🤝
Make a deal with Gareth Heyes :verified:
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
2.7K
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for Gareth Heyes :verified:
Known for
![I haven't posted a crazy XSS vector for a while...
Works on every browser
https://portswigger-labs.net/xss/xss.php?x=%3Calert(1)%20onfocus=%22attributes[0].value=localName,new%20onfocus%22%20autofocus%20tabindex=1%3E](/img?u=https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F959%2F864%2F471%2F522%2F227%2Fsmall%2F48581a694c940088.png)
20 views
I haven't posted a crazy XSS vector for a while...
Works on every browser
https://portswigger-labs.net/xss/xss.php?x=%3Calert(1)%20onfocus=%22attributes[0].value=localName,new%20onfocus%22%20autofocus%20tabindex=1%3E
4 views
Next week I'm going to make you terrified of opening your emails...Join me at Black Hat USA for CSS:the bomb inside your inbox
1 views
I redesigned my website using Claude. I burned through a lot of tokens. I basically put all my research in a hallway and created a bookshelf of links. Yes I was up till 1am doing this 😂 it even works on the iPhone. No JS!
https://garethheyes.co.uk/
📊 Post engagement
7
Avg engagement / post
0.3%
Engagement vs followers
Nov 2022
On Mastodon since
🔥 Top post: I haven't posted a crazy XSS vector for a while... Works on ever · 20 likes + reposts
📊 Activity & format
Posting cadence
3.4 / week
Posts several times a week.
Content mix
Mostly text
Recent: 8 text · 2 image · 2 video.
Follower / following
11×
Follows 236 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
🔥 Top post
I haven't posted a crazy XSS vector for a while...
Works on every browser
https://portswigger-labs.net/xss/xss.php?x=%3Calert(1)%20onfocus=%22attributes[0].value=localName,new%20onfocus%22%20autofocus%20tabindex=1%3E
Next week I'm going to make you terrified of opening your emails...Join me at Black Hat USA for CSS:the bomb inside your inbox
I've wrote up how to do collision detection in pure CSS. I had loads of fun doing this.
https://thespanner.co.uk/pure-css-3d-world-collision-detection
Fixed the teleports on my site. The burger menu now works on all browsers. I'd previously tried to get this working and failed. Opus just did it in about 5 mins.
https://garethheyes.co.uk/
My 3D world now has collision detection in CSS! If you run into a wall or door it will stop. Open the door and you can go through. This model is unbelievable.
https://garethheyes.co.uk/
▶
I redesigned my website using Claude. I burned through a lot of tokens. I basically put all my research in a hallway and created a bookshelf of links. Yes I was up till 1am doing this 😂 it even works on the iPhone. No JS!
https://garethhey…
Both Hackvertor & Shazzer evolve the more you use them. It's such a shame they are not widely used and everyone is just using an LLM these days. That said I've found them both essential for conducting web security research.
Hackvertor evolves as you add tags. You're not just adding a new encoding, you're teaching the auto-decoder how to recognise and decode it too. Every custom tag makes Hackvertor smarter for future use.
Read the tutorial to find out more...…
You can now make a batch of private vectors public and assign them a collection in Shazzer. This is useful when presenting at a conference and you want to make a few public after the talk.
▶
Messing around with inertia on my blog.
Demo:
https://thespanner.co.uk/
I have a passion for 3D. I used to read 3D world magazine every month and the CD always contained trial software. I used to love messing around with 3D max and Poser. As I often do my interests pour into my research or projects. I made a 3…
I've added performance/feature vectors to Shazzer. Along with stats. You can now see which browsers perform better. It uses the same shared fuzzing network.
https://shazzer.co.uk/stats/performance
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 7 views per post.
📤Posts about 3.4× per week.
🕵️ Fake follower check
Estimated58/100
Fair
Credibility score
81%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 81% real, active audience · Low fake-follower risk.
- Low engagement (~0.3% of followers engage each post) — a sign of an inflated or inactive audience.
- Organic base — far more followers than accounts it follows.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Web security researcher at PortSwigger. Author of JavaScript for Hackers, Shazzer and Hackvertor.
https://garethheyes.co.uk/#latestBook
https://leanpub.com/javascriptforhackers/
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
鳥居ヨシツナ🔞
@yoshitsuna_torii@pawoo.net
2.7K
Followers
Mastodon
WFMU ✓
@wfmu@c.im
2.7K
Followers
Mastodon
ひゆきぃ🎨🔞💕
@hiyukey@pawoo.net
2.7K
Followers
Mastodon
Mela News :verified:
@melanews@mastodon.uno
2.7K
Followers
Mastodon
Picanúmeros ✓
@picanumeros@mathstodon.xyz
2.7K
Followers
Mastodon
mirlo.space
@mirlo@musician.social
2.7K
Followers
✉ Message Gareth Heyes :verified:
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Gareth Heyes :verified:
Booking an event / appearance is a Pro feature. Upgrade to book Gareth Heyes :verified: for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Gareth Heyes :verified: gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove