turb0 @7urb01
CTBB Full-Time Hunters' Guild Member | Recovering AppSec Engineer | /((de)?bu(g+)?(ing)?)?/i Bits, bytes, and bad ideas https://t.co/0iE5bU44up Joined March 2024-
Tweets91
-
Followers1K
-
Following198
-
Likes284
@BadAt_Computers How long until you unlock your GoodAt_Computers form or at least DecentAt_Computers? Maybe even BadFor_Computers?
Some people's favorite shape is a circle. Others, a square. Mine is the shape of cross tenant cloud bugs. Research Review. youtu.be/XTuk3ZTs_So
🚨 CosmosEscape: We found a single key that unlocked every database in Azure CosmosDB One key >> Platform-wide impact. Microsoft fully remediated the issue. ✅ Read the full research and see how Wiz uncovered CosmosEscape: wiz.io/blog/cosmosesc…
New blog post :) 😊 hacking nethack to get #1 on the leaderboard! shout out to @7urb01 for being the inspiration josephthacker.com/hacking/2026/0…
Can't wait to see all the crazy new ways to achieve security impact with internet breaking techniques that get discovered by forking the approaches shared here. Research Review. youtu.be/WQc46XXuKdI
The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here -> portswigger.net/research/http-…
@monkehack Surely your agents are working while you're on this vacation, right??? Walk Away From The Screen Like Close Your Eyes Haha
Some people are just looking for an excuse to talk about JavaScript sandboxes at all times. I'm some people. Research Review. youtu.be/-de7dxdkacU
JavaScript Sandboxes: A Small and Casual Antipattern Review jamvie.net/posts/2026/07/…
I'm not sure which is crazier, the icy chain here or the fact that the prompt and setup was shared so freely that I can just toss at other hardened targets and get RCE. Research review. youtu.be/BNm_jF4jDwc
Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-cente…
@__jkbrah__ @busf4ctor If you want the forbidden HTBB swag, it is contingent upon sharing a bag
@monkehack Need a set of adjectives for different personalities to pull from to make them more annoying and less reliable.
Don't miss the workshop "Hacking IDE Extensions - VSCode Workshop" by Nick Copi (@7urb01) on Fri, Aug 7 at 10:30am inside the Village. Read more at bugbountydefcon.com/agenda #BugBounty #DEFCON34
These kinds of bugs are cool because such small discrepancies and have such huge impact. Research review. youtu.be/uzBPzMQiAE8
MAD Bugs: My Cousin Vinyl (CVE-2026-50052) So the story went like this: Squid was bleeding from a 29-year-old heap overread in her default config. Naturally, she did the only sensible thing: she called her cousin, Vinyl. It turns out Vinyl also had a family problem of his own.
Such a fun bug class to end up universal via an interesting delivery mechanism. Really liked the clever tricks used to force a working PoC without reusing precanned solutions. Research Review. youtu.be/9MeXS_b_Ahw
Pleased to publish a browser-related research paper (w/@inzo____) titled: One trigram at a time: XSLeak via Universal CSS Injection and DoS in Opera (GX) The title speaks for itself. Enjoy the read! zhero-web-sec.github.io/research-and-t…
We're excited to announce that Nick Copi (@7urb01) will be speaking at the Bug Bounty Village during DEF CON 34! Stay tuned for more details on their talk, you won't want to miss it. #BugBounty #DEFCON #BBV #BugBountyVillage
That’s a wrap on our Tokyo Live Hacking Event with @salesforce 🇯🇵 In the agentic enterprise era, collaboration matters more than ever. 10+ years of partnership. One shared mission: stronger security for the AI era. Until next time. #TogetherWeHitHarder
My misplaced PHPrejudice had me guess wrong on the root cause of this one. Research Review. youtu.be/nrqcP5ERX1k
On June 10th, we announced a critical auth bypass in phpBB, now CVE-2026-48611. Here's the technical followup with exploit scenarios and how to detect it. All it takes is one unauthenticated request to log in as any user, admin included, on a default phpBB install, no password
Insane hacker/feature type matchup here. 4x super effective. Great bugs, great tricks. Research Review. youtu.be/SEgUNWHXxrM
We've published a new blog post by RyotaK @ryotkak He discovered 8 methods to bypass safety mechanisms in Claude Code, leading to arbitrary command execution. We recommend updating to v1.0.93 or later to fix this vulnerability (CVE-2025-66032). flatt.tech/research/posts…
Didn't know about the buried bare repo trick here and feel like I've missed out on bugs because of it. Really clever bugs here and a lot of good tricks. Research Review. youtu.be/xC9jofFUWVQ
The written version of my BSides Riga and @bsidesvilnius talks is up: exploiting git integrations in cloud services, with four bugs I found in GCP (Looker, Dataform), including the one that won me MVH. nopnop.pro/2026/06/17/exp…
This writeup did a really good job establishing useful context and I now have a more clear picture of what I need to do to get a previously deadend bug reportable. So much cool work here. The title kinda undersells all the extra stuff. Research Review. youtu.be/PIpLLcPtGJw
👨🏻💻 Did you know that it’s possible to perform RCE in Internet Explorer via clickjacking? Igor Sak-Sakovsky's (@Psych0tr1a) new article will explain how! swarm.ptsecurity.com/the-click-that…
Кирило @kyrylo_dnp
0 Followers 77 Following
Ayoub ELMOKHTAR @aessadek
1K Followers 469 Following I strive to impress myself - senior offsec engineering / redteam at @Noon - opinions are my own
rameem_muhammed @rameem_muhammed
4 Followers 133 Following
@stpnwolf @stpnwolf
0 Followers 676 Following
Mike @Mike_at_Cantina
57 Followers 62 Following Leading tech recruitment @cantinaxyz + helping top Web3 projects make critical hires in their protocol and security teams
Chanditha @Chanditha139
0 Followers 12 Following
Sec_07 @SEC__07
2 Followers 215 Following
Oxdine @DINESHPrathi12
190 Followers 7K Following #CybersecurityResearcher #Ethical Hacking #Pentester #IoT #CodeReview #WirelessSecurity #Automotive #NatureEnthusiast
Jovi @realjowy
2 Followers 106 Following
Alogotron @2reb_fl
121 Followers 721 Following Contributing my little part to democratize AI, Privacy and Cryptography. Generalist https://t.co/TBaAZFON2X | https://t.co/8VCd1GfV0a
blazingcactus31 @blazingcactus31
0 Followers 269 Following
JBD @juss_ig
0 Followers 789 Following
sen @senpagax
248 Followers 2K Following
Matt Visher @MatthewVisher
10 Followers 225 Following 21 years in LE. I build open-source tools that make AI security agents verifiable: AAR + onvif-mcp. If you can't verify it, it won't hold up in court.
Dung Le @LTiDiii
921 Followers 856 Following FlySec Co-Founder: https://t.co/3ipcsYPW2y; Grind now. Greatness later.
PANDA @PANDA931955956
3 Followers 220 Following
insomnia1102 @KwanAleister
7 Followers 329 Following
Ed Hall @EdHall_NZ
20 Followers 233 Following Special interest in cybersecurity, national infrastructure protection, risk, all things cloud and modern delivery methods. All views are my own
Mahendra Rajput @100Mahendra100
5 Followers 223 Following
Younes Younes @the_rz1027
2 Followers 65 Following
Maor Gordon @GordonMaor
19 Followers 310 Following
test @securitytest02
7 Followers 607 Following
Omar Bani Essa @omaroo99
126 Followers 535 Following All that I know is I know nothing | Sea lover | Security Engineer somewhere@
Sregn @Sregn6
21 Followers 716 Following
Скрипткид @o_prozac
52 Followers 124 Following
Bristin Borah @borah_bristin
239 Followers 430 Following Protocol Lead. Privacy, Neutrality, and Resilience keeps me going.
MR_TONY (AR/VR) @TonyAr24358
1 Followers 289 Following
moe moeseph @MrxMoex
604 Followers 2K Following ”Meme Them Until They Cry Then Make Memes About Them Crying“ __Sun Tzu - The Art of Meme__ People say im a Bot Obviously Satire You Fool❤️
Hooman @Ahoomanman
58 Followers 1K Following
Ai Horizons @Horizoai
11 Followers 68 Following
Cr0wtl3r R4v3n @0x4ms
6 Followers 449 Following
tomate podrido @tomatepodrido41
7 Followers 1K Following
Dk Mn @m8elos
2 Followers 366 Following
remy🐀 @_mattata
7K Followers 3K Following Dad, Vuln Research, Packet poker. He/Him. DM's open, send me something cool you built. Top percentage Rattata.
Alex Birsan @alxbrsn
12K Followers 565 Following Views and opinions expressed here solely belong to my employer and are absolutely not my own.
Justin @Th3L4ughingM4n
28 Followers 171 Following “Be wise as serpents and harmless as doves.” || Security Engineer
Bgycrbstmp @BgyCrbStmp
18 Followers 255 Following Father, pentester, lockpicker, password cracker, puzzler, and hacker at heart.
Angel Montes @_N0xi0us_
2K Followers 675 Following Bug Bounty Hunter | Find me as n0xi0us in all platforms
Josip Franjković @JosipFranjkovic
6K Followers 1K Following I am an average Joe who enjoys breaking websites. My security blog: https://t.co/dtvxa0rjfw
Alisa Esage Шевч�... @alisaesage
41K Followers 76 Following Independent hacker, solo owner of Zero Day Engineering @zerodayalpha • Frontier exploit research, nationstate cyber & first principles systems
hashkitten @hash_kitten
4K Followers 190 Following vulnerability research @assetnote // hacking // codegolf // ctf with 🛹🐶
Gummi Kalli @Gummikalli3
28 Followers 14 Following
Nick Frichette @Frichette_n
7K Followers 2K Following Staff Security Researcher @datadoghq | DEF CON/Black Hat main stage speaker | Created https://t.co/QGWMJjuBzE
splitline 👁️🐈... @_splitline_
2K Followers 636 Following 友民党 / CTF with ${cYsTiCk} / script kiddie at @d3vc0r3 / Tâi-gí, zh-TW, en-US, es-PY / meow
Errant Packet @ErrantPacket
148 Followers 499 Following Danny Tanner x Neo with splash of captain morgan | General tech geek and tinkerer with red team flavor | ***personal account, tweets my own etc blah blah blah
ϻг_ϻε @steventseeley
23K Followers 562 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
Alex Olsen @appSecExp
2K Followers 191 Following Cyber Security | Penetration Testing | AppSec | Content Creator | Caffeine & Code.
Jaren @The1Jaren
4K Followers 501 Following
Hans-Martin Münch @h0ng10
1K Followers 874 Following CEO of MOGWAI LABS GmbH. I play CTF with powerpuffpwn.
sshell @sshell_
10K Followers 1K Following AI offensive security at @RunSybil (prev. @BishopFox). security research. ccdc red team. tummy ache survivor.
maitai @MaitaiThe
495 Followers 1K Following CTF @fibonhack | Pwn2Own 2026 | Security @Doyensec | Prev: @ShielderSec, bartender
SickSec 🇲🇦 🇵... @OriginalSicksec
9K Followers 402 Following I love GraphQL | Hackerone Ambassador 🇲🇦 | Tweets are my own | Riichi #Mahjong Player | Founder of https://t.co/9ELRuMo4HK
Thomas Houhou @Th0h0
428 Followers 1K Following Founder of DeepProof (AI for Formal Verification) | Security researcher - found vulnerabilities in @chainlink, @OpenAI, @AnthropicAI, @X | Cybersecurity @ETH
OmerAF @omer_asfu
690 Followers 27 Following Cloud Security Researcher | Founder @FocalSecurity | Hunting Cross-Tenant Vulnerabilities in Google Cloud
Starstrike AI @StarstrikeAI
399 Followers 6 Following AI security startup and research lab. Platform currently in development. Founded and led by @monkehack.
Kiro @kirodotdev
21K Followers 1 Following Agentic AI development from prototype to production. Kiro helps you do your best work by bringing structure to AI coding with spec-driven development.
hypr @hyprdude
3K Followers 856 Following vuln research+exploit dev | pwn2own {'24, '25}, Master of Pwn '25 | bordeaux enjoyer | friend of all cats | @SummoningTeam
Krzysztof Balas @zerodaykb
156 Followers 444 Following Christian | Full time father and hacker | Fitness freak | https://t.co/hqEMyuxSOc
EQST @EQSTLab
301 Followers 11 Following #SKshieldus: Korea's leading cybersecurity firm with 20+ yrs of tech expertise & a vast customer base. #1 in full-cycle services. Contact : 1800-6400
Xion @0x10n
5K Followers 131 Following CMU CSD PhD student & @QED_Audit | '24/'25 Top#0 Chrome Researcher | P2O Vancouver '24, TyphoonPWN '24/'25, ... | PPP, KAIST GoN '18, @zer0pts
Johann Rehberger @wunderwuzzi23
10K Followers 664 Following Hacking neural networks so that we don’t get stuck in the matrix. Builder and Breaker. Opinions are my own. https://t.co/ij8buvMaXg
xyzeva @xyz3va
21K Followers 225 Following (un)professional hacker. notably a puppy. read more stuff i did on my website
m0z @LooseSecurity
8K Followers 237 Following The greatest trick the devil ever pulled, was convincing the world that cyber security existed.
Jonathan Leitschuh - ... @JLLeitschuh
4K Followers 612 Following Inaugural Dan Kaminsky Fellow | Security Researcher for the OSS Ecosystem | Speaker | Dropper of 0days (Responsibly) | @GitHub Star ⭐️ | Opinions=Mine | He/Him
Ark @arkark_
2K Followers 882 Following Into experimental/deprecated features | CTF player | ex-traP
Sylvie @_sy1vi3
2K Followers 355 Following AhRZbVYwWVM1emVXeDJhV1V1Wm5scAoccUtabXB6NXVvSkg2TElPMXAzTWFuMU4ycGo9PQ==
Ryan Barnett (B0N3) @ryancbarnett
6K Followers 485 Following Web App Defender | Bug Hunter/Triager | Purple Team | Detection Engineering | Author | Senior Threat Research Manager @Akamai_research | OWASP Project Leader ✝️
drop @dropn0w
3K Followers 591 Following Offensive Security Consultant | HackerOne Ambassador for 🇧🇪 Belgium | Security Researcher | Views are my own
Avi @_naaash_
3K Followers 558 Following Accidental hacker | Pentester @hacker0x01 | Ex: @AppSecure @pentabug
Alexandrio @alexbindrei
3K Followers 524 Following Hacker | I try to hack things, or whatever. Memes are my own and represent my employer (me) | Formerly @microsoft & BB triage
You might like
