Malba0x

Offensive AppSec Engineer | Full-Stack Dev

[Malba0x @malba0x]

Just finished BadBank, an intentionally vulnerable Flask banking app for AppSec practice.
Exploited SQLi, XSS, CSRF, IDOR & Broken Access Control, then documented secure fixes.
Open source → https://t.co/LB9WvIwb5v
#AppSec #OWASP #CyberSecurity #Flask

[☣️ Mr. The Plague ☣️ @DotNetRussell]

Your SquidScan reports just got an order of magnitude better!

Along with your holistic scan report, a new KPI dashboard is now included in your output!

All scans, past present and future have been updated to include this. So, if you have a past scan go check it out!

Here's a live example from the Etsy Bug bounty https://t.co/Lm6ULHeFAi

[OWASP_Czech @OWASP_Czech]

Hey everyone, we would like to let you know that there is going to be an OWASP meet up in Brno on 30th of June. Grab your tickets here https://t.co/AB49slw1qK. Ping us if you have a (lightning) talk! Cheers.

[David Ondrej @DavidOndrej1]

stop developing locally

start developing on a VPS

trust me

[☣️ Mr. The Plague ☣️ @DotNetRussell]

Are you taking part in the Etsy bug bounty? Here's some free recon!

Squid Scan is great at detecting and scanning graphql for introspection and this one is a good example

https://t.co/slLr7hqXLc

[Malba0x @malba0x]

@IBM Happy birthday 🎂🎉

[Malba0x @malba0x]

@DotNetRussell Nice view 👌🏽

[Malba0x @malba0x]

Data Sovereignty Battles in the Cloud: Securing Cross-Border Operations Without Getting Crushed by Privacy Laws or Misconfigs https://t.co/l4vwO6iV8X

[Malba0x @malba0x]

@cprkrn Nature looks 👌🏽

[Malba0x @malba0x]

@thoniahilary He saw VS Code and thought it was Mr Robot 😭😂

[Malba0x @malba0x]

@HSC_Consult @_DeejustDee @ForenX_Intel @zoecyber001 Sure 👍

[Hybrid Security Consult @HSC_Consult]

the last class of the ethical hacking internship was held and we taught the students IOT PENETRATION TESTING we explored how IoT devices communicate using MQTT, a lightweight messaging protocol designed for efficient device-to-device communication, unlike traditional HTTP-based communication.

Through hands-on practical sessions, we also demonstrated how MQTT environments can become vulnerable to unauthorized access, data interception, and device manipulation when security controls are poorly configured.

The session highlighted the importance of secure MQTT deployment, including proper authentication, encryption, and access control mechanisms, in protecting IoT ecosystems from cyber threats.

#CyberSecurity #IoT #MQTT #EthicalHacking #NetworkSecurity #InformationSecurity #CyberAwareness #PenetrationTesting

[Malba0x @malba0x]

@Damilolawo1a That feeling comes and goes honestly.

Don’t force it too much. Just slow down a bit, then ease back in when you’re ready 👍

[Malba0x @malba0x]

@calebuwemm True. Just keep practicing daily, it gets clearer with time.

[Malba0x @malba0x]

@nnwakelam 😂😂

[Malba0x @malba0x]

@RedHatPentester @johnumorujo Encryption is rarely the problem. The endpoint is.

[Malba0x @malba0x]

@Mydeen4u Bravo 👏

[Malba0x @malba0x]

@Anastasis_King Good reminder that most real-world Wi-Fi issues come from misconfiguration, not just “weak encryption.” Router defaults and exposed management interfaces are still heavily underestimated attack surfaces.

[Malba0x @malba0x]

@Squid_Sec The best recon tools are the ones that disappear into your workflow. Kick off scans, monitor progress anywhere, and come back when the data is ready. Nice work.