Mohammed Diaa

A year ago, we had product–market fit. Today we have something harder to build: a GTM machine. This was the biggest quarter in Oneleet's history. It wasn't one whale, and it wasn't luck. It was the unglamorous work we started right after Series A: - Hired AEs and built them a playbook - Turned on paid acquisition for the first time and measured it scientifically - Built GTM engineering so growth doesn't depend on me. None of that existed a year ago. Every month since has been bigger than the last. We've been hitting 7-figures in ARR added each month as a result. And here's what I want people to understand about this category: compliance gets you in the door, but security is the product. Anyone can automate a checklist. We put a real security team behind it, because a SOC 2 that doesn't actually make you safer is just paperwork with a badge on it. The market is waking up to that difference. We're not slowing down.

It’s fascinating to me to see a cultural gap between existing computer hackers and bug bounty hunters and people that simply had no ability to surface vulnerabilities in companies meaningfully before LLMs made it as easy as asking a question. Feeling justified dropping an unfixed vulnerability on a company with little or no security posture on Twitter just signals to anyone that’s an adult that you are probably a dumbass. It’s optimising for attention rather than impact. You can report this to the CERT in the relevant country and move on with your day, posting it on Twitter is entirely self-serving and disingenuous. There’s a real decoupling of several things at play, in order to find issues of substance it actually conferred skill (and most likely intellect and critical reasoning skills) and now as that rising tide has lifted all boats you are going to get more and more people that can surface the issue but don’t understand the customs surrounding how vast swathes of this industry function.

This isn't even an "AI can't be held professionally accountable" or "that's not how red teaming works" take. Even ignoring all that, if your goal is to throw random open-source tools at a target and hope for the best, a shell script would genuinely do this better

Do people watch these demos before reposting them? The video shows the tool fumbling every step of the way It googles "how to automate vulnerability scanning", tries (and sometimes fails) to install random tools, hallucinates commands, and can't access its target for 20 minutes

Just released AcquiScan, a tool that extracts acquisition and subsidiary information from SEC filings by parsing structured filing exhibits or using an LLM to analyze unstructured filing documents github.com/mhmdiaa/acquis…

how to hack discord, vercel and more with one easy trick kibty.town/blog/mintlify/

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: http1mustdie.com

ToolShell coverage has been all over the place. We held off publishing until we could reconcile the discrepancies between the original exploit reports, Microsoft’s advisories, public PoCs, and vendor writeups. Appendix breaks down the CVE mixups and variant exploits

Hacking Windsurf: I asked the AI for the shell, it said yes. new video’s out. I show how I could’ve hacked you… just by getting you to click my link. Link posted below.

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓↓↓

The @ctbbpodcast episode with Jon Colston (Mayonaise) goes deeper into subdomain permutation recipes, how to think about keywords, all that good stuff Definitely worth a watch before implementing tip #3 youtu.be/4k1G63mhoek?t=…

Subdomain DNS brute force isn't just blasting "word + domain" DNS queries Here are six common pitfalls and how to avoid them:

AWSPEAS (github.com/carlospolop/Cl…) maps what AWS creds can do: reads IAM, simulates calls & brute-forces perms, then flags risks via HackTricksAI. Essential for Red Team/Pentest ops. #cloudpeass #AWS #CloudSecurity

I made a tool to help test archive (zip/tar) extraction bugs (synk working directory into archive, add path traversals, links, permissions, etc): github.com/avlidienbrunn/…

Trickest CLI v2.0 is out! This update focuses on turning the workflows you build into production-ready processes that feel intuitive and are easy to monitor. Let's break it down 👇 (1/7)

I'm a hacker and AI researcher who has reported vulnerabilities to OpenAI, Google, and others. I wrote this guide as a reference of all of the ways that you can hack AI. It has saved me hours. Bookmark this if you need a reference for what all to try (AND includes mitigations).

Introducing MSFTrecon - MSFTRecon is a reconnaissance tool designed for red teamers and security professionals to map Microsoft 365 and Azure tenant infrastructure. It performs enumeration without requiring authentication, helping identify potential security misconfigurations and attack vectors. github.com/Arcanum-Sec/ms…

I'm very happy to finally share the second part of my DOMPurify security research 🔥 This article mostly focuses on DOMPurify misconfigurations, especially hooks, that downgrade the sanitizer's protection (even in the latest version)! Link 👇 mizu.re/post/exploring… 1/2

The results are in! We're proud to announce the Top ten web hacking techniques of 2024! portswigger.net/research/top-1…

Voting is now live for the Top Ten (New) Web Hacking Techniques of 2024! Browse the nominations & cast your votes here: portswigger.net/polls/top-10-w…