𝘻𝘰𝘪𝘥𝘴𝘦𝘤

@z0idsec

Content Engineer at PentesterLab
Creator of Attaxr
Building cybersecurity tools and SaaS

Opinions are my own and do not represent my employer.

undefined attaxr.com Joined September 2018

360 Following 5.1K Followers 1.5K Posts

Latest posts 5

Pinned post

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec 1d

If you're wanting to level up your code review skills, I would highly recommend @PentesterLab's on demand training, I've completed the training and the amount of information covered is insane and you learn techniques from an industry veteran @snyff.

pentesterlab.com/training/

pentesterlab.com Security Code Review & Secure Coding Training | PentesterLab Security code review and secure coding training built on real code and real CVEs. On-demand courses you can start today, live sessions when scheduled, and private training for teams.

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec 1d

Had to post this one as an image to fit it all in. Worth the read.

#hackbot #BugBounty

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec 4d

I Built a local bug bounty recon platform that runs in the background: Rust tools handle subdomains, DNS, probing and crawling, a local systemone model classifies assets and flags leads. Argus MCP lets a hackbot poll for leads, pull them and hunt for bugs while I test in Burp.

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec Oct 26

Very useful information 🧠 the quirky behaviour in programming languages can lead to interesting bypasses.

Louis Nyffenegger @snyff Oct 26

Same trap, two languages:

Python: os.path.join("/app", "/foo/bar") is "/foo/bar"

C#: Path.Combine("/app", "/foo/bar") is "/foo/bar"

In the happy path they do what you expect, so people never look further.
View quoted post on X

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec Oct 23

We built security tools to automate tasks with predefined rules, but they struggled with edge cases. Harnesses add reasoning, letting tools interpret results and adapt, with HITL keeping humans in control.