David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿

Penetration tester, amateur photographer, tinkerer of all things. Former co-host of @WeegieCast. All views are my own and not of my employer etc

[Luke Turvey @TurvSec]

VULNSY - A Pentest Reporting Platform for Security Teams

Built by pentesters, for pentesters.

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@maria_drutska You should really be blurring their faces :/

[Pentest List @pentestlist]

🚨 BUG BOUNTY HUNTERS 🚨 #bugbounty

Our newly added bug bounty content category needs submissions! Want be one of the first on here?

Submit a link to your most recent blog, video, podcast or any content you have, and we'll get it approved!

[Luke Turvey @TurvSec]

🚨Another insight into what's coming June 11th! 🚨

📺Community driven content submissions.

✅Constantly find the newest infosec content

Oh, and we're called @pentestlist for those guessing😉

[Luke Turvey @TurvSec]

Here's a glimpse of what's coming June 11th

Community driven tool submissions and ratings.

Quickly find the best tools for what you need to do.

What are your thoughts?

#infosec #bugbounty

[Luke Turvey @TurvSec]

🥳Releasing another tool🙏#bugbounty #infosec

allthewayback - enables the quick discovery of specific historical files from the WayBack Machine, which may contain sensitive data.

For example, you may search for old URL paths in archived robots.txt files or you may search for configuration data in archived .git or nginx.conf files.

https://t.co/I8m6H5pdKu

[Luke Turvey @TurvSec]

Releasing a tool today that I wrote over Christmas 🥳

You know how clients often don't have their API documented? Well, lets do it for them and in turn provide some extra value to your engagement.

Introducing, Burp2API. A tool that converts your Burp Suite target into a JSON that can be viewed within Swagger editor or imported into POSTMAN.

https://t.co/KrIcOqbPql

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

Wild, so wild.

[Farhan @mhdfaran]

OpenAI just released their Video Generator

They call it Sora

Turn scripts into scenes, concepts into visuals, and limitations into possibilities.

Check out these wild examples:

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@IAMKP @ccfest @billybragg @eddireader @CaseyKarancasey @SiobhanMillerxx I think you may have tagged the wrong Siobhan <3

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@TurvSec @ZephrFish @Lares_ @ghostie_ @SecEventsPen @_RayRT @InfoSecPS @myexploit2600 @s0lfer @WeegieCast

[Andy Gill @ZephrFish]

Shout out to my awesome euteam @Lares_

@ghostie_
@SecEventsPen
@TurvSec
@_RayRT
@InfoSecPS
@myexploit2600
@s0lfer

Aidans not on twitter but he’s the other half of @WeegieCast now.

And the newest member starting next week! @fuzz_sh

Here’s to another year of FAFO 🥳🤘

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@_mormaid

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@_mormaid https://t.co/iqzuxzOyP7.

[Cybergibbons 🚲🚲🚲 @cybergibbons]

After the #FlipperZero threads, there's been a few people questioning the ethics and legality of these devices, particularly with respect to NFC cloning.

I think explaining some of the history of NFC security - particularly Mifare Classic - attacks might help.

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@cornerpirate @guitarguitaruk Lovely inlays ❤️

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@McLabraid I could stop watching any time I wanted

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@CoreyD97 working just fine on Burp V2023.9.4 on another machine, so I think there must have been a conflict with another extension!

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@CoreyD97 hey mate! Stepper saved my test today so thanks for building that

Quick question if you don't mind, can you use variables from steps within the URL (i.e. /path/to/endpoint/$VAR:Sequence:Variable )

I tried every type of escaping I could think of but no joy haha

[David. 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @fuzz_sh]

@CoreyD97 It could very well be another plugin so that is a good shout! will experiment this afternoon and see if I can get it to work but good to know that it in theory should work ^_^

Honestly though, it was a damn site easier to use than Burp Macros for my purposes, saved my bacon

[Dave Cook @davescook]

Okay fine I’ll do the shameless thing;

I write a cyberpunk comic series called Killtopia that features real art by very talented humans.

It’s ideal if you’re into Cowboy Bebop, Akira, Ghost in the Shell and Battle Royale + more!

Check it out: https://t.co/4aoO3KVKD7