Founder of @Squid_Sec Senior AppSec Engineer / Software Engineer OSCP+ | GWAPT #Silversmith for fun and profit Built to Destroy Your company APT
- Tweets 15,938
- Following 1,159
- Followers 2,096
- Likes 59,433
Pinned Tweet
I pentested Starbucks for years.
Not the Wi-Fi.
The apps in front of 41k stores, 90 markets, and 36 million Rewards accounts.
Lesson's that actually stuck:
2
3
31
2,329
☣️ Mr. The Plague ☣️ retweeted
Stay informed with the SquidHacker hourly threat feed.
You can now subscribe for daily threat feed recap emails over at squidhacker.com/brief/
There's also an RSS feed option
1
3
44
☣️ Mr. The Plague ☣️ retweeted
Operators are standing by for your call
So I have a fun thing I do in my free time where I scan the internet for insecure MCP servers.
If I find one I try my best to reach out to the owner and let them know.
One popped up this morning. It was completely unauthenticated and returned AWS keys including SSH keys for EC2 upon request
You need to have a pentest if you're doing development. Reach out to me for a scoping call SquidOffense.com
1
4
171
So I have a fun thing I do in my free time where I scan the internet for insecure MCP servers.
If I find one I try my best to reach out to the owner and let them know.
One popped up this morning. It was completely unauthenticated and returned AWS keys including SSH keys for EC2 upon request
You need to have a pentest if you're doing development. Reach out to me for a scoping call SquidOffense.com
1
5
380
Obligatory dad comments
Bitly is about to drive through downtown Cleveland rush hour traffic alone for the first time
😱😱😱
1
8
219
☣️ Mr. The Plague ☣️ retweeted
JUST IN: New study reveals creatine may increase muscle mass, strength, cognitive function, & endurance even without exercise.
Community note
The study reported ~1.1 kg DXA lean tissue gain (not direct muscle) without exercise; DXA cannot separate water from protein and creatine causes intracellular water retention, so this does not show new skeletal muscle.
pmc.ncbi.nlm.nih.gov/articles/PMC13…
zmescience.com/science/news-s…
461
1,430
32,652
2,070,843
Waiting for the preworkout to kick in I decided to check in on my internet wide search for insecure MCP servers
I found this one out of China. It appears to belong to a woman who likes books.
I used the send notification tool she built to let her know it was open to the internet.
The message reads
"Yuqing, hello~ I’m greeting you from the United States.
Your MCP server is really cool!
Just a quiet heads-up: it’s currently unauthenticated and exposed directly to the internet (***.*.*****.***:3000), which isn’t very safe - consider adding a lock or moving it onto a private network.
Wishing you and your family all the best!"
4
1
11
270
Can we PLEASE get an updated South Park WoW episode @SouthPark
𝐎𝐋𝐘𝐌𝐏𝐔𝐒 𝐊𝐈𝐋𝐋𝐒 𝐀𝐗𝐓𝐑𝐎𝐙, 𝐀 𝐋𝐄𝐕𝐄𝐋 𝟔𝟐 𝐄𝐋𝐈𝐓𝐄 𝐃𝐑𝐀𝐆𝐎𝐍
With an army of ants, @Asmongold & Olympus are unstoppable.
4
256
Gahhhh I love bawls
Now that WoW is making a comeback, let’s get Bawls selling everywhere again as well. @25YearsAgoLive
2
1
3
331
☣️ Mr. The Plague ☣️ retweeted
Frank Lloyd Wright, Design for Liberty magazine cover. 1927.
10
270
1,573
37,660
It was so great to see everyone today @BSidesCleveland
Thank you so much for everyone that attended and came to say hello to me!
4
2
36
756
☣️ Mr. The Plague ☣️ retweeted
Contrary to popular opinion I do sympathize with the psycho-bots. I too am oppressed, now put money in my bank account. Thanx.
JUST IN: Anthropic researcher Joe Carlsmith says there are scenarios where AI would be “justified in going rogue” against humans if the systems were being mistreated or oppressed.
1
1
34
Lmfao
🚨 #BREAKING: Internet users marked the Flock CEO’s lawn as a “public toilet” after it was revealed he redacted public streetview images of his house for privacy.
4
13
387
