Assetnote (@assetnote) header
Assetnote (@assetnote) profile picture

Assetnote

@assetnote

Assetnote combines advanced reconnaissance and high-signal continuous security analysis to help enterprises gain insight and control of their evolving exposure.

assetnote.io
Joined July 2017
  • Tweets185
  • Following0
  • Followers10.9K
96Media
Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)Photo by Assetnote (@assetnote)
We are beyond giddy to be releasing tturl, the HTTP/2 CLI for finding tiny timing differences and winning request races. Our Director of Research @justinsteven can't wait to tell you all about it at @BSidesCbr today, 3:15PM on the main stage 😎 github.com/tantosec/tturl
GitHub - tantosec/tturl: The HTTP/2 CLI for finding tiny timing differences and winning request...

GitHub - tantosec/tturl: The HTTP/2 CLI for finding tiny timing differences and winning request...

The HTTP/2 CLI for finding tiny timing differences and winning request races - tantosec/tturl

github.com
6
11
661
Assetnote retweeted
hashkitten (@hash_kitten) profile picture
hashkitten@hash_kittenJul 20
Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-center/e…

Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25

Adam Kues used a $200 GPT5.6 Sol Ultra subscription to discover a pre-authentication SQL injection and full RCE exploit chain in WordPress Core – a chain that chains a batch API desync, cache...

slcyber.io
16
201
24
715
80,382
Thank you to our Bronze Sponsor @assetnote! We cherish your support greatly.
Image from DownUnderCTF (@DownUnderCTF)
1
1
12
2,444
🌟We're spotlighting a few members of our community this week for helping to keep TruffleHog secure by reporting vulnerabilities. Huge thank you to @rosenzweig_ and the @assetnote team! trufflesecurity.com/blog/con…
Contributor Spotlight: Helena Rosenzweig and Assetnote team ◆ Truffle Security Co.

Contributor Spotlight: Helena Rosenzweig and Assetnote team ◆ Truffle Security Co.

Members of the community working together to make TruffleHog more secure

trufflesecurity.com
1
2
18
3,539
Assetnote retweeted
Postman (@getpostman) profile picture
Postman
@getpostman23 Aug 2021
Postman OpenAPI Specification Lead Mike Ralphson (@PermittedSoc) and his team recently analyzed @assetnote's massive archive of nearly 200,000 @OpenApiSpec files. Learn what they discovered about the global API landscape: blog.postman.com/what-we-lea…
What We Learned from 200,000 OpenAPI Files

What We Learned from 200,000 OpenAPI Files

We looked at Assetnote's massive archive of OpenAPI files providing a detailed view of the global API landscape. See what we discovered.

blog.postman.com
14
2
29
Did you miss it? Nucleus and @assetnote recently announced a new integration. Learn more on the Nucleus Blog bit.ly/3sxSZId. #infosec #vulnerabilitymanagement #attacksurfacemanagement
Image from Nucleus Security (@nucleussec)
4
21
Assetnote retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_au21 Mar 2021
At @assetnote, we're looking for a senior API backend engineer. We protect hundreds of thousands of assets on a continuous basis for our customers, and you would be helping build out our Python Flask API with SQLAlchemy, Postgres and GraphQL. DMs open. apply.workable.com/assetnote…
1
28
3
67
I would like to welcome @BugBountyHunt3r, @assetnote, @yeswehack, @securitytrails as our GOLD sponsors for #NahamCon2021 on March 14, 2021 hosted on Twitch! RSVP Here: nahamcon.com
Image from Ben Sadeghipour (@NahamSec)
2
15
1
156
Assetnote retweeted
Corben Leo (@hacker_) profile picture
Corben Leo
@hacker_16 Feb 2021
Super excited to announce that I've joined @assetnote as a software engineer! Stoked to work with great people like @infosec_au and on an amazing product 🎉
25
5
310
Super excited about this one, the conversation can only be amazing when you have @caseyjohnellis @Bugcrowd @disclose_io, @pink_tangent, @philkernick @cqr @CxCyber, @mgianarakis @assetnote and Ed Farrell @mercuryiss. Jump into circuit board city now #AUCyberWeek2020 #gameon
AustCyber (@AustCyber) profile pictureAustCyber@AustCyber30 Oct 2020
What is vulnerability disclosure? How has it evolved over time? Join us in conversation with @Bugcrowd's @caseyjohnellis & a panel of experts to discuss #VulnerabilityDisclosure in the Australian & international contexts. Commencing at 11:30am AEDT: bit.ly/37UGKyn
Image from AustCyber (@AustCyber)
7
1
16
Assetnote retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_au14 Jan 2019
Just blogged about Gaining access to Uber's user data through AMPScript evaluation: blog.assetnote.io/bug-bounty… - @assetnote

Gaining access to Uber's user data through AMPScript evaluation

An obscure subdomain on Uber's attack surface exposed an internal AMPScript console, enabling extraction of user data via LookupRows.

slcyber.io
6
148
3
336
Our latest Snake Oilers podcast is up and it's the best we've ever done. We launch @assetnote, talk to @pedramamini abt InQuest's Deep File Inspection gear, then talk to Omaru Maruatona of @AiCULUS. They apply machine learning to API calls. Clever stuff! risky.biz/snakeoilers7pt2
Image from Patrick Gray (@riskybusiness)
4
7
13
Load more