Tanto Security

Tanto Security is a leading provider of advanced offensive cyber security services to leading organisations across Australia, New Zealand and North America.

[Tanto Security @TantoSecurity]

Our brilliant and talented Sam picked up a 4G industrial router from a second hand store, and as they say in the biz, what he found will shock you.

Check out the blow-by-blow as he wound up logged in to a "fake" root account. Full dets over on the blog: https://t.co/nENmrqb1C9

[Tanto Security @TantoSecurity]

@justinsteven
hits the main stage today at Kawaiicon. If you can’t be in Wellington the live stream is here: https://t.co/TFD8Upmgol. It’s going to be a lot of fun 🤩

Congratulations to Noah and Jesse for their awesome talk yesterday!

[ς๏гєɭคภς0๔3г ([email protected]) @corelanc0d3r]

🔥ℝ𝕖𝕒𝕕𝕪 𝕥𝕠 𝕓𝕣𝕖𝕒𝕜 𝕥𝕙𝕖 𝕤𝕥𝕒𝕔𝕜 𝕒𝕟𝕕 𝕡𝕨𝕟 𝕥𝕙𝕖 𝕙𝕖𝕒𝕡?

Corelan Stack (Feb 3-6) + Heap (Feb 9-12) in Melbourne 🇦🇺 — the ultimate exploit dev combo, back to back 💥

Do both = earn your shot at CCED 😈

Seats 👉 https://t.co/DckcMarpVW 

💛 Sharing = caring

[Tanto Security @TantoSecurity]

Are you going to be in or around Wellington on the 7th-8th November? Are you a student or currently unwaged? TantoSec wants to get you to Kawaiicon❤️

We have tickets to give away. They cover entry to the con only. Travel & accom aren't included. Send us a DM if you can make it😎

[Black Lantern Security (BLSOPS) @BlackLanternLLC]

🚨BBOT Security Advisory🚨

4 fresh CVEs (2 CRITICAL RCE) can give a clever defender RCE on your attack box if you’re on BBOT <2.7.0.

Hat tip to @justinsteven of @TantoSecurity for the catch. 🙌
Details 👉BLS Blog https://t.co/mo9BO00gyB
#infosec #CVE

[Tanto Security @TantoSecurity]

Tomorrow at @AISA_National CyberCon in Melbourne 👀

[Tanto Security @TantoSecurity]

@BSidesCbr is just around the corner and we've got six talks booked in. Starting tomorrow with CrestCon then 5 spots at BSides from Thursday to Saturday. If you are coming along come say hi and we'll have stickers and t-shirts to give away!

[Tanto Security @TantoSecurity]

We think @DownUnderCTF does incredible work, and Tanto Security is proud to have been a sponsor since 2023. Thank you friends for letting us pentest your new scoreboard, and we'll see you for DownUnderCTF 7 in 2026 🫡

[Tanto Security @TantoSecurity]

Tanto Security ❤️ @DownUnderCTF - and when they asked us if we could do a pentest of their new brand new CTF scoreboard we knew we had to say yes.

With their permission we are proud to release the full pentest report today! 👇

[Tanto Security @TantoSecurity]

@DownUnderCTF have published their annual infra writeup at https://t.co/LEmHDa7Kc6 and today's an extra special day, because they're open sourcing their scoreboard, noCTF! 🎉 we think it's pretty dang good (and probably pretty secure)

[Tanto Security @TantoSecurity]

🚆🚄🚅🚉🛤️🚃🚂
Training Alert!

We are partnering with @corelanc0d3r to bring his amazing exploit dev workshop to Melbourne for the first time. Want to take your exploit dev to the next level? Check out https://t.co/MUYhX0W98C Early Bird Discounts if you get in before October 1

[Tanto Security @TantoSecurity]

Always happy to be back supporting Australia's greatest HackerCon 🥷

[BSidesCanberra @BSidesCbr]

A big thank you to Silver sponsor & long-time friend, @TantoSecurity.

They’re back for their third year supporting BSides Canberra and the community, and have also contributed accepted talks to this year’s conference.

More at: https://t.co/9Cetsvf4i1

[Tanto Security @TantoSecurity]

Tickets are free for practicing professionals. Come along and learn yourself an AppSec! https://t.co/oOupXo6J7O

[Tanto Security @TantoSecurity]

Our Technical Director and co-founder @marcioalm will be at the Melbourne AppSec & DevSecOps Summit next week! He'll be pondering the changing nature of software assurance alongside @jksdua and friends of TantoSec @volvent and @pamoshea

[Tanto Security @TantoSecurity]

He ends up delivering a perfectly spoofed email, indistinguishable from one that would have been sent from within the victim organisation. Some of the tricks have been patched 🥳 some tricks haven't 👀 so grab a cup of tea and get busy reading 😁

https://t.co/X76yKr5Vyk

[Tanto Security @TantoSecurity]

It's blog post day! 🎉 Our email whisperer Ben Wilson has distilled his Outlook email spoofing journey from @BSidesCbr 2024 into a terrific post, walking you through the process of exploring niche email tricks that bypass anti-spoofing controls 👇

[Tanto Security @TantoSecurity]

Come check out @an1msh_ talk at BSides CBR in September.

[BSidesCanberra @BSidesCbr]

"Navigating Bug Bounties: From NAs to P1s"
Animesh Acharya shares the real story behind the stats, the quiet lessons between frustration and breakthrough. For anyone stuck, starting out, or seeking practical tips to level up their bug bounty game.
https://t.co/Ej8sUtStfl

[Tanto Security @TantoSecurity]

The Melbourne TantoSec crew got outside and touched some grass 🙌

[Tanto Security @TantoSecurity]

@DownUnderCTF @googlecloud @3xploit5ecurit7 @TrenchantARC @Division5io @VolkisAU @PentesterLab 🐶🙏