Penetration testing, red teaming, and security by design delivered by world-class cybersecurity experts.
Italy
Joined December 2020
- Tweets161
- Following5
- Followers273
- Likes92
HN Security retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release provides new APIs and bug fixes. Thanks to new and existing contributors @mcbbugu, Amaan Qureshi, and @0xdea for their work on this release.
github.com/idalib-rs/idalib.…
HN Security retweeted
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release adds compatibility with latest SDK (v9.4), and a couple of bug fixes. Thanks to @0xdea and @yeggorv for their contributions.
github.com/idalib-rs/idalib.…
HN Security retweeted
If I wanted to scan C++ with semgrep I always used @0xdea‘s rules, and they just got an upgrade!
github.com/0xdea/semgrep-rul…
Our Technical Director @0xdea just shipped v2.0.0 of his #Semgrep C/C++ ruleset, now officially included in the @semgrep registry.
This release brings new detections, fewer false positives & better performance, all put to the test on real-world targets.
hnsecurity.it/blog/my-semgre…
HN Security retweeted
Update from @0xdea on his semgrep rules set! I have been using his baseline repo for quite some time for automating binary analysis and often as a starting point for LLM enabled research.
Check out the latest here:
hnsecurity.it/blog/my-semgre…
Our Technical Director @0xdea just shipped v2.0.0 of his #Semgrep C/C++ ruleset, now officially included in the @semgrep registry.
This release brings new detections, fewer false positives & better performance, all put to the test on real-world targets.
hnsecurity.it/blog/my-semgre…
To wrap up #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance.
hnsecurity.it/blog/ai-report…
As part of #BurpExtensibilityMonth initiatives, last week our Research Lead and #BurpAmbassador
@apps3c gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Video, slides and code:
hnsecurity.it/blog/restoring…
#HNSecurity has brand new headquarters in #Turin!
A bigger space. A proper hacking lab, because our researchers deserve the right playground.
And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen. 👨🏻🍳
hnsecurity.it/
As part of #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c is joining @PortSwigger on @discord later today for “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Don’t miss it!
discord.com/events/115912411…
HN Security retweeted
Next week for Extensibility Month on Discord 👇
📥 Submitting extensions to the BApp Store
📝 Writing your Burp extension
🗣️ “Restoring Testability: Handling Complex Scenarios in Burp Suite with a Custom Extension” with Burp Ambassador, @apps3c
🆕 Deep dive on Swapper with the author, Dave Blandford
Join us on Discord as we continue celebrating Burp Suite extensibility and the community building around it.
discord.gg/portswigger
HN Security retweeted
To celebrate the @Burp_Suite Extensibility Month, the tenth article of the series "Extending Burp Suite for fun and profit - The Montoya way" is out! The topics of this tenth part is "Burp AI"!
Stay tuned for a new extension on the topic on @BApp_Store!
hnsecurity.it/blog/extending…
To kick off his collaboration with @PortSwigger as a Burp Suite Ambassador, our Research Lead @apps3c just published the 10th article on the creation of extensions for @Burp_Suite. Topic: Burp #AI!
hnsecurity.it/blog/extending…
HN Security retweeted
🚀 Extensibility Month is launching on the PortSwigger Discord!
Join us for a month of events, resources, and community discussion all about creating, sharing, and getting more from Extensibility in Burp Suite.
#BurpSuite #BurpExtensibility
HN Security retweeted
Meet the Burp Ambassadors: @apps3c 🇮🇹
Federico Dotta is an offensive security researcher with a deep focus on Burp Suite extensibility.
#BurpAmbassador #BurpSuite #BurpExtensibility #BApps
HN Security retweeted
You’ll soon see Burp Ambassadors contributing research, events, educational content, and community initiatives around the world. Read the full blog 👉portswigger.net/blog/introdu…
HN Security retweeted
Introducing the official Burp Ambassador Program! 🧡
@0xTib3rius @rana__khalil @apps3c @hAPI_hacker @soyel_mago
#BurpAmbassador #BurpSuite
HN Security retweeted
[1] mariusmue.com/research/2025-… by @danielklischies @nSinusR @noopwafel et al.
[2] binarly.io/blog/another-crac… by @binarly_io
[3] evilsocket.net/2025/12/18/TP… by @evilsocket
[4] hnsecurity.it/blog/streamlin… by @0xdea
[5] zionbasque.com/files/papers/… by @mahal0z @AnantaSoneji @adamdoupe et al.
[6] onekey.com/resource/how-we-t… by @onekey_sec @qkaiser
HN Security retweeted
happy new year 🚀
once again, I want to kick off the year by sharing some of my favorite firmware & low-level security research of 2025:
BaseBridge: Bridging the Gap between Over-The-Air and Emulation Testing for Cellular Baseband Firmware [1]
Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass [2]
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering [3]
Streamlining vulnerability research with IDA Pro and Rust [4]
An Empirical Study of Human–LLM Teaming in Software Reverse Engineering [5]
Understanding RTOS Firmware [6]
In this latest article in our long-running series on #BurpSuite #Extension #Development, @apps3c illustrates how to extend the Active and Passive Scanner in your favorite #WebApplication #PenetrationTesting tool with Custom Scan Checks:
hnsecurity.it/blog/extending…
Check it out!
HN Security retweeted
Hey developers and vulnerability researchers!
I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: github.com/0xdea/semgrep-rul…
Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.