kingthorin_rm
@kingthorin.bsky.social
IT Sec guy, zaproxy co-lead, WSTG co-lead, VWAD co-lead, OWASP Ottawa volunteer, Hac≺3r, supporter of oxford commas, #INTJ. (Opinions == mine) 🍁
Reposted by kingthorin_rm
The latest weekly release does not include the AJAX Spider and DOM XSS add-ons.
You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead.
For more details see www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead.
For more details see www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
ZAP Updates - August 2026
We’re retiring the AJAX Spider and DOM XSS add-ons from the nightly and weekly releases, and the new LLM Support add-on officially launched in August.
www.zaproxy.org
September 15, 2026 at 10:13 AM
The latest weekly release does not include the AJAX Spider and DOM XSS add-ons.
You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead.
For more details see www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead.
For more details see www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
Reposted by kingthorin_rm
The next OWASP London Chapter meetup [IN-PERSON] will take place on September 28th 2026 at 6pm. Talks from Chris Holman and Glyn Wintle.
This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social
Register to attend here:
👇
This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social
Register to attend here:
👇
OWASP London Chapter meetup [IN-PERSON]
Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security
www.eventbrite.co.uk
September 13, 2026 at 9:08 PM
The next OWASP London Chapter meetup [IN-PERSON] will take place on September 28th 2026 at 6pm. Talks from Chris Holman and Glyn Wintle.
This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social
Register to attend here:
👇
This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social
Register to attend here:
👇
Reposted by kingthorin_rm
🚨 #OWASP #Ottawa September 2026 #Meetup with Katie McMillan and Robert Babaev 🚨
Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev
#Cybersecurity #InfoSec #AppSec #Tech
Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev
#Cybersecurity #InfoSec #AppSec #Tech
OWASP Ottawa September 16th, 2026 with Katie McMillan and Robert Babaev, Wed, Sep 16, 2026, 6:00 PM | Meetup
* **Note: Our Meetup page may be removed soon due to platform changes at OWASP. For the most up-to-date** **information on OWASP Ottawa events, resources, and announcements
www.meetup.com
September 13, 2026 at 4:13 PM
Reposted by kingthorin_rm
🚨 OWASP Ottawa September 2026 Meetup with Katie McMillan and Robert Babaev 🚨
Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev
#OWASP #Ottawa #Cybersecurity #InfoSec #AppSec #Tech
Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev
#OWASP #Ottawa #Cybersecurity #InfoSec #AppSec #Tech
OWASP Ottawa September 16th, 2026 with Katie McMillan and Robert Babaev, Wed, Sep 16, 2026, 6:00 PM | Meetup
* **Note: Our Meetup page may be removed soon due to platform changes at OWASP. For the most up-to-date** **information on OWASP Ottawa events, resources, and announcements
www.meetup.com
September 11, 2026 at 3:31 PM
Reposted by kingthorin_rm
OWASP Cornucopia just released v3.5.3 (github.com/OWASP/cornuc...)
A Special thanks to Prajakta G Kamble, Ayman Algamal, Swaraj Singh, and Adarsh Kumar for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#cornucopia #appsec #security #mobile #games
A Special thanks to Prajakta G Kamble, Ayman Algamal, Swaraj Singh, and Adarsh Kumar for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#cornucopia #appsec #security #mobile #games
Release v3.5.3 · OWASP/cornucopia
What's Changed
build(deps-dev): bump globals from 17.11.0 to 17.12.0 in /cornucopia.owasp.org by @dependabot[bot] in #3460
build(deps-dev): bump wrangler from 4.127.1 to 4.129.1 in /cornucopia.owa...
github.com
September 12, 2026 at 10:32 AM
OWASP Cornucopia just released v3.5.3 (github.com/OWASP/cornuc...)
A Special thanks to Prajakta G Kamble, Ayman Algamal, Swaraj Singh, and Adarsh Kumar for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#cornucopia #appsec #security #mobile #games
A Special thanks to Prajakta G Kamble, Ayman Algamal, Swaraj Singh, and Adarsh Kumar for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#cornucopia #appsec #security #mobile #games
Reposted by kingthorin_rm
We have been working on the OWASP MCP Security Taxonomy - an open, vendor-neutral framework designed to create a common language for MCP security risks, weaknesses, attack patterns, controls, detections, and test cases: github.com/OWASP/MCP-Ta...
Go check it out and give feedback
Go check it out and give feedback
GitHub - OWASP/MCP-Taxonomy: OWASP MCP Taxonomy
OWASP MCP Taxonomy. Contribute to OWASP/MCP-Taxonomy development by creating an account on GitHub.
github.com
September 11, 2026 at 6:00 PM
We have been working on the OWASP MCP Security Taxonomy - an open, vendor-neutral framework designed to create a common language for MCP security risks, weaknesses, attack patterns, controls, detections, and test cases: github.com/OWASP/MCP-Ta...
Go check it out and give feedback
Go check it out and give feedback
Reposted by kingthorin_rm
Save the date: Saturday October 17th.
#OWASP #Ottawa is pleased to announce a day of learning, community, and mentorship to celebrate the 25th Anniversary of the OWASP Foundation and the OWASP Ottawa Chapter’s selection of one of the top chapters in a constellation of over 130 Chapters. #Cyber
#OWASP #Ottawa is pleased to announce a day of learning, community, and mentorship to celebrate the 25th Anniversary of the OWASP Foundation and the OWASP Ottawa Chapter’s selection of one of the top chapters in a constellation of over 130 Chapters. #Cyber
September 9, 2026 at 2:03 PM
Reposted by kingthorin_rm
ZAP updates for August.
We’re removing 2 add-ons from the nightly and weekly releases, so if you use those then make sure you read it to understand the implications.
www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
We’re removing 2 add-ons from the nightly and weekly releases, so if you use those then make sure you read it to understand the implications.
www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
ZAP Updates - August 2026
We’re retiring the AJAX Spider and DOM XSS add-ons from the nightly and weekly releases, and the new LLM Support add-on officially launched in August.
www.zaproxy.org
September 8, 2026 at 1:39 PM
ZAP updates for August.
We’re removing 2 add-ons from the nightly and weekly releases, so if you use those then make sure you read it to understand the implications.
www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
We’re removing 2 add-ons from the nightly and weekly releases, so if you use those then make sure you read it to understand the implications.
www.zaproxy.org/blog/2026-09...
#zaproxy #appsec
vwad.owasp.org now supports shareable search/filter 🔍 links 🔗 for both Basic and Advanced search, making it easier for people to share with teams or friends.
#OWASP #AppSec #BugBounty #CTF
#OWASP #AppSec #BugBounty #CTF
August 27, 2026 at 12:05 PM
vwad.owasp.org now supports shareable search/filter 🔍 links 🔗 for both Basic and Advanced search, making it easier for people to share with teams or friends.
#OWASP #AppSec #BugBounty #CTF
#OWASP #AppSec #BugBounty #CTF
Reposted by kingthorin_rm
A fingerprinting script from Alibaba’s AliExpress was invasive enough someone noticed when it interrupted their headphone's bluetooth connection.
In response, one of our team wrote up how Firefox has largely eliminated WebAudio fingerprinting 👇 ritter.vg/blog-webaudi...
In response, one of our team wrote up how Firefox has largely eliminated WebAudio fingerprinting 👇 ritter.vg/blog-webaudi...
webaudio fingerprinting on alibaba - ritter.vg
Tom Ritter's personal homepage, where he rambles about tech-related topics.
ritter.vg
August 20, 2026 at 11:31 PM
A fingerprinting script from Alibaba’s AliExpress was invasive enough someone noticed when it interrupted their headphone's bluetooth connection.
In response, one of our team wrote up how Firefox has largely eliminated WebAudio fingerprinting 👇 ritter.vg/blog-webaudi...
In response, one of our team wrote up how Firefox has largely eliminated WebAudio fingerprinting 👇 ritter.vg/blog-webaudi...
Love this 👍⭐️, but it’s terribly pathetic that it is necessary 😔
Good people doing the right thing - fighting fascism.
August 16, 2026 at 12:05 PM
Love this 👍⭐️, but it’s terribly pathetic that it is necessary 😔
Reposted by kingthorin_rm
Happy 10 year anniversary of the best mic drop on Twitter.
Hard to believe it’s been so long! Congrats @astrokatie.com
Hard to believe it’s been so long! Congrats @astrokatie.com
August 16, 2026 at 7:20 AM
Happy 10 year anniversary of the best mic drop on Twitter.
Hard to believe it’s been so long! Congrats @astrokatie.com
Hard to believe it’s been so long! Congrats @astrokatie.com
@github.com @gitforwindows.org Why don't these both have -v or both have "list" ⁇
git stash list
git branch -v
Be consistent, be-e consistent!!!!!
git stash list
git branch -v
Be consistent, be-e consistent!!!!!
Consistency Consistent
ALT: Consistency Consistent
static.klipy.com
August 11, 2026 at 4:52 PM
@github.com @gitforwindows.org Why don't these both have -v or both have "list" ⁇
git stash list
git branch -v
Be consistent, be-e consistent!!!!!
git stash list
git branch -v
Be consistent, be-e consistent!!!!!
Reposted by kingthorin_rm
v20.2.0 is here! github.com/juice-shop/j...
🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood!
Crossposted with @openvibe.social
🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood!
Crossposted with @openvibe.social
Release v20.2.0 · juice-shop/juice-shop · GitHub
🅰️ Frontend
Updated frontend to Angular 22.x and Angular Material 22.x
Updated TypeScript to 6.0.x
Updated angular-eslint to 22.x
Switched QR code library from ng-qrcode to angularx-qrcode
2734b6a...
github.com
August 11, 2026 at 5:20 AM
v20.2.0 is here! github.com/juice-shop/j...
🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood!
Crossposted with @openvibe.social
🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood!
Crossposted with @openvibe.social
Reposted by kingthorin_rm
OWASP Cornucopia just released v3.4.5
A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!
Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?
#ai #games #security #threatmodeling
A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!
Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?
#ai #games #security #threatmodeling
OWASP Cornucopia v3 with EoP and PHANTOM-B
We’re thrilled to bring you OWASP Cornucopia v3.4 with an update that expands how we identify...
dev.to
August 6, 2026 at 10:36 AM
OWASP Cornucopia just released v3.4.5
A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!
Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?
#ai #games #security #threatmodeling
A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever!
Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B?
#ai #games #security #threatmodeling
What's this? @zaproxy.org fuzzer update released this morning, with work from yours truly.
#PenTest #WebAppSec #BugBountyTips
#PenTest #WebAppSec #BugBountyTips
August 7, 2026 at 2:18 PM
What's this? @zaproxy.org fuzzer update released this morning, with work from yours truly.
#PenTest #WebAppSec #BugBountyTips
#PenTest #WebAppSec #BugBountyTips
Good morning world!
August 7, 2026 at 12:00 PM
Good morning world!
Reposted by kingthorin_rm
www.zaproxy.org/blog/2026-08... - a huge increase in the number of times ZAP was started, and we now recommend using the Client Spider instead of the AJAX Spider
#zaproxy #appsec
#zaproxy #appsec
ZAP Updates - July 2026
ZAP was started more than 13 million times in July, another big jump, and the Client Spider officially became our recommended option for crawling modern web apps.
www.zaproxy.org
August 6, 2026 at 2:27 PM
www.zaproxy.org/blog/2026-08... - a huge increase in the number of times ZAP was started, and we now recommend using the Client Spider instead of the AJAX Spider
#zaproxy #appsec
#zaproxy #appsec
Crazy Wolf Spider 🕷️ Glad my daughter saw it as she was exiting the park outhouse 😁
#spider #NatureIsCool
#spider #NatureIsCool
August 5, 2026 at 11:36 PM
Crazy Wolf Spider 🕷️ Glad my daughter saw it as she was exiting the park outhouse 😁
#spider #NatureIsCool
#spider #NatureIsCool
Reposted by kingthorin_rm
Scientists of the Nautilus research ship capture a Big Fin Squid on camera, at 5454m (17’800 ft) depth. This was their live reaction: 🔊 #AGoodPlace
August 1, 2026 at 11:01 AM
Scientists of the Nautilus research ship capture a Big Fin Squid on camera, at 5454m (17’800 ft) depth. This was their live reaction: 🔊 #AGoodPlace
Why are we our own worst enemies. Why can’t our self talk always be nice things or things we wanna hear.
Gawd damn my brain is busy today 😔
#MentalMealthMatters #MensMentalHealth
Gawd damn my brain is busy today 😔
#MentalMealthMatters #MensMentalHealth
August 1, 2026 at 3:43 PM
Why are we our own worst enemies. Why can’t our self talk always be nice things or things we wanna hear.
Gawd damn my brain is busy today 😔
#MentalMealthMatters #MensMentalHealth
Gawd damn my brain is busy today 😔
#MentalMealthMatters #MensMentalHealth
Reposted by kingthorin_rm
The internet's better when it's open. Proof: this post 🔥
August 1, 2026 at 3:28 PM
The internet's better when it's open. Proof: this post 🔥
Reposted by kingthorin_rm
Kimi K3 can now be run locally! ✨
The 1-bit model retains ~78.9% accuracy after we shrunk it from 1.56TB to 594GB (-62% size).
Run on a Mac Studio + 128GB RAM device.
Kimi K3 is the strongest open model to date.
Guide: unsloth.ai/docs/models/...
GGUF: huggingface.co/unsloth/Kimi...
The 1-bit model retains ~78.9% accuracy after we shrunk it from 1.56TB to 594GB (-62% size).
Run on a Mac Studio + 128GB RAM device.
Kimi K3 is the strongest open model to date.
Guide: unsloth.ai/docs/models/...
GGUF: huggingface.co/unsloth/Kimi...
July 29, 2026 at 1:56 PM
Kimi K3 can now be run locally! ✨
The 1-bit model retains ~78.9% accuracy after we shrunk it from 1.56TB to 594GB (-62% size).
Run on a Mac Studio + 128GB RAM device.
Kimi K3 is the strongest open model to date.
Guide: unsloth.ai/docs/models/...
GGUF: huggingface.co/unsloth/Kimi...
The 1-bit model retains ~78.9% accuracy after we shrunk it from 1.56TB to 594GB (-62% size).
Run on a Mac Studio + 128GB RAM device.
Kimi K3 is the strongest open model to date.
Guide: unsloth.ai/docs/models/...
GGUF: huggingface.co/unsloth/Kimi...
July 28, 2026 at 12:34 PM
