Visualize, operate & scale everything offensive security in one-platform.
Dover, Delaware
Joined May 2020
- Tweets1.5K
- Following17
- Followers11K
- Likes1.4K
A deleted key is still in the commit that added it, still in every fork, and still valid until somebody revokes it.
This workflow scans full git history across an org's public repos and ranks live-verified secrets first.
trickest.com/library/github-…
PaperCut NG/MF has an unauthenticated config-write to RCE chain on CISA KEV.
trickest.com/library/papercu…
Cloud tear-downs leave DNS behind. The record stays. The resource is gone.
Public fingerprint scanners miss gone cloud infra that never matched a takeover signature. This diffs the zones you enable.
trickest.com/library/multi-c…
Every web app has paths nobody linked to.
Directory & Content Discovery probes what's live, fuzzes paths from a run-time
wordlist, and reports what answered with status and size.
trickest.com/library/directo…
A WordPress site keeps changing long after it goes live.
Plugins get added, themes change, and security researchers find new vulnerabilities.
Keep the pace.
trickest.com/library/wordpre…
A quarterly pentest report describes a state that no longer exists by the
time it lands. The testers are not the failure. The calendar is.
trickest.com/blog/point-in-t…
Web AI Agent Audit Workflow
A chat widget on a public page is an attack surface. Offline evals do not probe it.
Workflow that audits embedded agents on list of URLs for injection, prompt leak, and role confusion.
trickest.com/library/web-ai-…
A Next.js assessment covers four advisory classes: middleware bypass, React Flight, image optimizer, cache traversal.
A workflow fingerprints the estate and runs each class on its own node.
trickest.com/library/nextjs-…
Workflows from the Black Hat Arsenal, ready to execute.
9 Library workflows you can fork, aim at your scope, and scale.
trickest.com/library/drops/b…
Methodology lives in your best people's heads. When they leave, it leaves with them.
A wiki page written in someone's last week does not capture the order of checks that actually catches the miss.
Encode the method as a workflow the company owns.
trickest.com/blog/institutio…
CVE-2026-65643 workflow reads each host's cPanel build and flags the ones below their branch fix.
trickest.com/library/cpanel-…
Subdomains outlive the things they point at. A staging bucket is deleted, a
SaaS trial lapses, and the DNS record stays behind aimed at a hostname nobody
owns.
trickest.com/library/subdoma…
Speed gets attention. Trust decides whether automation belongs in a security program.
The useful test is whether another operator can inspect the method, re-run it, and read the evidence later.
trickest.com/blog/security-t…
Trickest retweeted
One weak password. Full control.
Earlier this year, attackers opened a dam valve for hours. The press called it “sophisticated.”
The reality: an exposed admin panel and weak credentials.
Once you understand the process, execution is trivial.
theguardian.com/world/2025/a…
Trickest retweeted
If you need a list of trusted resolvers, e.g. to be used with puredns for active enumeration, @trick3st has a great one.
Just run this:
⌨️ curl raw.githubusercontent.com/tr… -O
More stuff at👇
github.com/trickest/resolver…
