you didn’t parameterize the queries you would obviously NEVER > I didn’t 🤭🫣 > purr as u should queen tf period 👑
4
2,284
Dope Defcon opportunities for AI interested folks ✨✨
Hey hacker fam! The AI Village team are working on an EPIC event this year. 🥷 Talks 👩‍🔬 Labs 🎨 Art 🏴‍☠️ CTF 🎧 Music 🐞and a HUGE AI Red Teaming event🐞 We need volunteers! 👇🏼 docs.google.com/forms/d/1VzL… Oh did I mention free limited edition swag? 😉 @aivillage_dc @defcon
1
1
6
4,412
Google Bard considers me a “popular cybersecurity expert and meme connoisseur” and that’s all the validation I need.
8
39
5,335
Solid retweet thanks @cantcomputer for the morning chuckle
5
2,476
“Aren’t you worried about AI taking over???” >Me thinking about that time I asked ChatGPT for Spider-Man quotes and it was like “everything the light touches…. Is our kingdom”
1
2
17
3,226