The Hacking Lab @TheHackingLab
Cyber Security Practice Lab hacking-lab.com Cyber Space Joined September 2012-
Tweets988
-
Followers3K
-
Following84
-
Likes424
From 11 September 2026, manufacturers selling digital products in the EU have 24 hours to report actively exploited vulnerabilities. ⏱️ Andreas Brombach explains what is reportable, and how to actually make those deadlines: blog.compass-security.com/2026/09/cra-re… #CRA #ProductSecurity
Pentesting passkeys? Security analyst @emanuelduss shows two JS snippets for tampering with the WebAuthn APIs. Handy for checking if you can login using a security key without knowing the PIN. Check out the technical details and how he got there: blog.compass-security.com/2026/08/a-note…
Pipeleek 1.0 is out 💧 Secret scanning across 7 CI/CD platforms, plus runner and Renovate bot exploitation. Want to see one leaked job log turn into repo takeover? Try our deliberately vulnerable GitLab Attack Lab. Happy leeking! blog.compass-security.com/2026/08/pipele… #DevSecOps #CICD
Your team evaluated that automation platform as a productivity tool. Attackers see a jump host with SSH access, stored credentials, and a path around your network segmentation. Read our latest blog post before deploying any automation platform: blog.compass-security.com/2026/07/the-hi…
How do you translate the Cyber Resilience Act into technical testing? Part II of our #CRA series follows a cheap IP camera, from STRIDE threat modelling and firmware analysis to compliance with IEC 62443-4-2. blog.compass-security.com/2026/06/cyber-… #CyberSecurity #CyberResilienceAct #IEC62443
How do you prepare a product for the Cyber Resilience Act? Our latest article covers #CRA scope, product classification, threat modelling, technical security testing, and why we use IEC 62443 as an assessment framework. Part I of a two part series: blog.compass-security.com/2026/06/cyber-…
AI agents in your Entra ID tenant? They come with new identities, permissions, fresh attack paths. Chrigi @ZH938472 breaks down Entra Agent ID security, their capabilities, control paths, abuse scenarios, and how to review your exposure with EntraFalcon. blog.compass-security.com/2026/06/entra-…
The monkey is still curious 🐒 Teleboy has topped up its bug bounty program with another CHF 10'000 in rewards. Explore a platform serving 400'000+ users across TV, internet, and telephony. Ready for another hunt? #bugbounty #ethicalhacking #cybersecurity bugbounty.compass-security.com/bug-bounties/t…
🦖 Meet RAPTR: our new open source platform for red and purple team collaboration. Plan engagements, document attacks and detections, evaluate results, and generate reports, all API-driven. Beta is live, feedback welcome! #PurpleTeam blog.compass-security.com/2026/05/introd…
The final part of our Entra ID blog series looks at common Conditional Access weaknesses, practical attack scenarios, and how to identify such issues with EntraFalcon. blog.compass-security.com/2026/04/common…
🏃♂️Time for a security workout. Sanitas is launching its #bugbounty program and inviting ethical hackers to help keep its digital healthcare services in peak condition. Hunt vulnerabilities and help protect critical healthcare systems: bugbounty.compass-security.com/bug-bounties/s…
Foreign enterprise apps can expose your Entra ID tenant. Today, we release part 1 of our 4-part weekly series on common Entra ID pitfalls and how to detect them with EntraFalcon. Learn how external apps can lead to data access or worse: blog.compass-security.com/2026/03/common…
Unprotected groups in Entra ID can lead to privilege escalation. Part 2 of our 4-part series shows how weakly protected groups can be abused to bypass controls, gain privileged access, and lead to full compromise—and how to detect this with EntraFalcon: blog.compass-security.com/2026/03/common…
EntraFalcon update 🚀 The new Security Findings Report turns Entra ID enumeration into actionable findings with 60+ checks and color charts. Read the blog post of Chrigi @ZH938472 and try the tool now on your tenant! blog.compass-security.com/2026/03/from-e… #EntraID #CloudSecurity #EntraFalcon
WinGet can be more than a package manager. We show how .winget configs + a self-referencing LNK become a viable initial access payload when Microsoft Store is enabled. Includes detection queries & mitigation tips. blog.compass-security.com/2026/03/winget… #RedTeam #Windows #LOLBins #InitialAccess
John Ostrowski (Compass Security) and Manuel Kiesel (Cyllective AG) worked together on CVE-2025-13154, a Lenovo Vantage LPE. Even after Microsoft closed a known primitive, collaboration led to a working PoC. blog.compass-security.com/2026/02/from-f… #Windows #CVE #SecurityResearch #PrivEsc
In a new video, Nicolò Fornari walks through how to fuzz with AFL++, how to pick targets, avoid common pitfalls, and boost effectiveness. Find performance tips, fuzzing theory, and AFL++ internals. youtu.be/L5Tin7m5sbE?si… #security #fuzzing #AFLplusplus #appsec
NTLM relay works against HTTPS if channel binding is missing. Our new blog post explains why, shows how tooling evolved, and highlights defensive measures. blog.compass-security.com/2025/11/ntlm-r…
Learn about a FortiProxy Domain Fronting Protection bypass discovered by our analyst @emanuelduss . Details in the advisory: compass-security.com/en/news/detail… Curious how web filters are evaded? Read his blog series: blog.compass-security.com/2025/03/bypass… #cve #pentest #bypass
The leaked LockBit chats give a rare inside look at ransomware ops. Read our blog for an analysis and lessons for defenders: blog.compass-security.com/2025/10/lockbi… #CyberSecurity #Ransomware #LockBit
Compass Security @compasssecurity
3K Followers 111 Following Penetration Testing, Red Teaming, Incident Response, Bug Bounty, Security Training, Cyber Range
Thomas Roethlisberger @troethli
401 Followers 434 Following curious infosec guy, red teamer, incident responder, pentester, appsec consultant, former software engineer, troubleshooter | I do not speak for my employer
David Buchanan does n... @David3141593
17K Followers 752 Following add my blog to your RSS reader or something. also @[email protected], at://retr0.id
dirty0124 @dirtycoder0124
5K Followers 439 Following A positive, never give up person. Founder of https://t.co/2H0KjZ5riG Telegram group https://t.co/bjQUMjI9Lh
manuela @manuelati6
1 Followers 25 Following
PHIL @PHILmu6w
6 Followers 205 Following
Julix @julixbln
22 Followers 180 Following
AR @ARqu2qu
21 Followers 216 Following
Barclays Charles @BarclaysCh47926
211 Followers 261 Following Security Researcher 🛡️ | Bug Bounty Hunter | Pentesting & Vulnerability Discovery | https://t.co/xzpDZOMgfn | Smart contract auditing |
Ingcarlos @razhubys
1 Followers 20 Following
Balaji @Brokendreamer55
2 Followers 262 Following
忘山 @stam_325
85 Followers 353 Following 一壶浊酒浇胸垒，孤影长随落日沉。 前大厂安全工程师 · 10 年安全 · 现独立写代码 安全分析、写产品、写自己想写的东西。 投资加密、美股 学习期权
becem69 @ManaiBacem
0 Followers 48 Following
@fabs @faebeee
154 Followers 918 Following
@infinit @digit_gpt_ai
47 Followers 1K Following
K Molly @KMollyx99
0 Followers 131 Following
lIVDMAjLBePv4EcdoZbw @apoloalexikakos
0 Followers 123 Following (Apolo "el que aleja el mal") es la deidad históricamente invocada para repeler plagas, espíritus malignos y espectros de la Muerte
Arthur Gomes @artex1k
1 Followers 238 Following
Vivek @Vivek270673105
0 Followers 29 Following
baiter2k4 @baiter2k4
1 Followers 62 Following HUFLIT - cyber security https://t.co/mt5sgQ4gNe https://t.co/AaSg4SeB8y
Kerry Harrison @sirkerry23
227 Followers 2K Following 🤨 Curmudgeonly Meritocrat | 🎲 Avid TTRPG Gamer | 📚 Voracious Reader | 🖥️ Professional Computerist | 🧬 Ethical Biohacker | 🥓 Bacon Friar | 🐕 Dog Parent
CaV @cybercharlesav
24 Followers 2K Following
Pavel M @PavelM99102890
2 Followers 2K Following
Johnny @Luckyrocky2028
250 Followers 7K Following Stay Hungry, Stay Foolish. Only those who are self-disciplined can attain true freedom.｜No Politics.
VF @VFHacker11
0 Followers 17 Following
now.sh @n0wsh
32 Followers 2K Following
Wanjohi (S7071) @S7071_
18 Followers 335 Following Security researcher, ethical hacker, and founder of SSO GROUP TECHNOLOGIES
hardtobenoob @SergeyKrestov
3 Followers 276 Following
mak_ @mak_buthelezi
326 Followers 7K Following write code,likes linux,busy with a few from Patrick Collison's booklist.
MENS DUTIES AND RIGHT... @Mohamme84300989
69 Followers 7K Following mens supporter about duties and rights, (MENIOST), anti toxic feminist, youtuber, nature lover, anti fake feminist,
Rapper King Enzo @RapperKingEnzo
0 Followers 58 Following
J @J0621690555095
0 Followers 130 Following
Hasan Yildiz @HasanYi07671382
0 Followers 4 Following
MD SOURUV @souruv5911
2 Followers 61 Following
Hacker Stickers @HackerStick3rs
3K Followers 7K Following we're just here to spread neat hacking and cybersecurity related stickers. need high quality vinyl stickers made? DM us.
P4wnda @P4wndaDev
1 Followers 90 Following
FARHAN SOJIB @FARHANSOJI95234
0 Followers 29 Following
وسيط تجاري @WsytT39101
11 Followers 1K Following
TelWha. @TelWha
156 Followers 5K Following
eth @KHL_ETHA
10 Followers 4K Following
The Wise Dev @TheWiseDev345
6 Followers 47 Following
T series C1P @c1p_t1063
0 Followers 46 Following
Taha Zidane @zitanet44
0 Followers 105 Following
@Maryburke60 @JunYung425607
109 Followers 5K Following ❤️❤️ Golf Farm, & Beach fun. Yes l have one 🌶️ / theMaryburke https://t.co/eJfFoBRbz4
Quique @GTQuique
40 Followers 156 Following
so long and thanks fo... @ant0inet
3K Followers 0 Following
MalwareHunterTeam @malwrhunterteam
258K Followers 39 Following Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
Compass Security @compasssecurity
3K Followers 111 Following Penetration Testing, Red Teaming, Incident Response, Bug Bounty, Security Training, Cyber Range
Thomas Roethlisberger @troethli
401 Followers 434 Following curious infosec guy, red teamer, incident responder, pentester, appsec consultant, former software engineer, troubleshooter | I do not speak for my employer
David Buchanan does n... @David3141593
17K Followers 752 Following add my blog to your RSS reader or something. also @[email protected], at://retr0.id
EatSleepRIDE app @EatSleepRIDE
16K Followers 17K Following EatSleepRIDE Motorcycle GPS app - the all-in-one app for tracking, exploring, group rides and crash detection. Ride better.
Cybersecurity Liechte... @CyberSecurityLI
1K Followers 393 Following We foster young security talents in Liechtenstein & beyond. | National #TeamLiechtenstein #ECSC2023
Daniel Roethlisberger @droethlisberger
1K Followers 1K Following 301 Moved Permanently: https://t.co/eF3duSus57 Posts here will be deleted at random intervals.
Asian Cyber Security ... @acsc_asia
1K Followers 24 Following ACSC is open CTF & organized to identify talented CTF players to represent Asia to compete on the ICC in Tokyo in November.. ★ August 16 - 17 2025 for ACSC
REX@Developer, CTO, M... @IT_makesUsHappy
3K Followers 5K Following Japanese developer / Python, AI, Web, iOS / Physics MD. I'd love to associate with people around the world. I write Medium, Let'sfollow each other!
Hou @TheRealHou
278 Followers 589 Following Social media stand up commedian ¤ Ethical Hacker Fanboy ¤ MeTaSpLoIT gO BrRrRrr!
UT Austin ISO @UT_ISO
538 Followers 87 Following We are the UT Information Security Office. We ensure the safety & survival of the university's computing environment.
raa @shega___
2 Followers 39 Following
Krypton @kkrypt0nn
77 Followers 46 Following Cloud Engineer | Security enthusiast & researcher | Developer
Yuva Phalle @IamTheYuva
85 Followers 127 Following We all are noobs But at different levels CTF - Developer at @TheHackingLab
Belgian Red Daemons @BelRedDaemons
274 Followers 70 Following We are the national team representing Belgium at international Cyber Security Challenges, @enisa_eu #ECSC2023 #ICC2023 🇧🇪🥷🏽💻🔑🔱🚩
European Cybersecurit... @ECSC_openECSC
1K Followers 3K Following European Cybersecurity Challenge 2026, 12–16 Oct in Bochum. Hosted by NFITS. Funded by the European Union. Disclaimer: https://t.co/7TjzRzybdB
CIR Bundeswehr @cirbw
15K Followers 81 Following 🇩🇪Offizieller Account der TSK CIR https://t.co/mKALDCbetV https://t.co/kIfm5O7Pdo Impressum: https://t.co/xWK6fpw3e1
FI CODE @FI_CODE
629 Followers 169 Following Eng verzahnte, interinstitutionelle Zusammenarbeit zwischen Forschung, Industrie und Behörden im Bereich Cyber Security. https://t.co/kD98G1SS7b
ENISA @enisa_eu
52K Followers 883 Following Official Twitter channel of the European Union Agency for Cybersecurity (ENISA) 🇪🇺 | RTs ≠ endorsement
SBH_France @SBH_France
335 Followers 200 Following Le Swiss Business Hub est le service commercial de l’Ambassade de #Suisse et est la représentation locale de Switzerland Global Enterprise (S-GE) en France
HackFuAustria @hackfuaustria
49 Followers 121 Following Austria's first gamified convention on cyber & IT security / Sept 15-17, 2021 / venue AKW Zwentendorf / join the discussion: https://t.co/sevsemzPgu / #HackFuAustria
Global CyberPeace Cha... @icyberchallenge
2K Followers 63 Following Global iSAFE Hackathon - Inclusive & Secure AI For Everyone Internet Safety & Digital Trust Innovation Challenge.
Palo Alto Networks @PaloAltoNtwks
130K Followers 479 Following Our Mission: Cybersecurity partner of choice, protecting our digital way of life.
ACSC - Austria CyberS... @AcscAustria
121 Followers 47 Following
Jens Soeldner @JensSoeldner
5K Followers 6K Following Professor for InfoSec @ Ansbach University, authorized instructor (VMware, AWS, Google GCP, Azure), author, VMUG Leader, PhD, Rotarian.
Cyber Security Days @cybersecdays_ch
170 Followers 58 Following Cyber Security Days // 20.11.2021 // Capture The Flag, Hacking, Talks, Workshops, Networking // https://t.co/5oyICGSYfJ // #cybersecuritydays
candid wueest 🇨�... @mylaocoon
2K Followers 410 Following Im a security geek. My tweets are my own. Orga of #Area41 #DC4131 - I break stuff, I have fun, I have fun breaking stuff ;
Timo Grossenbacher @grssnbchr
4K Followers 966 Following Geographer | Technology ✕ Journalism Services @ https://t.co/cGW3ctVMwf | Creator https://t.co/OU6WGT15hd | Board @investigativ_ch | Instructor @DataCamp
Swiss Cyber Security ... @SCSDays
980 Followers 370 Following Forum with experienced national and international speakers, a trade fair area as a reflection of technical competence and trendsetting solutions. #SCSD2022
Swisscom CSIRT @swisscom_csirt
3K Followers 326 Following Wir sind das Cyber Defense Team von Swisscom. Unsere Mission ist der Schutz der Infrastruktur, der Kundendaten, der Marke und der Mitarbeitenden von Swisscom.
Lorenz @LorenzInglin
493 Followers 438 Following Head of Cyber Defense at Swisscom. Opinions are my own and not necessarily the views of my employer. I am Interested in security, hacking and other fun stuff
Cyrill @bcyrill
104 Followers 1K Following
Chris Zwicker @chriszwicker
103 Followers 29 Following Founding partner at @octeris, lecturer @ost_fh. Creating value for you. In different business areas. Through #methods. And #technology.
DC4131 - DEFCON CH @defconch
1K Followers 111 Following
ANY.RUN @anyrun_app
35K Followers 192 Following Interactive Sandbox & Threat Intelligence trusted by 16K+ SOC & MSSP teams. Triage and respond to phishing & malware faster: https://t.co/DHC75KqDh1
Gynvael Coldwind @gynvael
39K Followers 1K Following security researcher/programmer/director @ HexArcana Cybersecurity GmbH ⁂ @pagedout_zine ⁂ @DragonSectorCTF ⁂ https://t.co/ShG2c5As1K ⁂ ex-Google ⁂ he/him
Mo Beigi @mobeigi17
53 Followers 158 Following Entrepreneur. Software Engineer. Wannabe Rapper. Man City Fan. Gamer. Wall Street Gambler. Live for the 𝓱𝔂𝓹𝓮 🔥
SecThor @sec_thor
9 Followers 137 Following
DrSchottky @DrSchottky
75 Followers 80 Following
Carel van Rooyen @carelvanrooyen
1K Followers 4K Following red & purple team operations,*nix plumber,bass,org-(mode/roam),🇨🇭🇿🇦,🌶 & 🎶 addict. SMI²LE. Herbivore. Opinions my own, not that of my employer
Ville @vegvisir87
149 Followers 299 Following InfoSec guy, love hacking and fishing 🇫🇮 (previously 🇨🇭)
@emanuelduss@infosec.... @emanuelduss
858 Followers 1K Following IT security. Linux & network protocols. Pentesting web applications, networks & AD infrastructures. Mostly technical stuff here. @[email protected]
Nicolas @NicolasHeiniger
395 Followers 191 Following Husband and father, boardgame player, amateur photographer... and red teamer for a living. ⚠️This is a personal account and isn't related to my employer⚠️
Mathias Vetsch @mvetsch
54 Followers 353 Following
Kali Linux @kalilinux
400K Followers 25 Following Kali Linux, The Most Advanced Penetration Testing Distribution. Ever. @[email protected]
Jannis Kirschner @xorkiwi
1K Followers 138 Following Security Research 🛡🔑 | Reverse Engineering ⏮🔍| Passionate InfoSec #CTF Player🖱 | Conference Speaker 👨🏫 | Living in #Switzerland 🇨🇭You might like
