>be me
>find exposed phpinfo file with ssh/sftp/database creds, private keys, & tokens during external pentest
>creds work & give access to customer data
>contact customer
>customer devs working w/ 3rd party tool
> 3rd party tool: “oh yeah it’s supposed to be public”
>???
10
8
74
Replying to @Cl0uddStrife
0
0
2
Did anyone else go for the immersive @defcon experience
5
2
88
Omg I found @_nextjenn
3
2
89
1 hour until “Hook, Line, & Pretext”workshop! Come learn how to create an effective phishing email in room W320
7
3
185
Going to DEF CON and need something to bring back to work? Come to @sec_defcon’s workshop & leave with a customized phishing pretext 😈

Only the first 42 in line get in!
Aug 8 • 1:30–3:00 PM • SEC Labs W320
1
5
27
Somehow this still counts as touching grass
3
0
47
Replying to @VillaRoot
@VillaRoot Sneak peak
0
0
2
I promise I was happy about this (..again)
Another most excellent panel at #SDCC is in the bag.

Thank you to @BHinfoSecurity @REKCAHComics @_nextjenn @adamcecc and Joe Keatinge, our amazing moderator.

Appreciation to @bishopfox for the time and support.
5
2
29
Surprise!

SO excited to speak with @AletheDenis at San Diego Comic-Con.
We are BACK at #SDCC this year with @REKCAHComics and a couple surprise guests on our panel this year. I couldn’t be more thrilled! More details to come!

Appreciation for @Dent @bishopfox @Antisy_Training @BHinfoSecurity and @comicsthemag and Joe Keatinge for moderating!
0
2
14
Replying to @ZackKorman
@ZackKorman “like everyone with a twitter account and a Claude max subscription in early February, I wrapped that shit in openclaw for no reason” - @bngrsec youtu.be/2GeUAyxQoL8?t=…
0
0
1
Replying to @FBIWFO
@FBIWFO I think u missed a spot
1
0
1
Replying to @ZackKorman
2
0
14
Replying to @IceSolst
0
0
5
Rootin? Haven’t heard that name in years. Only tootin’ round here partner
0
0
15
Replying to @BowTiedBroke
@BowTiedBroke liv luv chainsaws
0
0
0
Replying to @techspence
@techspence yeah like those darn physical pen testers
0
0
2
Replying to @bngrsec
@bngrsec @RachelTobac Top two scores
1
0
2
WTH - they walk among us.

The alleged perpetrators used the ALPHV, or BlackCat, ransomware strain to target five U.S. companies between May 2023 and April 2025.
0
0
13
Replying to @ush1c
@ush1c I hope he gets a visit from the tooth fairy soon!
1
0
2
Replying to @BadAt_Computers
1
0
2
Replying to @DSGNYY
0
0
1
Replying to @mathew_dev
@mathew_dev thx I am waiting for the call
0
0
2
Replying to @KeilHubert
0
0
2
Replying to @PrivacyLawyerD
0
0
2
Replying to @billycontra
0
0
2
Replying to @bngrsec
@bngrsec *coughs in iPad kid*
0
0
1
Replying to @DanBalitewicz
0
0
1
Replying to @n00py1
@n00py1 @dasgrog You really think Facebook would do that?? Ignore privacy choices?
0
0
3
Replying to @DanBalitewicz
@DanBalitewicz Using Facebook in a browser is a much safer option
1
0
1
Replying to @austeregrim
0
0
2
Replying to @Jun34u_sec
@Jun34u_sec From iOS app:
1. Go to “Menu” in the bottom right corner
2. Click the “Settings” icon in the top right
3. Click on “Camera roll sharing suggestions”
1
0
4
If you/friends/fam have Facebook app installed, check these settings as FB is silently switching them on
7
15
55
Replying to @DuncanCitizen2
0
0
2
Replying to @TipsyBacchus
@TipsyBacchus There’s a hint in picture to figure it out;)
1
0
2
Replying to @bngrsec
0
0
1
Replying to @ZackKorman
@ZackKorman Yeah, y’all should do that
1
0
6
Aways test your pretexts by social engineering your way onto a reality tv show
#SecurityHumanAwarenessMonth #SHAM
2
1
20
Replying to @Alph4betSoup
@Alph4betSoup Most recent, not even close to the most deranged
2
0
2
Once again:
Microsoft is testing AI facial recognition for your photos in OneDrive.

The feature is enabled for those with early access.

You can easily turn this off...but only 3 times a year? 🫠

Toggle this off in Privacy and Permissions.
3
0
26
Replying to @rekdt
1
0
2
Replying to @rekdt
1
1
7
Replying to @cheddar420yolo
@CheddarB0b42 bruh don’t tell them
0
0
4
Replying to @shenetworks
@shenetworks it’s been a hard week:(
0
0
2
Replying to @LayalJebran
@LayalJebran @WWHackinFest I spent too much time finding these pants, tysm 🫶🏻
1
0
2
Replying to @JC_SoCal
0
0
3
Replying to @bngrsec
0
0
1
Replying to @ednas
0
0
3
Replying to @Cl0uddStrife
@Cl0uddStrife sometimes the rbf wins out
1
0
3
It’s been real deadwood
3
0
60
.@AletheDenis bringing back YOLO in the best possible way
1
2
21
Replying to @UK_Daniel_Card
1
0
2
Replying to @agent_duckman
0
0
2
OSINT challenge
11
1
34
Replying to @AbuDhaar1
@0xmadvise
0
0
1
Sneak peak of meme featured in my WWHF talk
0
0
9