Tory☁️ (@KoredeSec) header
Tory☁️ (@KoredeSec) profile picture

Cybersecurity, cloud & everything in between ☁️

127.0.0.1 but root
Joined March 2020
Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)Photo by Tory☁️ (@KoredeSec)
Day 87/100 Made a write up on all the vulnerabilities i have found in the app i have been testing for the last few days medium.com/@abdulmalikadebay… @commando_skiipz @ce3nerd @ife0x01 @KoredeSec @DefendWithFelix
Day 86/100 Today I read some documentation on medium about Android testing . @commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
2
5
121
Tory☁️ retweeted
I did say we'd be releasing our models periodically...introducing Gemini 4 Carbon, our next frontier model. Following Argon's release just two weeks ago, Carbon shows the pace at which we’re pushing the frontier, it ranks #1 on the recently updated v5.0 of @ArtificialAnlys Intelligence Index at 59. It also leads across key cybersecurity evaluations scoring 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on ExploitGym for exploitation, and 71.0% on CWE-bench for patching. We’re seeing significant improvements in long-horizon tasks even compared to Argon, and we’ve strengthened frontier safeguards. As we did with Argon, we’re going to roll it out gradually + responsibly. Some trusted cyber defenders will get access starting this week. We'll be expanding it to more partners through our Fairwind Program, ahead of wider availability soon, so hang tight!
1,902
2,449
1,737
30,792
5,139,050
JUST IN: Aeon, a Nigerian cybersecurity startup, has secured $1 million in funding to accelerate the development of its technology amid escalating threats from cyberattacks and growing vulnerabilities in digital infrastructure.
5
48
6
445
25,657
This is Genie 4, our most realistic and interactive world model yet. 🌐 Explore dynamic environments in real time to see how the scene responds, sounds, and how the people in it move, react, and speak.
955
2,596
1,971
23,497
3,315,333
Tory☁️ retweeted
People go through trauma and express it through reckless drinking and drugs. Others build certain websites.
Mortuary Website Dashboard Overview
48
76
3
567
20,881
Tory☁️ retweeted
Everyday is zero-day these days
4,109
6,001
1,030
73,386
8,224,198
Hey fam I successfully passed my AZ-900 exam🥳🥳
20
2
1
134
1,822
Tory☁️ retweeted
Work hard in silence. Let success be your noise. 🏆
18,953
212,004
18,790
1,345,251
27,109,762
🚨📊 Leo Messi finished in the top five of the Ballon d’Or rankings in both 2007 and 2026… 19 years apart. Nearly two decades at the very top. UNREAL LONGEVITY. 👑
186
2,597
206
26,583
746,678
DESERVED. 👏
68
1,515
36
26,253
183,146
Btw, a 39 year old Lionel Messi ended up finishing 5th in the Ballon d’Or rankings, competing with the stars of today. Not to forget his astonishing World Cup campaign. Longetivity at its peak.
110
2,445
63
23,856
256,483
God knows I’d be so pissed if Yamal won it. I’d have even preferred Mbappe ahead of him. He needs to do more for Barça to win it, and the same goes for Spain. You can’t be going missing in the biggest games and expect to win the Ballon d’Or. Messi has genuinely ruined my standards, My Messi could never.
4
171
Get in joor, well deserved Kane👏
6
169
Day 85/100 InsecureBankv2’s ViewStatement activity is exported loaded another user’s full transaction statement into a WebView with zero login, same bypass pattern as PostLogin and ChangePassword. @commando_skiipz @ce3nerd @DefendWithFelix @KoredeSec @ife0x01
Day 84/100 Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction. @commando_skiipz
2
1
8
288
I didn’t know you could run out of GitHub Actions minutes until I started going this hard on a project Every campaign we catch teaches us something, every bug gets fixed, and every fix gets tested against the cases we’ve already seen. 1,910 tests and counting. Each CI/CD run takes around 15 minutes, and I’ve already had to top up just to keep the pipeline running. Somehow, I’m almost out again. Building this thing is getting expensive in ways I didn’t anticipate lmao.
Threat actors are working overtime. Three days of chasing campaigns, watching domains rotate, and trying to get ahead of the next victim. 👇 A bank sign-in clone jumped across 4 domains in 5 days. I reported each one as it appeared. Three hosts pulled theirs, and I caught the fourth the same night it went live. Fake copies of a telecom’s official sites went down 1h 28m, 1h 33m, 5h, and 10h after my reports. A recurring brand scam? Its newest domain lasted just 2h 20m after my report. Then came the worst one: an SMS telling a Nigerian bank’s customers to “verify your identity within 24 hours.” Someone reportedly lost money to this. I traced it to one operation running 8 domains. All 8 reported. Two blocked within an hour. I also found a domain already prepared to impersonate a second bank and reported it to give an heads up. So far, 172 reports since October 12. The actors aren’t slowing down. Neither am I. : )
1
1
26
668
I wonder what cucurella has to do to get carded. Almost as if the ref left his cards at home.
1
6
199
Day 84/100 Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction. @commando_skiipz
Day 83/100 Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction. @commando_skiipz
2
1
9
336
Days 24-25/30: I went back to the basics of SIEMs, logs. How can you understand what a SIEM outputs if you don't know how to dissect and digest a log file @Niffeey007 @malik_cybersec @DefendWithFelix @gabbytech01 @KoredeSec @cyberjeremiah #30DaysCybersecurityChallenge
Days 21-23/30: I've been working on some side projects and also working on the phishing analysis section on tryhackme @Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah #30DaysCybersecurityChallenge
1
8
1
15
571
Tory☁️ retweeted
Dedicated to preaching the gospel of cybersecurity awareness in the streets of Ikeja, Lagos with @cabbagenode @TheCyberPatron_ @_DeejustDee @lady_sheraz @cyberjeremiah @HalimatAdepegba @BigAuntyAni @ChefMagicfinger @Austineprinces1 @bestmanmichael9. Huge success!🎉🎉🎉
Hello Cyber friends, are we locking in today or we are dedicating the day to enjoyment? 🤣🤣
7
20
2
69
1,427
Day 83/100 Finished exploiting InsecureBankv2’s content provider: confirmed read, inject, insert, update, AND delete, all unauthenticated.Full CRUD compromise through one exported provider with zero permission checks. @commando_skiipz @ce3nerd @KoredeSec @DefendWithFelix @ife0x01
3
1
12
434