Salman Asad ⚡ (@exploitable.dev)

Salman Asad ⚡

@exploitable.dev

Founder @osmsec.xyz & @bsidesvizag.in Former @offsectraining, @thinkstcanary.canary.tools

69 followers 513 following42 posts

Salman Asad ⚡

@exploitable.dev

23h

No bars 🫠

Salman Asad ⚡@exploitable.dev

Cyclone #Arnab is here 🌪️

Salman Asad ⚡

@exploitable.dev

So #TryHackMe is launching their own password manager now? 👀 careers.tryhackme.com/jobs/8620068...

Salman Asad ⚡

@exploitable.dev

Cyclone #Arnab is here 🌪️

Salman Asad ⚡

@exploitable.dev

Technical projects need TPMs not PMs who don't know jackshit about tech.

Salman Asad ⚡

@exploitable.dev

👀 github.com/syrex1013/ph...

github.comGitHub - syrex1013/php2shell: CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2) - syrex1013/php2shell

Salman Asad ⚡

@exploitable.dev

did too much of OSINT today :)

Salman Asad ⚡

@exploitable.dev

some scars never fade.

Salman Asad ⚡

@exploitable.dev

new mini pc incoming!

bsky.app/profile/expl...

bsky.appbsky.app

Salman Asad ⚡@exploitable.dev

Time to get exploit-db.com back to its former glory. #ExploitDB #OffSec #Hacking #Cybersecurity #InfoSec

Salman Asad ⚡

@exploitable.dev

We have a problem! emudhra.we-have-a-problem.com

emudhra.we-have-a-problem.comeMudhra Intermediate CA CompromiseeMudhra Intermediate CA Compromise

Salman Asad ⚡

@exploitable.dev

Diamonds in the rough, are starting to shine.

Salman Asad ⚡

@exploitable.dev

thehackernews.com/2026/10/eigh...

thehackernews.comEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareEight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT logs.

stacksmashing@stacksmashing.bsky.social

So the private-key for the eMudhra (revoked) intermediate was apparently 4. How is the root still trusted? How broken are your processes if this can happen? And honestly: How have we (as an industry) not noticed earlier :(

Salman Asad ⚡

@exploitable.dev

Time to get exploit-db.com back to its former glory. #ExploitDB #OffSec #Hacking #Cybersecurity #InfoSec

Salman Asad ⚡ reposted

Anirudh Oppiliappan

@anirudh.fi

Woah, Bluesky mentioned on TV.

Salman Asad ⚡

@exploitable.dev

TIL: tangled.org/strings/did:...

tangled.orgludus-with-nfs.md · by exploitable.devChanging default storage of Ludus to a NFS share.

Salman Asad ⚡

@exploitable.dev

new mini pc incoming!

new mini pc incoming!

change of plans...

Came across @tracebit.bsky.social - how does it differ from @thinkstcanary.canary.tools ?

Salman Asad ⚡

@exploitable.dev

Winter Arc going strong.

Salman Asad ⚡

@exploitable.dev

productive sesh: tangled.org/osmsec.xyz/l...

tangled.orgosmsec.xyz/ludus-source-osmsec3rd-party Ludus source from OsmSec.

#BSides chapters on the ATmosphere! go.bsky.app/PoH74sF #SecurityBSides #BSides #Cybersecurity #Infosec #Hacking

Salman Asad ⚡

@exploitable.dev

Me and my city are both first-timers: my first Comic-Con, and Vizag’s first ever! #ComicConVizag

I'll be setting up a 3-node @proxmox.bsky.social cluster powered by ludus.cloud (from @badsectorlabs.com) for our content-engineering team. Let's see how it goes.

ludus.cloudLudusThe easiest way to deploy cybersecurity infrastructure

View full thread

Salman Asad ⚡

@exploitable.dev

Ludus host has been setup.

So far so good!

I'll be setting up a 3-node @proxmox.bsky.social cluster powered by ludus.cloud (from @badsectorlabs.com) for our content-engineering team. Let's see how it goes.

ludus.cloudLudusThe easiest way to deploy cybersecurity infrastructure