Ophion Security

Your offensive security partner. Unleash an automated hacker against your attack surface with Orion.

[Uranium238 @uraniumhacker]

Presenting on some fun stuff with @OphionSecurity this year at @_kernelcon_ and @bsidesseattle. Come for the talk, stay for the vulnerabilities. #vulnerabilities #bugbounty #attacksurfacemanagement

[Ophion Security @OphionSecurity]

Live chat histories contain treasure trove of data. From answers to security questions to credentials and more. We found a way to access it all in Cisco's Webex Connect. Read here: https://t.co/JcEA5TkyIE #vulnerability #vulnerabilitydisclosure #attacksurfacemanagement

[Ophion Security @OphionSecurity]

We are actively scanning Microsoft's GitHub organization and more than 150k repositories and 5k users. You can do the same for your organization starting today. Check out the demo: https://t.co/MATTse9807

#githubactions #githubsecurity #attacksurfacemanagement

[Ophion Security @OphionSecurity]

Thanks for the shout! We love all the episodes coming out! Looking forward to sharing more research blogs in coming months.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

New Episode is live covering the craziness with Zendesk and the nuances of how "informative" report disclosure should be handled.

Also, some badass write-ups from @OphionSecurity and a new song drop from @realytcracker!

https://t.co/rdqjO48QwK

[Ophion Security @OphionSecurity]

Endless security reviews, questionnaires, and compliance can be a nightmare when selling to enterprises. 🛡️ What if you could handle it all in one platform? Pentests, Questionnaires, & more. Check it out: https://t.co/GzsSffYipX #Cybersecurity #SaaS #SecurityCompliance

[Ophion Security @OphionSecurity]

A simple cookie value allowed disclosing chats of hundreds to thousands of users through a Live Chat integration. Learn more on blog one of two from our Live Chat security research. https://t.co/FbAfEHNQhq #vulnerabilitydisclosure #livechat #ophionsecuritylab

[Rojan Rijal @mallocsys]

Yay, I was awarded a $37,500 bounty on @Hacker0x01! https://t.co/5HTywrZaJU. Had a fun time hacking AWS at @HackerOne's LHE on Edinburgh. #TogetherWeHitHarder

[Ophion Security @OphionSecurity]

How should at-scale offensive scanning work? What values do they provide to companies? Checkout a recent podcast @mallocsys did with FireTail's Jeremy Snyder about it: https://t.co/bYHYIWTSwO

[Ophion Security @OphionSecurity]

That’s what we call 0 bullshit, no FUD hacking. Research ➡️ find vulns ➡️ write exploits ➡️ report.

[Rojan Rijal @mallocsys]

Flight from Vegas after Defcon got delayed…hacked for 2 hours during the delay…reported a P2 on Square…got paid. I love hacking. #bugbounty #hacking

[Rojan Rijal @mallocsys]

Flight from Vegas after Defcon got delayed…hacked for 2 hours during the delay…reported a P2 on Square…got paid. I love hacking. #bugbounty #hacking

[Ophion Security @OphionSecurity]

Increase your sticker game with these stickers next week at BlackHat and DEF CON. #hackersummercamp #defcon #blackhat2024

[Uranium238 @uraniumhacker]

Catch me at BlackHat and Defcon next week for some stickers! #defcon #blackhat

[Ophion Security @OphionSecurity]

There is no such thing as too much data when building context based scanners. More data -> more knowledge -> more research -> more vulnerabilities to identify and resolve 💻

[Rojan Rijal @mallocsys]

Currently monitoring almost 1million+ records and assets through automation in one of our test deployments. Might have automated too hard.

[Ophion Security @OphionSecurity]

Orion in the real world 🤩

[Rojan Rijal @mallocsys]

🛡️ Vulnerability of the Week: Going from High to Critical in 5 Minutes to get millions of customers' PII

When testing a company, I found a vuln where authenticated users could pass enumerable account tokens to access another user's PII: DoB, Address, Phone, Transaction history, account balances and more. #attacksurfacemanagement #bugbounty 🧵

[Ophion Security @OphionSecurity]

Traditional ASMs are too noisy and full of false positives. An offensive context-based approach to attack surface management reduces vulnerabilities and helps internal teams identify and mitigate more vulnerabilities. Learn how Orion can help you today. https://t.co/PCKFlhgNqN

[Ophion Security @OphionSecurity]

We had an amazing time at BSides SF meeting with everyone and discussing pain points with traditional attack surface management. Thank you for having us @BSidesSF! #attacksurfacemanagement #bsidessf

[Ophion Security @OphionSecurity]

That's it. That's the tweet.

[Ophion Security @OphionSecurity]

#walkthetalk

[Uranium238 @uraniumhacker]

Nothing better than when a product you have been developing for past few months finds another critical on a Monday evening.

[Uranium238 @uraniumhacker]

Nothing better than when a product you have been developing for past few months finds another critical on a Monday evening.

[Ophion Security @OphionSecurity]

Attack Surface Management should be proactive not reactive. Meet the Ophion team at BSides SF to learn how Orion can help you identify and monitor for vulnerabilities in your assets including supply-chain dependencies, SaaS deployments, on-premise applications and more. #bsidessf

[Ophion Security @OphionSecurity]

Ophion Security will be at BSides SF from May 04 - 05, 2024. Come check out our booth and learn how Orion, our Attack Surface Management product can be your offensive security partner. Check out our subscription packages at https://t.co/hkUqHriPVI