
BS-free offensive security tweets. I host @secTalksNL & @securityCTF. Strong exploit dev fetish. Baker of 0days.
The Netherlands
Joined December 2016
- Tweets3.8K
- Following2.5K
- Followers4.8K
- Likes598
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate.
How it works: blog.google/security/agentic…
For real-world vulnerabilities PageBreak has discovered 👇
bughunters.google.com/blog/p…
retweeted

Keep Your Home IP Anywhere — Bypass Geo Locks@flashedrouterAug 22
🇳🇱
NetherlandsConnected via Netherlands App StoreAccount-level information, not a live location or per-post device.
Made a free tool because we kept getting asked "how do I know if my VPN is actually leaking." One click shows your real IP, DNS, WebRTC and timezone exposure exactly like a website would see it. No account, no catch. chromewebstore.google.com/de…
retweeted
HOLY SHIT!!! 🤯
NEVADA POLICE LEAKED A CRYPTO SEED PHRASE ON BODYCAM.
The video went public.
Shortly after, the wallet was drained of $1.1 MILLION+.
No blockchain hack.
No sophisticated exploit.
Just a seed phrase appearing in police footage.
One leaked video. $1.1M gone. 😭
retweeted
New Blog Alert! 🚨
Introducing Early Cascade Injection, a stealthy process injection technique that targets Windows process creation, avoids cross-process APCs, and evades top-tier EDRs.
Learn how it combines Early Bird APC Injection & EDR-Preloading: outflank.nl/blog/2024/10/15/…
retweeted
#Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640
github.com/ThrynSec/CVE-2023…
Nifty #PoC!
infosec.exchange/@raptor/111…
retweeted
Embedded Threats: A Deep Dive Into The ESIM World
- Markus Vervier
youtu.be/Ka70323Y6aQ
#hacklu @hack_lu
retweeted
It is hard for people today to comprehend how slow an original IBM PC was. By some measures, a 4090 is a billion times faster, which means a PC working continuously for 40 years could be replaced by one second of modern computing. And yet, this could be done.
This is pure wizardry youtu.be/-xJZ9I4iqg8
I believe @ID_AA_Carmack will find this amusing.
retweeted
Everything's cool until the day Elon Musk buys
@StackOverflow and starts charging 8$ to see the solutions to a question
retweeted
✨An in-the-wild 0-day privesc for Windows is patched in today's Patch Tuesday: CVE-2022-41033 in COM+Event System Service
msrc.microsoft.com/update-gu…
retweeted
The video of my @offensive_con talk is up. You can learn about my favorite Bug of the year 😁 youtube.com/watch?v=8SV5l-Bx…
Researcher details Apple Safari ICU Out-Of-Bounds Write (CVE-2022-32787) Flaw securityonline.info/research… #opensource #infosec #security #pentesting
retweeted
Bruteforcing retekess t119 pagers with @ShotokanZH using @flipper_net and how we did it! ⬇⬇⬇
retweeted
$5 iPhone JTAG setup - can’t wait to share the details at @defcon!
retweeted
In case you’ve ever wondered how advanced MicroSD card data recovery works (likely dead controller) 🤯
retweeted
Today I'm launching #HijackLibs, an open-source, community-driven project tracking DLL Hijacking opportunities in in Windows
🌍 LIVE on hijacklibs.net 👈
🆕 Currently comprising over 350 unique DLLs that can be targeted
🤝 Contribute via github.com/wietze/hijacklibs
retweeted
Watch,
Proof of Concept: Remote Code Execution on Discord
blog.electrovolt.io/posts/di…
Meanwhile, I will write one more blog to release after our
DEFCON talk.
retweeted
Medicine for FOMO - There are a bunch of clips interviews from all over the #DEFCON30 Villages and Contests on our YouTube channel: youtube.com/user/DEFCONConfe…























