Peter F

penetration tester

[Peter F @pentestpete]

“AI should serve as a supportive tool for human pen testers rather than a complete replacement.”

[Peter F @pentestpete]

"87% of global organizations have experienced an AI-powered cyberattack in the past year, according to SoSafe’s Cybercrime Trends 2025 report"

[Peter F @pentestpete]

"The era of AI-enabled attacks is here"

[Peter F @pentestpete]

@techspence Ooh

[Peter F @pentestpete]

"only about 6% of all CVEs published have ever been exploited"

[Peter F @pentestpete]

TIL about EPSS scores

[Peter F @pentestpete]

"Time spent on discovery pays itself."

[Who Am I ? 🇪🇬 🇵🇸 @19whoami19]

Don't forget : You have to know that 99% of our field is building on Self Study and Learning So , you have to keep searching and working , you have to use all your time cause somethings can't be bought except by time , Good Luck :)

[Anton @therceman]

Beg Hunter vs Bug Hunter

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Multistep clickjacking

@WebSecAcademy
https://t.co/nqRb8CZ4AO

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Basic clickjacking with CSRF token protection

@WebSecAcademy
https://t.co/HS9B94ViGD

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Exploiting cross-site scripting to capture passwords

@WebSecAcademy
https://t.co/J2VtEB1CWQ

[Abir Khan @Akh0x0]

I Love Subdomain takeover .
In January i submitted 10+ valid(triaged) subdomain takeover .

[Rektile404 @Rektile404]

I love OAuth functionality. It's such an easy tool to escalate low-type bugs like open redirects to high by combining it and achieving full account takeover. Learning the ins and outs of OAuth will surely grant you nice bounties.
#hackerone #bugbounty

[Peter F @pentestpete]

"The point of a penetration test is to learn about weaknesses so they can be strengthened before a real attacker tries to attack the system."

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Exploiting server-side parameter pollution in a query string

@WebSecAcademy
https://t.co/UGYjN5UXhn

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Exploiting a mass assignment vulnerability

@WebSecAcademy
https://t.co/lCAVh226m5

[Peter F @pentestpete]

I completed the Web Security Academy lab:
SSRF via flawed request parsing

@WebSecAcademy
https://t.co/8VG0Dzb1kU

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Indirect prompt injection

@WebSecAcademy
https://t.co/QkeiGc75jK

[Peter F @pentestpete]

I completed the Web Security Academy lab:
Exploiting vulnerabilities in LLM APIs

@WebSecAcademy
https://t.co/XRa0ocaKbj