Security Researcher @rapid7 😈 Hacking Content @ https://xitter.cf/t.co/U7jVhNr9sC 💜

Not Here
Joined May 2016
CryptoCat retweeted
LiveOverflow 🔴 hextree.io
@LiveOverflowOct 22
Made a quick video (aka 5h of work), about my experience racing to find php2shell. youtube.com/watch?v=7CiZmq2l…
6
45
4
332
20,033
CryptoCat retweeted
Anthropic
@AnthropicAIOct 23
In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities. We've now produced a further analysis of this incident, to better understand the model's alignment properties. anthropic.com/research/align…
567
463
422
4,368
2,058,897
She's a 4, but she's a private key for a intermediary CA.
23
330
16
4,306
51,506
CryptoCat retweeted
Everybody talking about php2shell, but wait 'till you hear about shell2php:
8
46
3
1,022
12,125
How @joaxcar must feel after discovering a CVSS 10.0 bug in Gitlab but it's overshadowed because PHP decides to drop a 14 yo RCE
3
5
157
4,528
CryptoCat retweeted
We’re shutting down too. We don’t use php I just don’t wanna work tomorrow.
We are aware of the PHP vulnerability and are shutting down for the weekend.
79
2,259
94
35,064
515,321
CryptoCat retweeted
To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.
51
265
29
1,926
172,076
CryptoCat retweeted
Calif
@calif_ioOct 21
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
LCFR
@lcfr_haxAug 5
d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac
54
407
93
3,079
390,658
CryptoCat retweeted
Calif
@calif_ioOct 21
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
19
248
29
772
174,177
CryptoCat retweeted
php2shell Tomorrow is a helluva day.
274
1,827
686
16,174
3,683,739
Three new @metasploit exploit modules in the queue for several of the recent Cisco Secure Email Gateway vulns. Last weeks file write in AMP (CVE-2026-76519, on KEV), and two separate SQLi's (CVE-2026-76461, on KEV, and CVE-2026-76443) from last month: github.com/rapid7/metasploit…
1
5
22
1,820
The details of the long awaited KVM Escape are published. PwnEscape leads to VM escapes across multiple hypervisors due to a super cool Linux networking bug. CVE-2026-99999 is a 9.3 CVSS critical rated KVM escape ⛓️ pwn.ai/blog/pwnescape
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
26
135
22
563
205,664
CryptoCat retweeted
New research from our team: we chained an unauthenticated bulk import, an XXE buried in a nested dependency and leaked IMS credentials into full pre-auth RCE on Adobe Experience Manager Cloud. We also cover how AI models helped (and didn't) during the audit. slcyber.io/research/more-cri…
1
35
1
150
5,638
OpenAI Newsroom
@OpenAINewsroomOct 13
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
20
278
5
5,927
83,319
We had an amazing time at #Pwn2Own Ireland 2026 - our 40th Pwn2Own ever! We awarded $1,262,000 for almost 100 0-days. Catch all the highlights at youtu.be/qDTSScQ67Mg?is=CdmJ…
1
9
1
59
8,457
CryptoCat retweeted
#Pwn20wn lreland 2026 is a wrap! 🏆 $1.26 million awarded over three days for 98 unique zero-days, uncovered across 51 successful attempts. Congratulations Ikotas Labs for title of Master of Pwn!
22
2
196
17,745
It's the bug of the day for Day Two of #Pwn2Own Ireland! Interrupt Labs shows us how it's done.
4
2
36
4,596
I'm happy that my first article as part of the @SLCyberSec research team is finally out! 😁 It covers an interesting ImageMagick race condition that I found back in June, which, combined with a polyglot payload, allowed me to achieve file read/RCE on Discourse. This should resonate with those who've seen the recent @HacktronAI research. I hope you'll enjoy it! 👇
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
8
42
1
208
9,601