Founder of @Squid_Sec Senior AppSec Engineer / Software Engineer OSCP+ | GWAPT #Silversmith for fun and profit Built to Destroy Your company APT
Joined April 2016
- Tweets16.2K
- Following1.2K
- Followers2.1K
- Likes60.2K
Pinned Tweet
I pentested Starbucks for years.
Not the Wi-Fi.
The apps in front of 41k stores, 90 markets, and 36 million Rewards accounts.
Lesson's that actually stuck:
🚨BREAKING🚨: AI did not replace me on pentests this fall. It covered more surface than I could alone
POC or GTFO, I still reproduce every finding manually. AI, shockingly, is EXTRA COVERAGE, not a replacement
If the traffic and the model disagree, the traffic wins in my book and those are the only findings we include.
squidhacker.com/2026/10/ai-p…
Are you doing Active Directory hacking?
Have you setup or use GOAD?
Are you taking the OSCP?
I want to hear your feedback on the tool BloodBash! github.com/SquidSec/BloodBas…
It's a CLI alternative to Bloodhound and if you're doing any of the above it's for you
This tool is worth every penny if you're doing bug bounty or small and medium business attack surface scanning
See what you're missing
Good morning world!
Today is a great day to scan your attack surface.
SquidScan is online, armed, and standing by ~> SquidScanner.com
☣️ Mr. The Plague ☣️ retweeted
The project that was so hot GitHub banned me.
AskWAM but it creates a scheduled task and exfiltrates access tokens to a remote server.
github.com/Harrison-Wells-Cy…
☣️ Mr. The Plague ☣️ retweeted
cups local privilege escalation (libcupsfilters 2-2.2.1)
---
You can exploit the interaction between cups-browsed, libcupsfilters, and ghostscript (-i [include path]) to obtain code execution as root via a privileged printing service.
The poc abuses remotely advertised printer auto discovery + user-supplied attributes, which are passed to ghostscript without proper validation.
poc: codeberg.org/piratemoo/cowcu…
./cowcups.sh ls ./mooshell
#hack #vulnerability #exploit
I just earned the "A05: Security Misconfiguration" badge on SquidScanner! 🦑 squidscanner.com/profile/Squ…
☣️ Mr. The Plague ☣️ retweeted
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Readers added context they thought people might want to know
The Tailscale SSH findings require prior authorized access on the tailnet per the researcher's report; Tailscale stated issues concern post-authorization behavior only and did not recommend disabling SSH for everyone.
tailworm.com
x.com/IntCyberDigest…
☣️ Mr. The Plague ☣️ retweeted
jobs.ashbyhq.com/loancrate/d…
Good company. Worth checking out.
> Reporting in from the AI Hacking front:
As many of you know, I heavily use LLMs during pentesting engagements. I've used a few different frontier models as well as locally hosted ones for offensive security work.
This week I switched over to using DeepSeek 1017 for testing. My conclusion is that it's VERY good at finding issues.
It seems to take longer to work through problems but the quality of the findings and the methodology it uses are top notch
I also converted SquidScan over to using this model.
Have you seen other models perform better?
☣️ Mr. The Plague ☣️ retweeted
University Hospitals has disconnected its systems from the internet after detecting unusual activity on its servers. Some services, including MyChart, remain unavailable.
wkyc.smart.link/hmee5sm7o?pa…
