Luke Turvey

Professional Hacker.
Founder of PenTest reporting tool infosec tools like Pokémon cards at:

[Luke Turvey @TurvSec]

VULNSY - A Pentest Reporting Platform for Security Teams

Built by pentesters, for pentesters.

[Luke Turvey @TurvSec]

@wesleytb13 I constantly recommend it to people who ask about getting into infosec

[Luke Turvey @TurvSec]

@infosec_fox On X, same. But i logged into LinkedIn and clicked that X real fast

[Luke Turvey @TurvSec]

@UK_Daniel_Card I guess it depends on your situation and how bright it gets. For me, my kids rooms get bright in the mornings and they would wake at like 5am. The blinds got us to 6-6.30, so made difference

[Luke Turvey @TurvSec]

@UK_Daniel_Card I got blackout blinds all upstairs last year to combat the early sun, would recommend

[Luke Turvey @TurvSec]

@RobWakes @UK_Daniel_Card Surname checks out

[Luke Turvey @TurvSec]

@UK_Daniel_Card Oh how the tables have turned, Daniel.

[Luke Turvey @TurvSec]

@UK_Daniel_Card Jacksons bread from waitrose is what I have eaten everyday for about a year now 😄

[Luke Turvey @TurvSec]

What I have found mad recently, is people are making web/mobile apps and end up needing a pentest.

I speak to these people and they have no clue how its all implemented, an AI had done 99% of the work.

Then because of that, I end up playing chinese whispers between them and their AI answering my scope questions

[Luke Turvey @TurvSec]

@UK_Daniel_Card I had 3 days of near 100 scores, was feeling great.

Then last night my oldest decided she doesn't want to sleep through the night tonight and woke me up at 12.30am, 12.50am, 1.30am and 2.30am.

[Luke Turvey @TurvSec]

@Frichette_n I always recommend doing @hackthebox_eu academy courses and the OSCP as your starting point.

HTB allows you to learn so much good stuff and the OSCP is a great first certification.

[Luke Turvey @TurvSec]

I've tested quite a few vibe coded web/mobile apps now and I've found they're actually quite good, generally. They're not perfect, but they are better than a lot of the brand new human written apps I've tested.

The being brand new matters, considering most of the work I do are annual tests that have been done to death and don't find much anyway.

I've only had a couple vibe coded apps that have been extremely bad. I guess that depends on the model the vibe coders used to make it.

The biggest bug for me is that every damn website looks exactly the same UI.

[Luke Turvey @TurvSec]

@ZackKorman @endingwithali Man this is so true. After years of doing scoping and sales calls, its so mad to me that some customers will have one call and agree a 100k deal

Then you have customers who want 72 calls over a month and a free lunch before they sign for 1k.

[Luke Turvey @TurvSec]

PoV: you sleep after being awake for 38 hours having done the @offsectraining OSAI exam.

[Luke Turvey @TurvSec]

@techspence More like time to sign up with another email address and buy a new max account hah

[Luke Turvey @TurvSec]

@marclou The worst was at my old gym.

Why are you taking an elevator when you are able and about to go do the step master anyway!?

[Luke Turvey @TurvSec]

@ZackKorman Almond when

[Luke Turvey @TurvSec]

@UK_Daniel_Card Agentic UI design goes brrrr

[Luke Turvey @TurvSec]

@hetmehtaa Yeah, its true. Ive found its quite hilarious that often you can believe you know a lot about something and then start looking more into it and end up realising you don’t know anything lol

But yeah, its impossible to keep up with everything.. and you dont need to