Pinned Tweet
Made it onto the Twitch security page (twitch.tv/p/security) :D
the manhunt after the disappearance of a lady in honor of the famous comedian @normmacdonald's death has finally come to an end, resulting in two very, very shallow graves.
Johan retweeted
Write-up of CVE-2015-1287 and CVE-2015-5826: Data exfiltration abusing CSS + UTF-16, one of my greatest findings! blog.innerht.ml/cross-origin…
Johan retweeted
“Friendly Fire” medium.com/@mubix/friendly-f… #rant
Johan retweeted
Warning: the IE's UXSS comes back. Please stop using IE immediately!
blog.innerht.ml/ie-uxss/
Johan retweeted
CSP gotchas, bypasses and what remains when XSS is killed. Featuring a writeup of Twitter's CSRF token exfiltration blog.innerht.ml/csp-2015/
compilation of lists used for pentesting (e.g. passwords, usernames, XSS fuzzing, etc.) github.com/danielmiessler/Se… from @DanielMiessler
"I will say it wasn't technically challenging though." — dude rewarded with 1,000,000 flier miles for reporting vuln to United Airways
Any of my followers have experience with SQLi in Rails by making calls to the ActiveRecord library? If so, let me know #rubyonrails
@virus nah it's Spanish. 90% of my random mentions are in Spanish. It's an undocumented phenomenon.






