Penetration Tester. Art passionate. Friends call me "grandpa".
Joined January 2015
- Tweets449
- Following52
- Followers48
- Likes347
Nicolò Fornari retweeted
My wish for 2026 is that we move beyond pelicans and vibes-based oneshot web apps for model evaluations. Let them spend 2 hours implementing a detailed spec on a real-world project instead.
In my testing, gpt-5.2-xhigh >> opus-4.5 >= gemini-3-pro-preview.
Nicolò Fornari retweeted
In a new video, Nicolò Fornari walks through how to fuzz with AFL++, how to pick targets, avoid common pitfalls, and boost effectiveness. Find performance tips, fuzzing theory, and AFL++ internals. youtu.be/L5Tin7m5sbE?si=D0IL…
#security #fuzzing #AFLplusplus #appsec
Nicolò Fornari retweeted
LLM-based vuln hunting just leveled up with xvulnhuntr - a fork of vulnhuntr with support for: C#, Java, Go. Read @rationalpsyche's blog post and go grab the project on GitHub.
blog.compass-security.com/20…
Nicolò Fornari retweeted
We won't be using this account actively anymore. You can stay connected with us through:
Our Website: osintswitzerland.ch/
LinkedIn: linkedin.com/company/osint-s…
Discord: discord.gg/FTTNyGe9ta
Bluesky: bsky.app/profile/osintswitze…
We’d love to see you there! Thanks for your support!
Nicolò Fornari retweeted
I talk to a lot of people who just use the "For you" timeline on X, and get baited into a permanent state of simmering rage by what they see there. The amount of time you should be spending on "For you" is ZERO - interact with X through curated lists and "Following" only.
Nicolò Fornari retweeted
🦋🔵Did you know that we are now also on Blue Sky? Follow us for updates on cutting-edge supercomputing, science breakthroughs, and tech-driving innovation: bsky.app/profile/cscsch.bsky…
Nicolò Fornari retweeted
Turns out WhatsApp does NOT have end-to-end encrypted backup enabled by default. Your backups are stored cleartext on cloud, which means the E2EE in chats are essentially a joke, if you backup.
That's FB just being an ass and sneaky IMO.
Nicolò Fornari retweeted
Threema 2.0 for desktop (beta), which was audited by @cure53berlin earlier this year, recently passed a bug bounty challenge and is now open source: threema.ch/bp/threema-deskto…
Nicolò Fornari retweeted
We're joining a promising platform to reach more interested OSINTers and learn from each other.
Our association is now also on Bluesky. You can find us at bsky.app/profile/osintswitze…
We will be more than happy if many of you will also join the conversation!
Nicolò Fornari retweeted
You can also find me there:
bsky.app/profile/sploutchy.b…
Nicolò Fornari retweeted
Paged Out! Issue #5 is out now!
pagedout.institute/?page=iss…
Happy reading!
Please RT and tell your friends! :)
Nicolò Fornari retweeted
If you're following me here, I'm also posting @halvarflake.bsky.social bsky.app/profile/halvarflake… -- and on mastodon, too.
Nicolò Fornari retweeted
The entire 3rd-edition of @rossjanderson's "Security Engineering" is available free as PDFs now!
cl.cam.ac.uk/archive/rja14/b…
Nicolò Fornari retweeted
Interesting talk worth watching about DAST at scale. MS basically went full circle between old solutions like parsing code to modifying built env to generate OpenAPI specs to feed DAST tools, to use AI to consume code & produce that. None works as expected at scale. What works?--
Take a rare look inside how Microsoft is working to use automated reverse engineering techniques to secure its own web services!
youtube.com/watch?v=kfuOzDwv…
#BlueHat
Nicolò Fornari retweeted
We've just released our 2024-Q3 edition of ThinkstScapes: thinkst.com/ts
For this issue, we went through ~5000 info-sec research talks, papers, presentations & blogs.
The website includes PDF & ePub links (and a brief audio summary).
As always: completely free...
Nicolò Fornari retweeted
I’ve 40 times less followers on @bluesky but I don’t give a f*ck 🤷♂️
Why?
- the moderation team is efficient
- 3rd-party clients are welcome
- there’s no ads
- the mood is much better
Unless you really want to show your support for Elon, give it a try!
Nicolò Fornari retweeted
EV charger, despite being recently included in exploitation competitions as a target, are still an underrated and underestimated target at scale. They store (and expose to the street, literally) your sensitive info like WiFi password, among other things. Pop 5-6 brands and —
Tutorial on EV charger firmware extraction, analysis, and Emulation
github.com/onekey-sec/BHEU23…
#embedded #cybersecurity
Nicolò Fornari retweeted
12 years ago my life was saved by Hurricane Sandy when I was supposed to be in a building performing incident response that got blown up.
There are not many public stories of physically targeted incidents directly related to cybersecurity but they exist.
This is the story
Nicolò Fornari retweeted
Don't panic now, but LLM-based agent discovered a previously unknown real-world vulnerability. Details in googleprojectzero.blogspot.c…
