regne @_regne
Mobile Security Researcher, CTF player at @fireshellst and Language Learner tweets are my own regne.me Joined October 2021-
Tweets575
-
Followers234
-
Following572
-
Likes3K
We're launching a $100,000 fund to save CTFs.
[1/3] It's common to get a ParcelFileDescriptor pointing to a directory through an Android ContentProvider. But can you actually turn that into a directory listing?
"Dad, what was it like playing CTFs before AI?"
@pwnj0 Deu tempo de eu aceitar o convite e ver o escopo kkk
btw, some of these vulnerabilities stemmed from specific research into React Native apps. Uncovered some interesting techniques to escalate impact by abusing common mistakes in hybrid app implementations. Full technical writeup once the disclosure window closes.
Officially a Security Contributor of @ProtonPrivacy, very happy to help secure the ecosystem that I use every day. proton.me/blog/protonmai…
Officially a Security Contributor of @ProtonPrivacy, very happy to help secure the ecosystem that I use every day. proton.me/blog/protonmai…
@eeyitemi a lot of collisions and pretty sick bugs :)
everyone, i need your help, anyone can hook us up with the "ESXi version 9.1.0.0"? your RT is really appreciated, this is Urgent AF.
Because we train LLMs on lots of movies and books about AI uprising, or articles and tweets about dystopian fears of AI, we might be causing the threat ourselves 🤔
Our second blog post is out here: bugscale.ch/blog/here-we-g… ! We managed to install arbitrary APKs on the Samsung Galaxy S25 from an app without install permissions. For this, @SachaKozma did most of the work, but it was great looking into Samsung's cloud gaming component with him
do it :)
OH GOD THEYRE GOING TO VIBE CODE A MOBILE OS SAM DONT DO IT
🌍 Earth Day Giveaway - Learn Mobile or AI Security, On Us One beautiful planet we all share. Let's patch it together. 🌱 To celebrate Earth Day, we're planting 3 free seats 🌱 in any 8kSec Academy course - winner's choice of the whole forest: • Practical AI Security: Attacks, Defenses, and Applications • Practical Mobile Application Exploitation • Offensive Mobile Reversing and Exploitation • Offensive iOS Internals • Offensive Android Internals Explore the catalog → academy.8ksec.io How to enter (zero carbon footprint 🍃): 🌿 Follow us 🌿 Like this post 🌎 Repost to spread the seeds 🌟 Bonus: double your chances! 💬 Comment your favorite place on Earth that you have visited or would like to visit 🌍, and we'll count your entry twice 3 winners sprout on April 27. We’ll DM each winner to select their course.
@ProtonDrive @bigitelif0 apple? started wrong....
I am talking about mobile... AI can speed up / help with BB (reports, PoCs).... but for finding real vulns, it’s mostly low-hanging fruit so far. So...don’t abandon a target just because Claude says so :)
There are no words.
Me: Reported 1 Click ATO Triager: User interaction? P4
This... this is art. Submitting a PR to the Claude Code repo to add the actual Claude Code source code.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Yuran Pereira ✩ @yuran_mp
67 Followers 1K Following Low level and Linux kernel security hobyist. Software hypnotist
Mohammad @m0hammad_y4ser
836 Followers 739 Following Application Security Consultant @ https://t.co/d2Pfm2x1kq | OSWE "always forward, never backward."
Josh Long (the JoshM... @theJoshMeister
152K Followers 6K Following Cybersecurity evangelist: award-winning public speaker, writer, & researcher, specializing in Apple security, malware, scams, privacy, & AI. 🍎🛡 #SpacesHost
Mohamed sadek @happyjester80
55 Followers 490 Following
LemonTea1014 @LteaaR1014
52 Followers 336 Following Student / CTF player / Developer / Cybersecurity / Reverse / Web exploitation
Matthias Kaiser @matthias_kaiser
7K Followers 1K Following Vulnerability Researcher. 0xACED. Ex-Apple. Now @matthiaskaiser.bsky.social
Ath3r1s @Ath3r1s
43 Followers 435 Following
breno_css @breno_css
144 Followers 450 Following
Miłosz Gaczkowski @cyberMilosz
132 Followers 251 Following Head of mobile security at Reversec, drozer maintainer, amateur balcony gardener, professional rambler. Opinions shared here are those of your employer.
GbZ a.k.a Gabe @NaoSouOGabe
237 Followers 877 Following Guia de data center (sim, copiei) SRE/Devops/SecAlgumaCoisa/Sysadmin/InfraGuy Ham Radio Operator
Muhammet Ersoy @kjsjejsj
0 Followers 103 Following
Luiz Claudio Fratesch... @lcfrateschi
4 Followers 967 Following
Alex Moshkov @amoshkov
2K Followers 1K Following Community Bro @ 🟥 Positive Technologies / @PTSWARM / @ptdbugs / @StandoffBB / #PHTalks / #PHDays / #PHCamp
H. Gouvêa @htrgouvea
948 Followers 290 Following security researcher at @lesis_lat // creating everything that i put my soul in
Mohammed | مُحَم... @mmuteb_
3K Followers 1K Following Mobile (Development/Security/Forensics) | DevSecOps
Anderson Nascimento @andersonc0d3
4K Followers 6K Following Director & Security Researcher @alleleintel
Allele Security Intel... @alleleintel
1K Followers 2K Following Allele Security Intelligence is an independent company specializing in Information Security research.
luriel @_luriel
66 Followers 79 Following Security Researcher | CVEs in Trend Micro, Nagios, PRTG | Hakai Security
Ahmed Abdel Rasoul�... @0xbartita
1K Followers 2K Following Penetration Tester & Bug Hunter | eWPTX | eCPPT | eMAPT | CVE-2026-23524
ؘ @kevi0x6e
182 Followers 462 Following
zetsu @zetsuhq
16 Followers 68 Following
David Peterson @davidgpeterson
8K Followers 166 Following Proton VPN General Manager. Personal account used for checking news and adding commentary. Posts are not official company statements until RTed by @ProtonVPN.
Jake James @Jakeashacks
77K Followers 192 Following Someone who likes Apple products and cybersecurity
Sam Bingner @sbingner
36K Followers 49 Following - Wrote TetherMe, Subscriber Artificial Module (SAM) and for iPhone and collaborated on checkra1n and unc0ver jailbreaks; Swift Sucks
unc0ver Team @unc0verTeam
120K Followers 8 Following Official Twitter of the team behind the most advanced jailbreak tool. Jailbroke iOS 11.0-13.5.
@Pwn20wnd @Pwn20wnd
204K Followers 286 Following Hacker @unc0verTeam. Jailbroke iOS 11.0-14.8. Helping Apple make iOS more secure by unc0vering real security issues. #unc0ver
CryptoCat @_CryptoCat
9K Followers 228 Following Security Researcher @rapid7 😈 Hacking Content @ https://t.co/U7jVhNr9sC 💜
Azeria Labs @azeria_labs
15K Followers 2 Following Mobile & IoT Security, ARM Assembly, Exploit Development & Reverse Engineering Tutorials and On-site Trainings | Book: https://t.co/GLBKFniaXG
Martijn Bogaard @jmartijnb
1K Followers 1K Following Reverse engineers source code by day and reviews binaries by night. TEEs, TAs, bootloaders (Secure Boot), RTOSs, firmware blobs and other low-level sw.
libimobiledevice @libimobiledev
2K Followers 3 Following A cross-platform FOSS library written in C to communicate with iOS devices. Official account for development news and releases.
Csaba Fitzl @theevilbit
9K Followers 1K Following macOS Security -- Trail running 🏃 -- Mountains ⛰ -- Tolkien fan For mountain pictures, go to: https://t.co/Xf7KDW5fKu
ZygoSec @ZygoSec
2K Followers 1 Following Education platform for acquiring skills in modern vulnerability research & software exploitation
uz.ra @Chr0miumCandy
269 Followers 50 Following Used to be an iOS Tweak dev (Aerial, Planetes, Nazuna etc.) Be a tester: https://t.co/oQ8WNmFkRp GitHub:https://t.co/pwpuDQv3tt
Sileo @GetSileo
58K Followers 11 Following A proper APT Package Manager for jailbroken iOS 11 and up. For support, refer to @SileoSupport.
Vitor Falcão "busfac... @busf4ctor
5K Followers 640 Following Full-Time Bug Bounty Hunter | 🥈 2x Google bugSWAT 2nd Place | 🥇 1x Google bugSWAT Best AI VRP Researcher
spaceraccoon | Eugene... @spaceraccoonsec
26K Followers 314 Following Author of "From Day Zero to Zero Day" - No Starch Press. Every day is 0day! Personal profile - all opinions expressed are my own.
Sick.Codes @sickcodes
17K Followers 6K Following Security researcher 🇦🇺 Good-faith hacking 🤡 Weaponizing source code 🧬 https://t.co/qulkQaGWp9
@scottyab@androiddev.... @scottyab
2K Followers 1K Following Senior Android Engineer (remote), author, speaker, husband & father. Love ☕, 🍺 , 🌯, 🍔 & 🏃(on the trails). Founder @swmobilegroup meetup
ippsec @ippsec
123K Followers 367 Following
Justin Elze @HackingLZ
71K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Josh Long (the JoshM... @theJoshMeister
152K Followers 6K Following Cybersecurity evangelist: award-winning public speaker, writer, & researcher, specializing in Apple security, malware, scams, privacy, & AI. 🍎🛡 #SpacesHost
![Account for the day[0] podcast + media.](https://pbs.twimg.com/profile_images/1221600753904537601/8sV0PIy_.png)
Samuel Groß @5aelo
25K Followers 524 Following Working on Project Zero, Big Sleep, and V8 Security. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
V4bel @v4bel
3K Followers 158 Following Independent Vuln. Researcher / Pwn2Own Berlin 2025, 2026 / Google kernelCTF 0-day / Google kvmCTF 0-day / Pwnie Awards 2025
Robert Chen @NotDeGhost
7K Followers 674 Following founder @osec_io | web/pwn with @redpwnctf + @dicegangctf | prev @dfsec_com
Shielder @ShielderSec
2K Followers 1 Following InfoSec boutique. Owning things since 2014. We love to go for the extra mile, where we usually find the best 🦟🐞🪲🪳🐛🐜🕷 the others miss.
maitai @MaitaiThe
482 Followers 1K Following CTF @fibonhack | Pwn2Own 2026 | Security @Doyensec | Prev: @ShielderSec, bartender
TwinkleStar03 @_twinklestar03
461 Followers 324 Following Breaking weird machines! Research Intern @ DEVCORE #Hardstyle
Angelboy @scwuaptx
6K Followers 993 Following Senior Security Researcher at @d3vc0r3 MSRC 2024/2025 MVR Top 100
LemonTea1014 @LteaaR1014
52 Followers 336 Following Student / CTF player / Developer / Cybersecurity / Reverse / Web exploitation
YingMuo @YingMuo
247 Followers 207 Following Rookie Security Researcher. Focus on IoT and learning macOS Security.
/bin/cat 🐈 @bincat_ctf
41 Followers 12 Following cats & ctfs, members are followed Recruitment form: https://t.co/rn2iJh6se5 https://t.co/RU17g0O9Mb 🇹🇳 🇯🇵 🇵🇰 🇪🇸 🇮🇩 🇫🇷 🇺🇸
Squid Proxy Lovers @SquidProxyLover
267 Followers 23 Following Competitive CTF team • Security research • R&D Join @ https://t.co/vU7BvQdIWG Team @ https://t.co/Xq3UxEMC8h Contact @ [email protected]
Attack and Defense @attackndefense
1K Followers 8 Following @[email protected] - Mozilla's Security Internals for Security Engineers, Security Researchers, and Bug Bounty Hunters.
Youssef (s3c) @s3c_krd
10K Followers 549 Following Security researcher & Ambassador at Hackerone. Founder @haxeye_ #bugbounty #hacker #bugbounytipsYou might like
