Tillson Galloway

PhD Student by day, bug bounty hunter by night. Creator of GitHound open-source and advanced recon platform (

[White House Press Pool Reports @WHPressPool]

📅 President Trump’s Daily Schedule
Thursday, June 11, 2026

8:00 AM EDT THE PRESIDENT participates in Executive Time
CLOSED PRESS
📍 The White House

11:00 AM EDT THE PRESIDENT receives his Intelligence Briefing
CLOSED PRESS
📍 The White House

11:00 AM EDT THE FIRST LADY launches Fostering the Future Accounts
PRE-CREDENTIALED MEDIA
📍 United States Department of the Treasury

3:00 PM EDT THE PRESIDENT signs a Proclamation
CLOSED PRESS
📍 Oval Office

4:30 PM EDT THE PRESIDENT participates in a Policy Meeting
CLOSED PRESS
📍 Oval Office

6:30 PM EDT THE PRESIDENT participates in a Tele-Rally
CLOSED PRESS
📍 Oval Office

7:00 PM EDT THE PRESIDENT participates in Tele-Rally
CLOSED PRESS
📍 Oval Office

Distributed on June 11, 2026

[Tillson Galloway @tillson_]

Recently released my first iOS app in 10 years –– it's a social platform for sharing your airport lounge visits with friends and completing challenges (including the elusive ATL marathon, where you visit all seven sky clubs in one day)

https://t.co/7BOtB6EIMi

[Enno Rey @Enno_Insinuator]

This is super-interesting research:
Actively Understanding the Dynamics and Risks of the Threat Intelligence Ecosystem
https://t.co/7PDYsWBtmb [PDF]

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

How I discovered leaked Snowflake credentials for a Fortune 500 Manufacturing Company using…
https://t.co/yuUdJ4nmY8

#bugbounty #bugbountytips #bugbountytip

[Tillson Galloway @tillson_]

Why don’t they make elevator buttons so you can press them again to unselect a floor?

[dreadnode @dreadnode]

Can we eliminate the C2 server entirely and create truly autonomous malware?

On the Dreadnode blog, Principal Security Researcher @0xdab0 details how we developed an entirely local, C2-less malware that can autonomously discover and exploit one type of privilege escalation vulnerability.

A future where fully autonomous red team assessments are powered by nothing more than a pre-installed local model and a Lua interpreter may be closer than you’d imagine.

Read about it here: https://t.co/dDcOF9jZkp

[0xTraub.eth @0xTraub]

Want to make a crypto donation or become an official sponsor? Now you can with @ensdomains!

1. Send your crypto to vondebate.eth
2. Contact me to confirm and i'll issue you a receipt to deduct on your taxes!

Here's a chance to use crypto to support your community!

[Tillson Galloway @tillson_]

BlackHat 2025 swag superlatives.

Best emerging vendortainment technology award goes to t-shirt/sock hot presses and the escape room

[Tillson Galloway @tillson_]

Up and Running with GitHound for secret scanning in 5 minutes (https://t.co/yptioi2Lzz, 1.3K stars)

https://t.co/8iK1h6kzbx

[Tillson Galloway @tillson_]

List of *free* sources for timely and reasonably vetted malicious threat feeds for domains, IPs, and files. Did I miss any?

AlienVault OTX Pulses (https://t.co/c7gu2XzJlQ)
Malware Bazaar (https://t.co/DVhmR1Nmtn)
URLHaus/ThreatFox (https://t.co/1uzMfpPwY6)
OpenPhish (https://t.co/VjoaTeztIW)
EmergingThreats (https://t.co/L5BLwyf8Zu)

Conversely, do you have experience with high false-positive rates from any of these?

[Tillson Galloway @tillson_]

@cyb3rops I wonder if the increase in detections is (even partially) due to these vendors using that specific YARA rule

[Tillson Galloway @tillson_]

GitHound Explore, the world's most powerful GitHub Recon platform, just got supercharged with AI-powered result filtering.

Get started with 25 free scans at https://t.co/Fk0Gt2xvUZ

[Tillson Galloway @tillson_]

https://t.co/YOO3ixGN8o

Obligatory post for WWDC day - someone did a literary analysis of the fake texts/people in the Apple marketing assets

[Tillson Galloway @tillson_]

6 key techniques for GitHub recon: https://t.co/HNUHkmD4fs

#BugBounty

[Tillson Galloway @tillson_]

My bug bounty triage pet peeve: reporting a vuln via a company’s external responsible disclosure policy as a Good Samaritan, only for their system to create a linked report on Bugcrowd that ends up getting marked NA, therefore negatively affecting your platform reputation.

Companies typically define scope very generically on their own websites, but have more details on their private H1/BC pages. When you use external forms, you are forced to blindly submit reports.

Not an issue with any particular triager — it’s a platform design flaw with managed triage integrations on @Hacker0x01 and @Bugcrowd.