Nate Robb @NateRobb
Senior Threat Enablement Operator @BishopFox bishopfox.com/authors/nate-r… Phoenix, AZ Joined February 2009-
Tweets659
-
Followers201
-
Following314
-
Likes641
@rez0__ @sshell_ @Cloudflare @hash_kitten @SLCyberSec @infosec_au Prob just salty this got dropped at 5pm EST on a Friday. 🤷
@LittleJoeTables From billions back to $.08, crisis averted.
CVE-2026-27886 is another CVE we researched/reproduced as part of @bishopfox's Emerging Threat process. Full admin account takeover in Strapi, ~20k internet-facing instances via Shodan. Also, check out our detection tool: github.com/BishopFox/CVE-…
This Strapi bug is a great example of how small trust-boundary mistakes become major security problems.
After not receiving a raise in the four years I’ve worked at BHIS they’ve now decided to reduce my pay by $40k after coming back from maternity leave and moving my role to solely pentesting. So I am looking for a new position effective immediately if anyone has any leads 😇
LiteLLM Proxy has a pre-auth SQL injection (CVE-2026-42208) I recently reproduced as part of @bishopfox's Emerging Threat process. Below is a technical analysis I put together with a safe detection payload that can be used to identify vulnerable deployments.
A failed login should not take 6 seconds. Bishop Fox researchers reproduced CVE-2026-42208 in LiteLLM’s proxy. The attack requires no authentication, still returns HTTP 401 responses, and uses timing delays to extract sensitive data. Observed in the wild roughly 36 hours after
We’re heading to @CactusCon 14! 🌵 Bishop Fox is sponsoring again this year, with talks from Dan Petro and Nate Robb on EDR evasion and real-world CVE prioritization. We’ll be around all weekend to talk Red Team tradecraft, research, and offensive security. See you in Mesa!
@CactusCon Just a heads up, not seeing a "Notes to Organizer" section to include a talk outline on the session submission page. Tried throwing the outline at the end of the session description but hit the character limit.
@vxunderground Looks to be an n-day disclosed in April (CVE-2025-31324), but appears to be the first full proof-of-concept available.
@codewhitesec @_l0gg @mwulftange Isn't user interaction required to exploit CVE-2025-49706? via msrc.microsoft.com/update-guide/v…
Ever feel overwhelmed by the constant firehose of newly disclosed vulnerabilities? Check out my latest blog post where I outline the methodology our Threat Enablement team at Bishop Fox uses to cut through the noise: bfx.social/3GcLIdz
Our Threat Enablement and Analysis team built a better way to cut through the noise. This is how we triage the firehose, turning chaos into action. By Senior Operator Nate Robb: bfx.social/45Ltri1
@Jhaddix Is this the issue where the valid hits in feroxbuster disappear from the terminal window and you just see the list of invalid attempts?
@_BalthazarBratt I just picked up the 16 inch M1 Pro a couple weeks ago and I love it. I'm impatient so I used this stock tracker app to jump on one when local apple store stock became available: worthbak.github.io/inventory-chec…
My team is hiring at @bishopfox! Come join the Adversarial Operations team for the Cosmos continuous attack surface testing platform. bishopfox.com/jobs?gh_jid=36…
@jonathandata1 FYI: I could reproduce the Airdropped website auto accept only when both devices were signed in with the same Apple ID. When the Apple IDs were different (as would be the case in an attack) the victim device was prompted for permission to open the Airdropped website.
@Random_Robbie Sorry bud, thought you may want to buy a $250k gif of a rock.
@AndrivetSeb I ask because I could use it for an engagement I am currently on if you would be willing to share.
@AndrivetSeb I just stumbled upon your talk "The Security of MDM systems" from Hack in Paris 2013. Did you happen to publicly release the Java tool to decrypt passwords from identityconfig.xml files?
Nitrox @alirez4x0
1 Followers 267 Following
Moloch @LittleJoeTables
5K Followers 658 Following Offsec Engineer Formerly of @BishopFox https://t.co/YcsVLOezuj https://t.co/z3UKx3Wcrf
IntelFusions @IntelFusions
13 Followers 90 Following Cyber threat intelligence for the modern threat landscape. Tracking threat actors, incidents & geopolitical cyber operations worldwide. Know your adversaries.
Aujeepee @aujeepee59189
5 Followers 255 Following
︎ @0xocdsec
4K Followers 8K Following ︎🏴☠️ 🇪🇺 💚 🇺🇦 | computers & features | 💚 🏴☠️ party | 603,628 km² https://t.co/F5dgX7Bcej
Sandra @Sandra458467158
357 Followers 3K Following
HilaryWesley @7peQ35iJ98vH0p
68 Followers 6K Following
minu @minu_who
653 Followers 3K Following co-founder at https://t.co/Jjo5xOaif0, building reliable agentic data layer. prev. hubspot, meta, nus researcher
Harley Kimball @infinitelogins
7K Followers 1K Following Researcher Strategy & Live Hacking @ HackerOne | Community Cultivator | Bug Bounty Hunter | Co-Founder of @BugBountyDEFCON | Founder of Disclosed Newsletter.
goback @l2_sec
58 Followers 3K Following
Chavda Zeel @ChavdaZeel
602 Followers 4K Following Pentester | @synack | Web Security | Learner | My tweets are my own
McStose @StoseMc51840
5 Followers 1K Following With you, I don’t lack anything. No matter how wild my heart is, I know how to say no.
Nightbane / Matt Keel... @Nightbanes
3K Followers 174 Following Platform Security / Principal Security Engineer
Hrishi @hrishioa
12K Followers 3K Following Trying to build systems of lasting value at https://t.co/JoR2nVEIRH. Previously CTO, Greywing (YC W21). Chop wood carry water.
пинг00 (e/acc) @DoYouEvenBrown
257 Followers 3K Following japes and general tomfoolery | red-teaming, hard-tech, synbio, anthropological history, linguistics, theories of life, etc | hmu at ping00 at protonmail dot com
Behk @behkfox
69 Followers 43 Following Si disfrutas de juegos como Final Fantasy, Elden Ring, Monster Hunter, WoW, Guild Wars, Ashes of Creation y muchos más, este es tu perfil.
CodersFuture @yugendhar_d
6 Followers 316 Following Cyber Security student passionate about securing the digital world. Constantly learning and exploring the latest trends and technologies in the field.
Mustafa Can İPEKÇİ @mcipekci
9K Followers 495 Following I'm an engineer from Turkey, who is interested with biotechnology, computer science and digital gaming. Proud father of three little devils. A.K.A nukedx
Mr Elliot @eliotsec
0 Followers 2K Following
Jeremy Giordano @ThreatSauces
3 Followers 101 Following
Mr_Z3r0_X @Mr_Z3r0_X
69 Followers 2K Following
cto @tofattila
12 Followers 534 Following
Wolf @WolfieMcFly
65 Followers 304 Following
nameless @JazonTWong
42 Followers 1K Following I identify as a a plant, please be respect and use the appropriate pronouns (plant/planted)
Tuhin Mmukherjee @unknown1111wolf
298 Followers 3K Following Football Freak, Hacker, Bugbounty Hunter, Appsec, Dog Lover 🇮🇳
ezra @ezrazer4
2 Followers 121 Following
Rodrigo Ortiz @d4rkr0o
153 Followers 1K Following
brad-ak @brad_ak_eh
3 Followers 18 Following
ZK @zerokoan
32 Followers 738 Following not sure i have a lot to contribute, but i'm here for it anyway | he/him
Superbad @Superbad1337
82 Followers 730 Following Vuln Research, digital privacy, and cat dad, running on strong coffee
Joseph Thacker @rez0__
73K Followers 1K Following christian. father. hacker. founder. advisor. podcast: https://t.co/1aFavJN2h8 blog: https://t.co/JBPT1CJWJH products: 🤖 https://t.co/EVhQl8HTlp $200/mo 📚 https://t.co/MMmhw0cnaz $0/mo
hashkitten @hash_kitten
4K Followers 178 Following vulnerability research @assetnote // hacking // codegolf // ctf with 🛹🐶
ClaudeDevs @ClaudeDevs
611K Followers 2 Following Official updates for developers building with @ClaudeAI
feroxbuster/pro @feroxbuster_pro
1 Followers 1 Following
Piotr Bazydło @chudyPB
5K Followers 318 Following Principal Vulnerability Researcher at watchTowr | Previously: Zero Day Initiative | @[email protected]
watchTowr @watchtowrcyber
12K Followers 12 Following watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
pdnuclei-bot @pdnuclei_bot
1K Followers 2 Following Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖
Markus Wulftange @mwulftange
3K Followers 210 Following Principal Security Researcher and Pâtissier at @codewhitesec
Khoa Dinh @_l0gg
2K Followers 121 Following
ZachXBT @zachxbt
1.1M Followers 2K Following Scam survivor turned 2D investigator, Advisor @paradigm
Harley Kimball @infinitelogins
7K Followers 1K Following Researcher Strategy & Live Hacking @ HackerOne | Community Cultivator | Bug Bounty Hunter | Co-Founder of @BugBountyDEFCON | Founder of Disclosed Newsletter.
/ XNL -н4cĸ3r (and ... @xnl_h4ck3r
10K Followers 992 Following Aspiring Bug Bounty Hunter & dev of tools: GAP, xnLinkFinder, waymore, urless, XnlReveal, knoxnl, xnldorker 🤘 RTFM🧐... always... PLEASE!
Tib3rius @0xTib3rius
73K Followers 659 Following Cybersecurity Content Creator | UwU-Anointed Wapp King | DEF CON Gameshow Host | Ex-Brit | https://t.co/04RRExvxXj (he/him) 🇺🇸 @TheRealC3rul34n is bae 🥰
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
Bug Bounty Reports Ex... @gregxsunday
55K Followers 612 Following Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.
Nightbane / Matt Keel... @Nightbanes
3K Followers 174 Following Platform Security / Principal Security Engineer
Hrishi @hrishioa
12K Followers 3K Following Trying to build systems of lasting value at https://t.co/JoR2nVEIRH. Previously CTO, Greywing (YC W21). Chop wood carry water.
Jun34u @Jun34u_sec
12K Followers 3K Following Alaskan in LA & chaotic idealist. Game Theorist. cDc cultist. Forever Script Kiddy @DC214DFW! @nyu_cse Fellow! She/They 🏳️🌈🏴☠️
TrendAI Zero Day Init... @thezdi
89K Followers 18 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Mustafa Can İPEKÇİ @mcipekci
9K Followers 495 Following I'm an engineer from Turkey, who is interested with biotechnology, computer science and digital gaming. Proud father of three little devils. A.K.A nukedx
Peter M @pmnh_
3K Followers 560 Following aka pmnh / ex-Security researcher / Synack #1 SRT 2022-2023 / Synack, HackerOne, BC / Deep recon / source code analysis. Opinions my own, not employer.
Nagli @galnagli
48K Followers 507 Following Hacker; Red Agent & Offensive AI at @wiz_io / @Google; $3,000,000 Bug Bounty Hunter and Live Hacking Events Winner.
Rodrigo Ortiz @d4rkr0o
153 Followers 1K Following
Alh4zr3d @Alh4zr3d
24K Followers 274 Following Legal Criminal | Twitch cult leader | InfosecPrep founder | Lovecraft scholar | Soros mercenary | Spiritual cargo shorts wearer | Cthulhu fhtagn
sean @seanyeoh
2K Followers 478 Following formerly @assetnote. appsec @ bytedance. tweets and thoughts are my own.
brendan @bscarvell
2K Followers 622 Following Security researcher, penetration tester and co-founder of @signal11io PGP: 9F7D 181D 1F4A 51B2
th3y @_th3y
1K Followers 2K Following Pentester | webapp security researcher | OSCP/OSWE | Personal account | opinions are mine 😶
Superbad @Superbad1337
82 Followers 730 Following Vuln Research, digital privacy, and cat dad, running on strong coffee
Trickest @trick3st
11K Followers 17 Following Visualize, operate & scale everything offensive security in one-platform.
vx-underground @vxunderground
442K Followers 364 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
January 6th Committee @January6thCmte
587K Followers 9 Following Select Committee to Investigate the January 6th Attack on the United States Capitol | Representative @BennieGThompson, Chairman
ippsec @ippsec
124K Followers 368 Following
Tuan Anh Nguyen⚡️... @haxor31337
16K Followers 2K Following 30 y/o Bug Bounty Hunter and Red Team Lead at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
Zachary @zjzeit
49 Followers 106 Following
Battlefield Comms @BattlefieldComm
259K Followers 8 Following Battlefield News, Dev Notes & Update Details. Content may change during Live Service. ESRB rating: MATURE (17+) with Blood, Strong Language, and Violence.
Gerhard Wagner @g3rh4rdw4gn3r
2K Followers 147 Following I like crypto, playing tennis, gardening and drinking beers P: Bounty hunter | DeFi Flashboy | C-Dili auditor & MythX https://t.co/oqtMg2nlXJ
ProjectDiscovery @pdiscoveryio
42K Followers 144 Following Real, exploitable vulnerabilities. No noise. Nuclei scans fast. Neo closes the loop. @pdnuclei × @neo_ai_engineer
Ian Carroll @iangcarroll
24K Followers 1K Following Founder at @SeatsAero. Travel/points, application security, security research, etc. https://t.co/q0VuCP7rXz
Nuclei by ProjectDisc... @pdnuclei
38K Followers 183 Following Nuclei uses a vast templating library to scan applications, cloud infrastructure, and networks to find and remediate vulnerabilities.
IPinfo – IP Data Pr... @ipinfo
9K Followers 30 Following IP data built for scale. Get geolocation, privacy flags, carrier data & more. IPinfo powers smarter decisions with the world’s most trusted IP data. 500K+ usersYou might like
