Mapping the internet - turning DNS/host/Certs/Whois data into intel for internal & sec teams, OSINT & bug-bounty hunters. Automated recon & real-time alerts.
Joined August 2024
- Tweets101
- Following0
- Followers1.8K
- Likes122
Profundis.io retweeted
While we wait for the #PHP2Shell patches, we pulled some numbers from Profundis.
PHP shows up in 347,425 of 6.08M HTTP(S) records over 24h (5.7%). That isn't a count of vulnerable servers.
CVE-2026-109618 / CVE-2026-109619
Fixes: 14:00 UTC.
🤖 Made with AI
While we wait for the #PHP2Shell patches, we pulled some numbers from Profundis.
PHP shows up in 347,425 of 6.08M HTTP(S) records over 24h (5.7%). That isn't a count of vulnerable servers.
CVE-2026-109618 / CVE-2026-109619
Fixes: 14:00 UTC.
🤖 Made with AI
Profundis.io retweeted
We investigated a spam campaign running on throwaway domains, and found the company behind it with our new Pivot tool.
Its WHOIS was privacy-protected, but the company name was left in the organization field, on 208 domains.
blog.profundis.io/blog/from-…
We investigated a spam campaign running on throwaway domains, and found the company behind it with our new Pivot tool.
Its WHOIS was privacy-protected, but the company name was left in the organization field, on 208 domains.
blog.profundis.io/blog/from-…
Profundis.io retweeted
Monitoring your bug bounty targets is an essential part of recon.
Personally, I use @profundisio to handle this part and keep track of changes across my targets.
profundis.io/
#bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #PenetrationTesting
Profundis.io retweeted
Our AI-powered Favicon Matcher just got a major upgrade!
Search is now ~90× faster (near-instant results) and it considers more candidates, so matches are sharper than ever 😎
Find visually similar favicons across billions of indexed sites 👇
profundis.io/tools/favicon-m…
#Bugbounty #recon #osint #ai
Our AI-powered Favicon Matcher just got a major upgrade!
Search is now ~90× faster (near-instant results) and it considers more candidates, so matches are sharper than ever 😎
Find visually similar favicons across billions of indexed sites 👇
profundis.io/tools/favicon-m…
#Bugbounty #recon #osint #ai
Awesome! @Atom_User_ is finding great bugs within minutes using our data😎
Well done!
1/2
9 minutes, 400€
One of the simplest bugs I ever found
I almost skipped this target
This time I did the opposite of what I usually do
I hunted where nobody looks
I jumped into @profundisio (my favorite asset discovery engine) and used its Pivot tool
4
774
Profundis.io retweeted
⚙️ @profundisio New Unified Search allows users to search across hosts, DNS, certificates, and WHOIS, with all results ranked together in a single query.
Very useful for recon during bug hunting! 🔥
profundis.io/search
#bugbounty #bugbountytip #bugbountytips #ethicalhacking #hacking #infosec #pentesting #PenetrationTesting
Select your target among the interesting new domains and start pivoting again to find even more hidden surface, demo⤵️
4
381
Profundis is one of the few platforms with five cross-searchable datasets: DNS, hosts, whois, TLS certs and favicon similarity.
Our new tool Pivot walks those connections for you, mapping a company's full attack surface from a single seed.
#bugbounty #recon #osint
We have a full API that is fully documented, but to drive it well from an LLM you still need the query DSL specific to our engine, sane defaults, throttling, and the field semantics encoded somewhere. It will also burn tokens to build it. The MCP ships all that preconfigured and we keep it current server-side: the day the syntax or fields change, we ship a new feature or update one, every client gets the update for free. A skill or a CLI wrapper gets you the same result, except now you own that layer and keep it in sync with our API forever. The MCP is just our "official" maintained LLM adapter so you don't have to build and babysit one :)
35
If you already have the recon data, pointing Claude at a directory is fine. The difference is that you don't produce this data: Profundis continuously scans the entire internet (hosts, DNS, certificates, WHOIS, favicons), so the MCP is live fast query access to a dataset you couldn't realistically collect yourself. And because it's passive, the model can pivot through it freely, taking a favicon hash or a cert org from one result and tracing it across hosts, subdomains and certificates without ever touching the target !
41