Atlanta, GA
Joined December 2013
- Tweets2K
- Following845
- Followers616
- Likes1.2K
Tillson Galloway retweeted
📅 President Trump’s Daily Schedule
Thursday, June 11, 2026
8:00 AM EDT THE PRESIDENT participates in Executive Time
CLOSED PRESS
📍 The White House
11:00 AM EDT THE PRESIDENT receives his Intelligence Briefing
CLOSED PRESS
📍 The White House
11:00 AM EDT THE FIRST LADY launches Fostering the Future Accounts
PRE-CREDENTIALED MEDIA
📍 United States Department of the Treasury
3:00 PM EDT THE PRESIDENT signs a Proclamation
CLOSED PRESS
📍 Oval Office
4:30 PM EDT THE PRESIDENT participates in a Policy Meeting
CLOSED PRESS
📍 Oval Office
6:30 PM EDT THE PRESIDENT participates in a Tele-Rally
CLOSED PRESS
📍 Oval Office
7:00 PM EDT THE PRESIDENT participates in Tele-Rally
CLOSED PRESS
📍 Oval Office
Distributed on June 11, 2026
Recently released my first iOS app in 10 years –– it's a social platform for sharing your airport lounge visits with friends and completing challenges (including the elusive ATL marathon, where you visit all seven sky clubs in one day)
apps.apple.com/us/app/lounge…
Tillson Galloway retweeted
This is super-interesting research:
Actively Understanding the Dynamics and Risks of the Threat Intelligence Ecosystem
ndss-symposium.org/wp-conten… [PDF]
Tillson Galloway retweeted
How I discovered leaked Snowflake credentials for a Fortune 500 Manufacturing Company using…
medium.com/@tillson.galloway…
#bugbounty #bugbountytips #bugbountytip
Tillson Galloway retweeted
Can we eliminate the C2 server entirely and create truly autonomous malware?
On the Dreadnode blog, Principal Security Researcher @0xdab0 details how we developed an entirely local, C2-less malware that can autonomously discover and exploit one type of privilege escalation vulnerability.
A future where fully autonomous red team assessments are powered by nothing more than a pre-installed local model and a Lua interpreter may be closer than you’d imagine.
Read about it here: dreadnode.io/blog/lolmil-liv…
Tillson Galloway retweeted
Want to make a crypto donation or become an official sponsor? Now you can with @ensdomains!
1. Send your crypto to vondebate.eth
2. Contact me to confirm and i'll issue you a receipt to deduct on your taxes!
Here's a chance to use crypto to support your community!
BlackHat 2025 swag superlatives.
Best emerging vendortainment technology award goes to t-shirt/sock hot presses and the escape room
Up and Running with GitHound for secret scanning in 5 minutes (github.com/tillson/git-hound, 1.3K stars)
medium.com/@tillson.galloway…
List of *free* sources for timely and reasonably vetted malicious threat feeds for domains, IPs, and files. Did I miss any?
AlienVault OTX Pulses (otx.alienvault.com)
Malware Bazaar (bazaar.abuse.ch/)
URLHaus/ThreatFox (abuse.ch/)
OpenPhish (openphish.com/feed.txt)
EmergingThreats (rules.emergingthreats.net/)
Conversely, do you have experience with high false-positive rates from any of these?
GitHound Explore, the world's most powerful GitHub Recon platform, just got supercharged with AI-powered result filtering.
Get started with 25 free scans at githoundexplore.com/
maxread.substack.com/p/a-lit…
Obligatory post for WWDC day - someone did a literary analysis of the fake texts/people in the Apple marketing assets
My bug bounty triage pet peeve: reporting a vuln via a company’s external responsible disclosure policy as a Good Samaritan, only for their system to create a linked report on Bugcrowd that ends up getting marked NA, therefore negatively affecting your platform reputation.
Companies typically define scope very generically on their own websites, but have more details on their private H1/BC pages. When you use external forms, you are forced to blindly submit reports.
Not an issue with any particular triager — it’s a platform design flaw with managed triage integrations on @Hacker0x01 and @Bugcrowd.