.joward

Pentester & Security Researcher

[.joward @jowardsec]

@dropn0w

[.joward @jowardsec]

@dropn0w Thank you! The way MySQL handles type casting is new to me, so I thought this one was pretty funky. Thanks for running the recon for this one haha.

[.joward @jowardsec]

Very pleased to share a recent CVE of mine, CVE-2026-30849:

https://t.co/WvrBOpIdix

[.joward @jowardsec]

@ArchAngelDDay Check out Consumed by Benjamin Barber

[Ryan Zagrodnik @TheL0singEdge]

Three years ago we started https://t.co/L3Mbr35367. Today we’re announcing https://t.co/IAJ9Tx7XfA. A cybersecurity conference for the people based on DerbyCon (RIP) and Thotcon (Chicago). Let’s build a community together. Hack the planet!

[drop @dropn0w]

If you know someone who knows someone who knows someone at DEFCON looking to trade workshops, pass this on:

I am looking for “From Prompt to Protection: A Practical Guide to Building and Securing Generative AI Applications” workshop ticket, I can trade for “Advanced Ghidra Scripting & Automation.” 😎

Thanks for the help!

#defcon33 #defconworkshop #defcon

[drop @dropn0w]

🚨 It’s happening tomorrow at @_leHACK_ !

I’ll be giving my talk on 𝐀𝐈 𝐑𝐀𝐆 𝐒𝐲𝐬𝐭𝐞𝐦𝐬, where I’ll introduce a technique I developed to extract hidden information from RAG systems, called 𝐔𝐩 𝐚𝐧𝐝 𝐃𝐨𝐰𝐧 𝐓𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞.

🧠 In this talk, we’ll dive into the inner workings of Retrieval-Augmented Generation (RAG), expose potential attack vectors, introduce the Up and Down Technique, and walk through practical mitigation strategies.
📍 Join me at @_leHACK_
🗓️ 27 June
🕐 11:15 AM
🔗 Here is the list of all talks: https://t.co/ViizeWCyrG

#leHACK #AISecurity #cybersecurity

[HackerOne @Hacker0x01]

The security research community in Europe and the Middle East just got even stronger. Say hello to these new HackerOne Brand Ambassadors:

🇦🇿 @AzeriumD34132 (Azerbaijan—new club!)

🇧🇪 @dropn0w & @hgreal1 (Belgium—new club!)

🇩🇰 @mthirup (Denmark—new club!)

🇮🇹 @Al7eX91 & @Ciper_942 (Italy—new club!)

🇱🇧 @hasansheet (Lebanon—new club!)

🇸🇪 @joaxcar (Sweden—new club!)

🇳🇱 @yoerivegt (Netherlands)

🇫🇷 @DoomerOutrun (France)

🇵🇹 @secgus (Portugal)

🇹🇷 @jusxing (Turkey)

These ambassadors will fuel research, mentoring, and live events across the region. We’re glad they’re here!

Check out the program: https://t.co/Ryt41dy3Ng

#AppSec #EthicalHacking #H1Club

[.joward @jowardsec]

@dropn0w @Hacker0x01 @AzeriumD34132 @hgreal1 @Mthirup @Al7eX91 Well deserved; congratulations!

[.joward @jowardsec]

@roohaa_n They've been sitting on my findings for over 3 months lmao; not even triaged. They've doubled the average time to triage on that program.

[drop @dropn0w]

I recently attended a few talks on AI security, and honestly, it felt pretty uncomfortable when some speakers tried to explain key concepts.

Many presenters clearly lacked a solid foundation in data science and AI engineering. They didn’t fully understand how models and RAG actually work. Often, they were explaining topics beyond their expertise, mixing concepts up, and spreading misinformation about how things really work.

Please, if you’re preparing a talk and decide to discuss topics outside your comfort zone, it’s your responsibility to understand every detail you put on your slides. Otherwise, it’s obvious that you’re just trying to ride the AI hype without genuine understanding.

[.joward @jowardsec]

@vxunderground Can't forget the random members that DM you trying to sell their ripped off bug bounty course

[.joward @jowardsec]

@JXoaT Any talk from Douglas Day @ArchAngelDDay should be insightful

[.joward @jowardsec]

@0xor0ne Thanks for sharing my work man

[.joward @jowardsec]

@revers3vrything Out of consideration for TP-Link, I just asked them if I could request a CVE for it. They had no problem with it, and I requested it directly with Mitre. Mitre is pretty slow; took about 2 months for them to assign it.

[.joward @jowardsec]

I finished a little write up of a recent router vulnerability research, developing the exploit, and earning my first CVE.

https://t.co/PoLc02NeNq

[.joward @jowardsec]

@kiddo_pwn Thanks boss!

[.joward @jowardsec]

@binitamshah Thanks for sharing Binni :)

[.joward @jowardsec]

@Dinosn Thanks for sharing my work Nicholas :)

[.joward @jowardsec]

@zoomeye_team Thank you for sharing my work :)

[.joward @jowardsec]

@dropn0w Thanks man, glad you enjoyed it :)