Mars Tighter

PhD | Security Researcher | Threat Hunter | Red-teamer

[Mars Tighter @MarsTighter]

Every account gets 3 free scans per day, so you can start assessing your authorized targets in minutes.
Spend less time setting up infrastructure. Spend more time finding vulnerabilities.
Try it: https://t.co/XrdyHDC7jZ

[Mars Tighter @MarsTighter]

One of the goals behind PentStack is to remove the setup overhead.
You don't have to spin up a VPS, install tools, update templates, or manage scan environments just to start testing.
#cybersecurity #pentesting #bugbounty #infosec

[Mars Tighter @MarsTighter]

Once the port scan is complete, you can continue your assessment with other scanners in the same workflow.
What Nmap flags do you use most often?
https://t.co/XrdyHDC7jZ
#nmap #pentesting #cybersecurity #infosec #bugbounty

[Mars Tighter @MarsTighter]

Every security assessment starts with one question:
What's exposed?
That's why PentStack includes built-in Nmap scanning.
🔎 Discover open ports
🖥️ Identify running services
📌 Detect service versions
⚡ Use flexible scan configurations for different scenarios

[Mars Tighter @MarsTighter]

Whether you're hunting for a specific vulnerability or running a full assessment, you stay in control of how your scans run.
What Nuclei feature or configuration option do you use the most?
https://t.co/XrdyHDC7jZ
#cybersecurity #pentesting #bugbounty #nuclei #infosec

[Mars Tighter @MarsTighter]

One of the core features of PentStack is Nuclei integration.

✅ Access to 10,000+ templates
✅ Flexible scan configuration
✅ Customize tags, severities, workflows, rate limits, concurrency, headers, and more
✅ Built for both quick checks and comprehensive assessments

[Mars Tighter @MarsTighter]

2/2) I'm reading every reply, and the best ideas will make it onto the roadmap.
What would you build first?

[Mars Tighter @MarsTighter]

I'm building https://t.co/9lcJLOjHmb to make web application security testing faster and more useful for pentesters and bug bounty hunters.
If you could add one feature to PentStack, what would it be?
#cybersecurity #pentesting #bugbounty #infosec

[Mars Tighter @MarsTighter]

1/2) It could be:
• A scanner or tool integration
• A reporting feature
• AI-powered analysis
• Workflow automation
• Collaboration features
• Anything else that would save you time

[Mars Tighter @MarsTighter]

Whether you're spreading requests across multiple proxies, avoiding rate limits during authorized testing, or simply testing from different IPs, it's now built right into the scanning workflow.
Still in alpha, so I'd love your feedback.
#cybersecurity #pentesting #bugbounty

[Mars Tighter @MarsTighter]

If you're willing to spend some time testing it and sharing honest feedback, use code WELCOME50 for 50% off as a thank you.
If you're interested, reply below or send me a DM. I'd love to hear what works, what doesn't, and what you'd like to see next.

[Mars Tighter @MarsTighter]

After about a year of building, PentStack is finally in alpha!
I'm looking for security researchers, bug bounty hunters, and pentesters who'd like to try it out and help shape the product.
#cybersecurity #infosec #bugbounty #pentesting

[Mars Tighter @MarsTighter]

These guys can do better if working with a Threat Hunter/CTI expert. I hope they find their ways sooner since I know they do not even know how to stop these attackers. Don't be attack enabler, no excuses for FBI, bro. #CyberSecurityAwareness

https://t.co/qL7I4j7aao

[The Hacker News @TheHackersNews]

🔥 Wild find from Microsoft.

Even when your AI chats are encrypted, someone watching the network can still guess what you’re talking about.

They call it "Whisper Leak" side-channel attack.

And in tests, models like #OpenAI and Mistral gave away topics with 98% accuracy.

Worth your attention ↓ https://t.co/xdco1xgGeE

[Mars Tighter @MarsTighter]

Any idea for better alternatives to whatismyipaddress? #CyberSecurity

[Mars Tighter @MarsTighter]

https://t.co/L32HghxvgZ

[Mars Tighter @MarsTighter]

CISA extends funding to the NVD CVE program for 1 year. I think there will be confusion shortly about funding programs like this worldwide—a new ground for more community-based funding.

[Mars Tighter @MarsTighter]

@NahamSec 🤣🤣

[The Hacker News @TheHackersNews]

🚨 URGENT: New ransomware "VanHelsing" claims 3 victims in just 17 days since March 7th launch.

This RaaS operation charges newcomers $5K to join while letting experienced hackers in for free. Targets ALL major OS platforms with sophisticated "double extortion" tactics.

See the full story: https://t.co/X8s2LMwk7u