Turbo Intruder 2 has landed! You can now surpass 100,000 RPS over WiFi using the new HTTP/3 engine, test HTTP/3 exclusive targets with the Burp adapter, and deploy new research-grade race condition techniques! Check out the post below for full details:

People who say PHP is insecure are uninformed, and I'll happily have a healthy debate in the replies. The reputation comes from the 90s and early 2000s, when PHP powered most of the web and security was an afterthought everywhere. People who cut their teeth hacking those sites still feel the flinch when they see PHP. Modern PHP ships with secure primitives out of the box, like prepared statements via PDO and built-in password hashing. Frameworks like Laravel go further and escape output by default. And these days you often can't tell a site is running PHP at all, most frameworks route away from the .php extension now. Before you throw a jab at a language, framework, or any technology, try testing it first. Then let's have a wholesome argument.

Are you guys ready for this year's @BugBountyDEFCON?

Is this an LSD flashback or did a person dressed as a red elephant called Welephant used to come into your school to teach you about not starting fires?

The tech in this series is awful, I remember it being quite good in the first series apart from in the final episode when the analyst finally realised it was base64 encoded which anyone could spot in a second 🙄

I’ve been watching “The Undeclared War” and it’s making want to get into malware analysis.

Starting to get the DefCon FOMO, although nice to not be feeling the anxiety of having to deliver a talk/workshop.

Introducing HackingHub Teams We're launching a brand-new experience for teams, and we want to shape the future of standard cyber training together with you. We’d love to connect, hear your feedback, and build features that fit your team's exact needs. Give your team access to practical, hands-on labs, track CPD automatically, assign important training with deadlines, monitor learner engagement, and purchase additional training only when needed. Includes up to 10 learners, full functionality, no credit card required

What happened to these?

What I imagine in my head when people are talking about their multiple AI agents.

Checked all the obvious stuff, been through emails, photos etc for any clues and nothing. Really hoping it’s not just bricked.

Weird OpenAI error message.

This man offered me a voucher to my own fcking course 😤

Not sure what a huggingface is and feels like it’s too late to ask….

Learn the hacks. Stop the attacks. We need a lot more people who know how to break AI to help secure it. Excited to teach the next generation of AI hackers! 🚀

I’ll give a free seat to one person that retweets and responds to this tweet with a 🧑🏽‍💻