Francesco Enrietti (@not4nhacker) profile picture

Francesco Enrietti

@not4nhacker

Chief "Have you ever heard about OAuth?" Officer @ShielderSec

Joined January 2022
  • Tweets75
  • Following313
  • Followers59
4Media
Photo by Francesco Enrietti (@not4nhacker)Photo by Francesco Enrietti (@not4nhacker)Photo by Francesco Enrietti (@not4nhacker)Photo by Francesco Enrietti (@not4nhacker)
Francesco Enrietti retweeted
cts🌸 (@gf_256) profile picture
cts🌸
@gf_256Oct 24
she’s a 4 but she’s the private key of the eMudhra intermediate certificate authority trusted by billions of devices
20
290
4
5,360
65,032
Francesco Enrietti retweeted
Tib3rius (@0xTib3rius) profile picture
Tib3rius
@0xTib3riusOct 23
-----BEGIN PRIVATE KEY-----
Image from Tib3rius (@0xTib3rius)
49
587
21
7,272
69,062
Francesco Enrietti retweeted
St1ka (@St1ka) profile picture
St1ka
@St1kaOct 15
Modern English is incomprehensible to someone born 100 years ago
angel (@yungvocafoid) profile pictureangel@yungvocafoidOct 14
steam could kill my entire bloodline and i would still use it over epic’s vibecoded jerusalemware
77
3,832
28
96,256
812,589
Francesco Enrietti retweeted
lcamtuf (@lcamtuf) profile picture
lcamtuf@lcamtufSep 16
Worried about AI? Don't be. Using agents at work simply empowers you to focus on more meaningful work, similarly to how self-checkout allowed cashiers to pursue higher-impact projects at the grocery store
17
229
9
4,276
93,979
Francesco Enrietti retweeted
Wes Bos (@wesbos) profile picture
Wes Bos
@wesbosSep 10
we got toothbrush DRM before GTA6
Image from Wes Bos (@wesbos)
68
466
23
14,780
241,653
Francesco Enrietti retweeted
Mindless (@Mindlaess_) profile picture
Mindless@Mindlaess_Sep 10
An RCE I reported to @thezdi got accepted some time ago! This was a fun one to chase down, hopefully I'll have the patience to write down about it in detail in the future ^^
Image from Mindless (@Mindlaess_)
1
3
83
Francesco Enrietti retweeted
gaussie (@gaussie) profile picture
gaussie
@gaussieJul 3
Replying to @rekdt
Many a late night I have paused momentarily from looking at walls of data and logs and dreamt of working a happier job. Like testing cosmetics on little white bunnies or a suicide hotline.
2
2
24
422
It's like it never left ❤️
Image from Francesco Enrietti (@not4nhacker)
24
Francesco Enrietti retweeted
vx-underground (@vxunderground) profile picture
vx-underground
@vxundergroundJun 17
I haven't checked the Chinese Threat Intelligence places in awhile. I said, "Hmph, I wonder what's going on over in Mandarin city" (I don't know any cities in China, so I make up names). I checked out Rising (瑞星), they do technical write-ups about malware hitting China, and stuff, because they're ... headquartered in China. They're a Chinese company. Anyway: > be me > open rising blog > all mandarin > damn i wish i could read > translate page > supply chain attack > wtf.jpeg? > AutoGLM hit > wtf.mp4? > Chinese AI agent thingie > made by Z ai > (idk wtf that is) > GitHub for AutoGLM compromised > download link replaced with malware payload I said, "What the fuck? You guys have premium AI slop too? You guys have nerds attacking your supply chains too?" Wow, we have so much in common
Image from vx-underground (@vxunderground)
27
45
3
799
26,928
Francesco Enrietti retweeted
Neil Renic (@NC_Renic) profile picture
Neil Renic@NC_RenicMay 26
Need the Pope to release an encyclical against Teams calls
77
5,096
194
31,996
620,864
Francesco Enrietti retweeted
Perseph 🇵🇸 (@Chan_but_shy) profile picture
Perseph 🇵🇸@Chan_but_shyMay 25
Italy deciding to go from 20° to 36° degrees in the spam of two days:
Image from Perseph 🇵🇸 (@Chan_but_shy)
165
5,939
376
55,115
647,479
Francesco Enrietti retweeted
Anshu (@anshuc) profile picture
Anshu
@anshucMay 20
Replying to @github
holy shit, how did the attackers find a large enough uptime window to get in?
174
686
128
14,230
962,585
Francesco Enrietti retweeted
Shielder (@ShielderSec) profile picture
Shielder@ShielderSecApr 30
Can a hostile container sneak past your eBPF tracing? Sometimes, yes. With @OSTIFofficial & @CloudNativeFdn we audited Inspektor Gadget - 3 vulns (fixed), 6 hardenings, 6 bypasses (io_uring, openat2, jumbo frames…). Work by @ndaprela & @suidpit👏 🔗 shielder.com/blog/2026/04/in…
Shielder - Inspektor Gadget Security Audit

Shielder - Inspektor Gadget Security Audit

Security audit of Inspektor Gadget, an eBPF-based observability framework for Linux and Kubernetes. Sponsored by the CNCF (Cloud Native Computing Foundation), facilitated by Open Source Technology...

shielder.com
12
22
2,082
Francesco Enrietti retweeted
lcamtuf (@lcamtuf) profile picture
lcamtuf@lcamtuf22 Jun 2024
Frankly, I'm appalled by the prospect of LLMs taking offensive security research jobs from honest, hard-working fuzzers
5
71
5
402
46,872
Francesco Enrietti retweeted
Shielder (@ShielderSec) profile picture
Shielder@ShielderSecMar 19
Attending @1ns0mn1h4ck? Meet @not4nhacker @Luk3ros and @Sev1rus from our AppSec and Red teams! They are eager to discuss about breaking complex authentication implementations and relaying all the things to DA!
Image from Shielder (@ShielderSec)
5
10
497
Replying to @AnthropicAI
it’s only Claude if it’s distilled in the Silicon Valley region of California 😤
83
309
25
8,624
606,437
Francesco Enrietti retweeted
sankalp (@dejavucoder) profile picture
sankalp
@dejavucoderJan 13
introducing claude cowork
Image from sankalp (@dejavucoder)
Claude (@claudeai) profile pictureClaude
@claudeaiJan 12
Introducing Cowork: Claude Code for the rest of your work. Cowork lets you complete non-technical tasks much like how developers use Claude Code.
101
1,705
51
24,633
964,232
Francesco Enrietti retweeted
Mehmet INCE (@mdisec) profile picture
Mehmet INCE
@mdisec18 Dec 2025
1/6 What started as a routine 24-hour vulnerability research of PostHog turned into quite the rabbit hole... 🕳️🐇 I ended up finding a way to chain a simple SSRF, a ClickHouse Postgresql Table functions SQL Escape 0-day, and default DB credentials into a full RCE. It’s a fun story about how "safe" features can be misled. 🧵👇
3
8
3
81
21,586
Francesco Enrietti retweeted
Shielder (@ShielderSec) profile picture
Shielder@ShielderSec25 Nov 2025
Want to learn more about our approach into auditing complex libraries and writing cool exploits? Attend @OSTIFofficial's meetup where our very own @Th3Zer0 and @suidpit will talk about the "Security Audit of OpenEXR" 🗓️: Dec 02 🕗: 20:00 CET RSVP: luma.com/ostif-meetups?e=cal…
OSTIF Meetups · Events Calendar

OSTIF Meetups · Events Calendar

View and follow events from OSTIF Meetups on Luma.

luma.com
5
1
8
765
Francesco Enrietti retweeted
blasty (@bl4sty) profile picture
blasty
@bl4sty17 Oct 2025
can we please get the libxml2 and ffmpeg people some cold cash, lambo's and decent quality blow as a token of appreciation for all the ASAN splats we throw over the fence and want to have fixed pronto? I know one man's trash (CVE's) is another man's treasure, but we gotta respect and support these hardworking devs a bit more. how else do you expect to play back (x-rated) flicks that come in esoteric video container formats or correctly render SVG's containing vector depictions of your favorite animals in safari?
1
10
86
8,591
Load more