Atom (@Atom_User_) header
Atom (@Atom_User_) profile picture

Atom

@Atom_User_

Full time Bug Bounty Hunter on Google

 Android
at0m.space/
Joined May 2018
  • Tweets39
  • Following257
  • Followers184
7Media
Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)Photo by Atom (@Atom_User_)
While we wait for the #PHP2Shell patches, we pulled some numbers from Profundis. PHP shows up in 347,425 of 6.08M HTTP(S) records over 24h (5.7%). That isn't a count of vulnerable servers. CVE-2026-109618 / CVE-2026-109619 Fixes: 14:00 UTC.
🤖 Made with AI
Image from Profundis.io (@profundisio)
1
6
11
2,110
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
69
528
100
3,157
378,382
We investigated a spam campaign running on throwaway domains, and found the company behind it with our new Pivot tool. Its WHOIS was privacy-protected, but the company name was left in the organization field, on 208 domains. blog.profundis.io/blog/from-…
From one spam email to 208 domains and a French webmarketing company

From one spam email to 208 domains and a French webmarketing company

I took one junk email from my quarantine folder, pivoted on its WHOIS registrant with Claude Fable 5 and the Profundis MCP, and ended up on the web server of a registered French webmarketing company.

blog.profundis.io
1
7
4
11
1,887
What consulting or advising 2,000 executives taught me about performing under pressure

What consulting or advising 2,000 executives taught me about performing under pressure

Article · @marcuswlefton
1
1
158
Our AI-powered Favicon Matcher just got a major upgrade! Search is now ~90× faster (near-instant results) and it considers more candidates, so matches are sharper than ever 😎 Find visually similar favicons across billions of indexed sites 👇 profundis.io/tools/favicon-m… #Bugbounty #recon #osint #ai
3
1
9
1,677
I earned $10,000 for my submission on @bugcrowd bugcrowd.com/h/elsicarius #ItTakesACrowd #BugBounty Bug: Weak JWT sign key + mass assignment in the JWT -> read arbitrary customer sensitive/PII data Fully found by Claude using @profundisio MCP
6
16
333
10,480
Still using a single hash to reverse search your target favicons? We did some intensive research on a recon technique nobody thought about: visual similarity search across 50M+ favicons. Full write-up 👇 blog.profundis.io/blog/favic… #osint #cybersecurity #recon
Visual Favicon Similarity Search for Reconnaissance

Visual Favicon Similarity Search for Reconnaissance

What if you could search for similar favicons, not just exact hash matches? Discover how we built a favicon similarity search that processes 50+ million images in seconds.

blog.profundis.io
3
22
3
98
11,571
Hello ! 🧙🏼‍♂️ On se retrouve demain (Mardi 22) à 21h as usual ! ⏰ Topic 1 : Optimize your BSCP 🤔 FT. @Atom_User_ Topic 2 : Lalubuntu Ground Work & 24.04 migration 🤯 rdv @ twitch.tv/thelaluka
TheLaluka - Twitch

TheLaluka - Twitch

Sharing is Caring | Hacker, Eternel Learner, & Cat. =^~^= // Intro at youtube.com/watch?v=EaMDFxfcQHY — TheLaluka streams live on Twitch! Check out their videos, sign up to chat, and join their...

twitch.tv
1
3
4
1,949
Load more