Co-Founder @neploxaudit. CTF team @C4TBuTS4D Security Researcher.
London
Joined December 2023
- Tweets195
- Following225
- Followers4.7K
- Likes324
Pinned Tweet
In 2024, I interacted a lot with Extensions.
I decided to create a resource that will help with a basic understanding of extensions and key attacks.
P.S. I tried to make everything as clear as possible and hope it won’t feel too overwhelming anywhere.
extensions.neplox.security/
slonser retweeted
> Highlights – the bugs you might find interesting:
0️⃣ PrivEsc TO Admin: through Privy Google account linking
1️⃣ Data Leak: when users can link the same address → they collide
2️⃣ Another sign-in flow + Privy / Google Auth bypasses = Account Spoofing
👉 link.neplox.security/nabu-au…
"We used to be magician on the board ... and now it's just like press a button and there's no mystery anymore" - @MagnusCarlsen on how chess changed once engines came along
I'm getting pretty much the same vibes from the AI in CTF...
(and IT/InfoSec in general)
slonser retweeted
Sometimes I feel like yapping about security issues; but not in a shitposting way - 🥀
So I recorded a series of videos – “Security Ensh!*$ttification”: each episode covers a certain hot topic + introduces you to research articles!
👁️ Ep.00 – Backdoors:
youtu.be/Uc8J81VZ6W0
I didn't really want to get involved in the discussion about the "death of CTF" because of AI.
But the conversations on Twitter keep going, so I'll express my thoughts in this thread.
For those too lazy to read — CTF will live on.
For the rest, I suggest reading the thread below.