Ghost St Badmus ✓
@commando_skiipz · …in your infra · joined 23 Jan 2019
Just a random guy, tweeting in front of the world. Sr. Application Security Engineer (API, Mobile, Web, Cloud, AI/ML) 💼. Creator (@vulnbank & https://t.co/pgYmTW2JVL)
14 719Followers
3 795Following
34 031Posts total
455KViews on collected posts
Latest posts
Looking for new posts…
I’ve just deployed a fix for the annoying stored XSS issue.
Learners can still practise exploiting the cross-site scripting vulnerability, but the payload will no longer remain indefinitely. Approximately 15 minutes after an XSS payload is stored, it will be automatically
998 views · 21 likes
· 3 reposts · 2 replies
Open on X →
Mr @commando_skiipz Just now, when I was on a practical with the student, testing for Broken Access Control vulnerability with @Vulnbank (vulnbank .org), it appears someone has loaded the server with some kind of unending payload of Stored Cross-Site Scripting (XSS) executing on
1.4K views · 15 likes
· 1 reposts · 2 replies
Open on X →
0:55
Offensive security doesn't have to feel out of reach.
Next Saturday, we're breaking it down live: what it is, what it takes, and how to get started.
🎙️ X Space · 26 Sept · 7PM WAT
Speakers: @commando_skiipz · @_aligorithm · @He_is_Legit · @PapiJruee
Come with your curiosities.
2.5K views · 26 likes
· 11 reposts · 2 replies
Open on X →
Look at all the tweets from NTA about Obi in 2013 & 2014. If you like, allow renewed hope boys to gaslight you.
2.4K views · 66 likes
· 11 reposts · 3 replies
Open on X →
Thank God say I resist the urge to waste money buy ticket
1.4K views · 20 likes
· 1 reposts · 2 replies
Open on X →
I’ve added some new features to the vuln-bank project and decided to record a quick demo. Enjoy! 🥂
Don’t mind the ‘errrm ermm’—it’s a technique I use to control my stammering. 😂😂
Also, excuse any technical mistakes I might have made, it’s my first time recording a demo. 😅 http
5.9K views · 74 likes
· 23 reposts · 13 replies
Open on X →
7:34
3:52
4:16
This is the step by step guide of how i automated security testing of the vulnerable bank app using FREE tools.
https://t.co/sNtMGPkAY2
12K views · 145 likes
· 53 reposts · 7 replies
Open on X →
First off, a MASSIVE thank you to everyone who supported the vulnerable banking app project! The overwhelming response blew me away and inspired me to take it further by building a DevSecOps pipeline to automate security testing end-to-end.
Here’s what I automated:
13.1K views · 161 likes
· 32 reposts · 5 replies
Open on X →
If you experience any issues setting it up, let me know.
1.9K views · 9 likes
· 0 reposts · 0 replies
Open on X →
https://t.co/t0LFYXIJ8G
-Clone the project
-Read the README[.]md file to set it up
-Study the vulnerable code (https://t.co/bl1uxNOKW9), then proceed to exploit the vulnerabilities.
-Feel free to share screenshots or writeup of your testing approach
-Leave a Star on github!
3.5K views · 49 likes
· 10 reposts · 1 replies
Open on X →
I built an intentionally vulnerable banking application for security engineers/interns, developers, & QA analysts to learn, practice secure code reviews, and test their application security knowledge in areas such as SQLi, XSS, CSRF, race conditions, API vulnerabilities, & more.
208.6K views · 792 likes
· 144 reposts · 24 replies
Open on X →
Where are the hackers/code reviewers? How many vulnerabilities can you spot in this code?
Apart from the hints, are there other places you can exploit?
Can you chain the vulnerabilities? https://t.co/br6AVDC1UY
176.3K views · 60 likes
· 12 reposts · 14 replies
Open on X →
Our vulnerable APIs are fully functional and are ready to be hacked using Burpsuite 😁.
We have our secure code Hall of Fame list 🥇🏆:
@r007User 🏆
@IAmKingVeli 🏆
@Ahmed___khaan 🏆
@engr_howardemma 🏆
Well done guys!👏👏 https://t.co/8yzyH7v9Fl
17.2K views · 44 likes
· 11 reposts · 6 replies
Open on X →
Against accounts of the same size
6 posts from the last 90 days, next to the 10K–100K follower range. shown far beyond its own audience, and the audience reacts.
Median views1 394this account924median for 10K–100K
Reach, %9.47%this account3.62%median for 10K–100K
Engagement, %2.22%this account1.52%median for 10K–100K
| Metric | This account | Median for 10K–100K | Ratio |
|---|---|---|---|
| Median views per post | 1 394 | 924 | 1.51× |
| Reach (views ÷ followers) | 9.47% | 3.62% | 2.62× |
| Engagement rate | 2.22% | 1.52% | 1.46× |
Others in this range → Compare with another account → How these benchmarks are built →
Growth & engagement
How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.
Views per post
99911 Feb
13.1K13 Feb
12K
5.9K14 Feb
1.9K15 Feb
1.6K
1.3K
1.1K
1.4K13 Sep
2.4K18 Sep
2.5K19 Sep
1.1K20 Sep
1.4K22 Sep
998
Last 14 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.
Engagement rate per post
0.30%11 Feb
1.53%13 Feb
1.73%
1.92%14 Feb
0.11%15 Feb
0.00%
0.00%
0.00%
1.70%13 Sep
3.37%18 Sep
1.84%19 Sep
2.62%20 Sep
1.38%22 Sep
2.61%
Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.52%.
What the audience does
Likes51.2%1 508 in total
Reposts10.8%317 in total
Replies2.9%84 in total
Quotes1.2%34 in total
Bookmarks34.0%1 001 in total
Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.
The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.
Similar accounts
Barb
@RRTimberlake
29.4K followers
· 39.6K posts
Howard Moon
@HowardMoon589
29.4K followers
· 118 posts
Reese Gorman ✓
@reesejgorman
29.4K followers
· 17.1K posts
LittleBigWhaleTV
@LilBigWhaleTV
29.4K followers
· 1.8K posts
U.S. Embassy Cotonou ✓
@USEmbassyBenin
29.4K followers
· 277 posts
Francis Higgins
@ViperHiggins
29.4K followers
· 680 posts
Wαlk-Mαn Ajíth
@WalkMan_Ajith
29.4K followers
· 51.7K posts
Jackie Baillie
@jackiebmsp
29.4K followers
· 15.1K posts