╪ͥ͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋ ◯ ⃝ ⃝ ⃝ ⌨ ⁰☠ ☂ ☺ ♬

Joined April 2008
210 Photos and videos
Cheers to 11 years of AppSec Ezine! 🎉 Huge thanks to the security community for sharing and the supporters who made this journey possible. Here's to another year of knowledge-sharing! 🚀 572nd Edition: pathonproject.com/zb/?871f09… Repo: github.com/Simpsonpt/AppSecE… #AppSec #Security

6
23
82
8,797
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
27 Oct 2025
thanks to everyone who attended my #TheSAS2025 talk "Typographic hit job: when fonts pull the trigger". 🙏 I've written an accompanying blogpost that goes over all the details: haxx.in/posts/2025-09-23-can…
4
42
137
16,616
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
20 Oct 2025
HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo:
22
182
1,252
139,677
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
If you want to learn how to construct epic payloads like this? You need JavaScript for Hackers. Requires this hash: #<img/src/onerror=alert(1)> amazon.com/JavaScript-hacker…
2
10
65
15,265
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
pagedout.institute/ ← we've just released Paged Out! zine Issue #7 pagedout.institute/download/… ← direct link lulu.com/search?page=1&pageS… ← prints for zine collectors pagedout.institute/download/… ← issue wallpaper Enjoy! Please please please RT to spread the news - thank you!
6
127
280
97,244
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
25 Sep 2025
ChatControl wants to scan all your private messages metalhearf.fr/posts/chatcont…
1
8
1,066
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
20 Sep 2025
Ok guys, and that's it for this year! PraSec "11"th edition concluded yesterday. We hope you had a great time. Again, we thank our speakers and attendees for super atmosphere. See you in a year!
4
9
937
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
So… I was hacked. Pwned. Big time. And I’m not kidding. It turned out to be the very same malware used in massive DDoS campaigns against DeepSeek and Twitter (erm… X). It was RapperBot... I was angry with me and with the malware. Honestly, more with me than with the malware. This is my story of how I dove deep into its guts, from infrastructure mapping to binary analysis, and what I uncovered along the way. Buckle up and grab some IOCs: bitsight.com/blog/rapperbot-…

9
25
116
20,149