@appSecExp

Cyber Security | Penetration Testing | AppSec | Content Creator | Caffeine & Code.

 London
linktr.ee/appsecexplained
Joined August 2023
  • Tweets157
  • Following191
  • Followers2.3K
30Media
Every field in an HTTP message is a control surface or a leak. Learn this interactively: cristivlad25.github.io/cyber…

RFC 9110 · HTTP semantics read as attack surface

Read as attack surface: what RFC 9110 actually mandates, what it merely defines, and where the security folklore built on it outruns the document.

cristivlad25.github.io
2
21
1
126
12,796
Love getting to be a little piece of the community
Intigriti
@intigritiAug 26
We recently sat down with Intigriti Ambassador Ryan Bonner (Roll4CombatUS) to discuss his journey from overcoming career hurdles to becoming one of the most dedicated bug bounty hunters in the space. 🪲 Key highlights from the conversation include discussions on: • Why he prioritizes wide-scope programs. 👀 • His advice for programs for better researcher engagement. 💡 • The daily habit that changed his career. 🧠 Dive into the full story here. intigriti.com/blog/business-… hashtag#BugBounty hashtag#Cybersecurity hashtag#EthicalHacker hashtag#InfoSecCommunity
5
2
38
3,253
Alex Olsen retweeted
Jeremy Raper
@puppyeh1Aug 20
This is solid gold, send it straight to the Louvre 👏👏
Bart Mol
@Bart_MolAug 19
Me explaining AI to friends
10
71
3
1,174
642,500
Alex Olsen retweeted
JS0N Haddix
@JhaddixAug 14

An Essay: DEF CON Is Dead and Security Is Cooked… Or Is It?

Article · @Jhaddix
46
148
34
691
426,386
if you're not there, you can watch the live track
James Kettle
@albinowaxAug 7
90 minutes till "Can AI do novel security research? Meet the HTTP Terminator" kicks off at #DEFCON main stage 3! Watch the live-stream here at 1200 PDT youtube.com/watch?v=9go8jFHP…

DEFCON 34: Track 3 Talks

Watch track 3 talks live from DEFCON 34 in Las Vegas, Nevada. Visit...

youtube.com
1
5
2,011
after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room blog.teknogeek.io/posts/what…

What Happened to HackerOne?

The rise and fall of the largest bug bounty platform in the world

blog.teknogeek.io
23
181
21
824
160,377
Very nice badges this year 🔥 @BugBountyDEFCON @Jhaddix
2
2
26
2,018
Alex Olsen retweeted
Intigriti
@intigritiAug 4
Excited to share that Intigriti has been named the new provider for Adobe's Bug Bounty Program, effective September 1, 2026! 🪲 As our Founder and CEO, Stijn Jans, shared, “At Intigriti, we believe the strongest security comes from working alongside the hacking community. Our focus is on giving Adobe researchers an outstanding experience and supporting that community's continued growth. We are honored that they have chosen us as the new home for their Bug Bounty Program, and we see this as the start of a long and rewarding partnership.” To researchers: Create your Intigriti account ahead of September 1 to be ready when the program goes live. More details available on Adobe's Security blog. intigriti.com/blog/news/inti… #Cybersecurity #BugBounty #InfoSec #Intigriti #Adobe
1
3
1
68
8,132
Alex Olsen retweeted
Intigriti
@intigritiAug 3
We are at Security BSides Las Vegas handing out our exclusive CTF-style challlenge coin! Come grab yours at the PortSwigger both and try solving it to win swag! #HackWithIntigriti #DEFCON #DC34
3
65
7,325
New Armadin research is live! @0xc0ffee_ and I chained four weaknesses in ERPNext (Frappe) to go from a heavily restricted customer role all the way to Remote Code Execution. Full write-up: armadin.com/blog-posts/chain…

ERPNext kill chain: stored XSS to full RCE

Armadin ERPNext kill chain shows how stored XSS, a leaked CSRF token, and tar slip lead to total compromise

armadin.com
1
8
1
20
2,097
Thanks to @BadAt_Computers for organising the Austin meetup and of course @intigriti for sending me out & sponsoring the event!
5
3
2
28
3,340
Thank you for the opportunity @intigriti 🙏
Intigriti
@intigritiJun 17
Cristian Zot, better known as @CristiVlad25, needs little introduction. Active researcher, experienced pentester, and Intigriti Hacker Ambassador, he's a familiar voice on our Intigriti Office Hours podcast, a regular at platform meetups, and most recently took the stage at our Bounty Sync in London to lead a discussion on AI in security. Today we're continuing that conversation, with a refreshingly grounded take on using AI the smart way. Read the full interview, and his insights here👇 intigriti.com/blog/business-…
2
2
13
1,739
Alex Olsen retweeted
Intigriti
@intigritiJun 13
We're live at BSides Leeds! Come & pass by for some cool swag! 🤠
3
46
4,816
Alex Olsen retweeted
Intigriti
@intigritiJun 4
We're live at OrangeCon! 🤠 Come find us at the Bug Bounty Village (room 5) for a live CTF challenge, bug bounty talks, community, and of course, some cool swag! 😎
2
39
2,805
Come join me in Austin, Texas on June 20th. We will have fun talks, bug bounty hunting and networking while we are there! Thanks to @intigriti for sponsoring the meetup.
3
7
1
33
7,836
Bug Bounty Q&A is back! @busf4ctor & @BadAt_Computers are hosting a live QA session in a few hours, and this time with Alex Olsen (@appSecExp) from @intigriti + a rep from a bug bounty program! You can join us here: discord.gg/ctbb
4
1
47
6,044
lessgoo 🔥🔥
Intigriti
@intigritiApr 23
We're hosting BountySync + Social in London on May 21! 🤠 An evening bringing together hackers, customers, and security leaders for talks, panel discussions, and networking over food & drinks! 🧐 Whether you're deep in the bug bounty scene or just getting started, come connect with the community! 😎 Join us! 👇 go.intigriti.com/bountysync
1
1
6
1,804
Alex Olsen retweeted
Intigriti
@intigritiApr 8
We're hiring! 🤠 If you love triaging vulnerabilities, collaborating with top ethical hackers, and making real impact in cybersecurity, we want to hear from you! Join us at Intigriti as a Security Analyst and help secure the digital world by working with our global bug bounty community! 😎 Apply now to find out more (must be in the UK or EU)! 👇 intigriti.jobs.personio.com/…
11
20
4
223
19,596
Alex Olsen retweeted
Ciarán Cotter
@monkehackMar 20

Thoughts on the future of bug bounty

Article · @monkehack
3
13
1
81
7,562
I'll be live with @intigriti for office hours this Friday. Join us.
3
3
17
2,542
Load more