CISO by day hacker by night, tweets are my own

Joined October 2007
Did you know you can detect technology from the CLI using httpx? 📡 Just use the <option> -tech-detect or -td when you next use httpx 🕵️ 🤩 Based on @Wappalyzer data! 😎 Install httpx for ✨FREE✨ 👉🔗 github.com/projectdiscovery/… Check out how easy it is! 👇
1
16
88
9,316
fng retweeted
Zebbler@zebbler12 Aug 2022
Got to play around on this massive corner LED wall for @defcon / @defcon_music 2022 with my mates @lovevisuals2 @bobertmax and DayDreemer. I think we made some fun loops for this awesome hacker con :)
10
30
5
203
This is what caused the fuss in the hallway at @defcon. We were doing business. Serious business, and then…things soured. #defcon #keepdefconweird
8
30
5
300
It took a lot of work, but I finally cracked the @defcon 30 badge. Volume up! #DEFCON30 #DEFCON
19
96
12
685
fng retweeted
DEF CON
@defcon12 Aug 2022
We have filled in some of the missing names from the #DEFCON 1 VW Bug! Thank you everyone:
2
24
1
179
from my point of view the most valuable tools for recon stage could be found in @pdiscoveryio they have amazing tools specially nuclei - httpx - naabu - dnsx - subfinder thanks for sharing these great tools 🙏🙏🙏
6
1
29
We just released a list of #infosec + #tech books we recommend and enjoy. If you’re looking to add to your reading list, check it out! Featuring books by @PhillipWylie, @kim_crawley, @HackingDave, @doctorow, @a_greenberg, & others. hubs.la/H0Knj7m0
9
56
3
124
We are #nowhiring for an Operations Coordinator! This role is based in #Tempe. For more details, see the job posting: hubs.la/H0JsjMx0
4
5
Landlord admitting to violating CFAA (18 U.S.C. § 1030) by entering in PII collected on lease agreement into a government website fraudulently claiming to be renter to illegally coerce stimulus check funds from renter. Lol @FBI here’s your easy catch of the day.
This Post is from a suspended account. Learn more
15
74
15
328
I’ve never seen a puppy pull a prank before and this was too cute not to share🐶
2,950
230,236
15,766
783,701
Just drop the RCEs, slides(@BlackHatEvents will fix soon) and blog of @mehqq_ and me's #BHUSA and #DEFCON talk - Infiltrating Corporate Intranet Like NSA: Pre-auth RCE on Leading SSL VPNs! Please check that and let us know if you have any questions! blog.orange.tw/2019/08/attac…
18
417
8
837
Knock knock. Whose there? ME 🖤
42
300
45
1,351
I put together a script to help you identify IP addresses registered && owned by a specific organization by looking up its ASN, then you can later run any port scanning tool on those IP addresses. Next? Integrate Nmap py module into the script. github.com/yassineaboukir/as… #bugbounty
9
112
2
292
When the exploit finally works after multiple tries but you’ve no idea why xitter.cf/round_boys/status/1098…
27
618
48
2,994
Thanks to everyone who came out yesterday at #BSidesSF to see @Justified_Salt + @sweepthatleg present "Twist & Shout: Ferris Bueller’s Guide to Abuse Domain Permutations." Download the slides here -> bit.ly/2tPIBj5 (Special thanks to @fng + @gwenyth_c for the sweet pics)
1
4
1
11
We’re disappointed in the decision to gut #NetNeutrality protections that ushered in an unprecedented era of innovation, creativity & civic engagement. This is the beginning of a longer legal battle. Netflix stands w/ innovators, large & small, to oppose this misguided FCC order.
4,614
216,035
6,171
570,119
"NO EVIDENCE OF UNAUTHORIZED ACCESS TO CONSUMER CREDIT REPORT DB, we just leaked name/SSN/birthdate for 2+ months"🙄equifaxsecurity2017.com/ xitter.cf/Equifax/status/9059187…
Equifax Inc.@Equifax7 Sep 2017
We recently discovered a cybersecurity incident involving consumer information. Once discovered, we acted immediately to stop the intrusion.
4
13
2
30