BS-free offensive security tweets. I host @secTalksNL & @securityCTF. Strong exploit dev fetish. Baker of 0days.
The Netherlands
Joined December 2016
- Tweets3.8K
- Following2.5K
- Followers4.8K
- Likes598
Did someone test the stability of exploit-db php2shell exploit here: hxxps://www.exploit-db.com/exploits/52704
Any reports?
retweeted
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate.
How it works: blog.google/security/agentic…
For real-world vulnerabilities PageBreak has discovered 👇
bughunters.google.com/blog/p…
Hackers of NL,
this one is for you
As a winner of the previous editions. I highly recommend this contest. It's for a good cause, great way to tap into the community and show your skills.
#netherlands #hacking #infosec
I'm offering sponsored logos on my hoodie while hacking in this contest, which gets a lot of media attention.
send your logo here:
[email protected]
space starting at 499EUR
you can buy multiple
(only 4 left!)
#cybersecurity #netherlands #thehague
each time we send an email to msft email (outlook, azure, etc) their spam filter mark our domain hacktivity.eu as a spam just because it contains "hack" in it.
All other services are OK.
so,
pro tip: if you start a security company don't name it hack-something.
my research paper got accepted to @Bsideslisbon this year. See you there.
teaser: using ai for hacking the physical (red teaming and beyond)
Started as a joke but sold quickly:
Offering 6 places to sponsor your logo on my hacking hoodie. I will be in the biggest cyber security events during the cyber week in #Netherlands with lot of media and attention including One Conference and Hack The Hague
[email protected]
still cannot believe this is a free tool!
find subdomains via SSL certs:
crt.name/
credits: Malvin of @hadriansecurity
Call for Speakers for #DefCamp 2026 is open on Sessionize and I've just submitted a session!
Teaser: It's about mixing the physical security attacks with ai
sessionize.com/defcamp-2026/
@DefCampRO #ro
Made a free tool because we kept getting asked "how do I know if my VPN is actually leaking." One click shows your real IP, DNS, WebRTC and timezone exposure exactly like a website would see it. No account, no catch. chromewebstore.google.com/de…
retweeted
HOLY SHIT!!! 🤯
NEVADA POLICE LEAKED A CRYPTO SEED PHRASE ON BODYCAM.
The video went public.
Shortly after, the wallet was drained of $1.1 MILLION+.
No blockchain hack.
No sophisticated exploit.
Just a seed phrase appearing in police footage.
One leaked video. $1.1M gone. 😭
🤖 Made with AI
@TallyForms , a (>5m ARR) bootstrapped scaleup, got breached just few hours ago. Probably because of an outdated metabase instance.
If you are vibe coding - Please check your security posture as soon as you can. It's definitely not worth it for you to lose your customers trust.
World Wide Worm 101:
1. Shodan WordPress filter: http.component:wordpress (results 50k hosts)
2. Extract the list
3. Pwn via wp2shell poc - github.com/Icex0/wp2shell-po…
4. Let it rain shells <3
Looking for exposure assessment? Hire us at hacktivity.eu
#wp2shell #infosec
Update: I just polished one of the community's favorite libraries on Windows Privilege Escalation for penetration testers and red teamers.
Focused on practical attack paths & real-world privilege escalation techniques seen in my enterprise assessments.
hacktivity.eu/windows-prives…
Can a small, self-hosted LLM outperform state-of-the-art models at evasive malware development?
outflank.nl/blog/2025/08/07/…
credits: @kyleavery, @OutflankNL, @BlackHatEvents
#ai #exploits #offsec
