leonjza :verified:✓ Add us as a preferred source on Google
🔄 Data last refreshed 2 months ago
🤝
Make a deal with leonjza :verified:
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
347
Account age
8 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor leonjza :verified:
Known for
27 views
Two blog posts just dropped - one with the details on the bloatware pwning shenanigans I was up to earlier in the year, and another on pipetap, a new Windows named pipe proxy/tool.
https://sensepost.com/blog/2025/pwning-asus-driverhub-msi-center-acer-control-centre-and-razer-synapse-4/
https://sensepost.com/blog/2025/pipetap-a-windows-named-pipe-proxy-tool/
15 views
Quick lunch time side quest building a simple lab to play with the inetutils-telnetd authentication bypass as disclosed on oss-sec ₁.
https://github.com/leonjza/inetutils-telnetd-auth-bypass
₁ https://seclists.org/oss-sec/2026/q1/89
11 views
Had a case this week of a fairly secure deployment of BeyondTrust, but vulnerable to CVE-2026-1731. With basically zero egress, I implemented a timing oracle POC instead. Takes about 20 minutes to get the ls command output in this demo, but hey, it works! :D
10 views
A clip introducing our new Binary Instrumentation with Frida course, aimed at getting you more comfortable with the @fridadotre ecosystem - coming to a conference near you!
You've used Frida-based tools like objection before, but now you want to take your instrumentation to the next level - writing your own tools and forcing software to behave exactly how you want.
Add features. Disable security c
📊 Post engagement
Recent posts · likes + reposts
Nov 21latest
8
Avg engagement / post
4–10
Typical post (engagement)
2.3%
Engagement vs followers
62/100
Consistent reach
Dec 2017
On Mastodon since
Half of recent posts land between 4 and 10 likes + reposts (median 7) — a dependable floor a sponsored post can count on.
🔥 Top post: Two blog posts just dropped - one with the details on the bloatw · 27 likes + reposts
📊 Activity & format
Posting cadence
0.33 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 2 text · 7 image · 3 video.
Follower / following
2.2×
Follows 158 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
🔥 Top post
Two blog posts just dropped - one with the details on the bloatware pwning shenanigans I was up to earlier in the year, and another on pipetap, a new Windows named pipe proxy/tool.
https://sensepost.com/blog/2025/pwning-asus-driverhub-msi-center-acer-control-centre-and-razer-syn…
Join us on Saturday at 1100 for some seriously fun card machine hacking by Reino from our Orange Cyberdefense’s @sensepost team at @defcon 34 this weekend!
Every single dry run I have seen of this talk had me excited, giggling and blown aw…
I used to like to see peoples browser tabs they have open to get a sense of what they are working on, but ChatGPT conversation titles are so much better at that.
Reflecting on route home from @1ns0mn1h4ck, where I predominantly focussed on technical talks after giving our first public iteration of our binary instrumentation with Frida training.
Most researchers rarely mentioned AI usage, but were o…
Just pushed some slides and labs polish for next weeks @1ns0mn1h4ck before my flight. The whole repo (which includes the training platform, labs, and slides) is quite... diverse :D
▶
A clip introducing our new Binary Instrumentation with Frida course, aimed at getting you more comfortable with the @fridadotre ecosystem - coming to a conference near you!
You've used Frida-based tools like objection before, but now you w…
▶
Had a case this week of a fairly secure deployment of BeyondTrust, but vulnerable to CVE-2026-1731. With basically zero egress, I implemented a timing oracle POC instead. Takes about 20 minutes to get the ls command output in this demo, bu…
▶
Noone asked for this, but I'm trying to get more comfortable with qemu as a whole which has resulted in this overly fancy Qemu Machine Protocol (QMP) socket client, complete with dynamic schema parsing, event subscriptions and tab completi…
Thank you for applying the patch carefully.
Quick lunch time side quest building a simple lab to play with the inetutils-telnetd authentication bypass as disclosed on oss-sec ₁.
https://github.com/leonjza/inetutils-telnetd-auth-bypass
₁ https://seclists.org/oss-sec/2026/q1/89
It's a nice feeling wrapping up some research! :D
It's... been a while since the last objection release got tagged. We finally landed a 1.12 release today which also means pypi is up to date again, and for the foreseeable future! Work never really stopped, and plenty of bug fixes are incl…
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Dec 2017
An OG fediverse account from Mastodon's early years — a long, established presence.
💡 Facts
🗓️Joined Mastodon in 2017 — 8 years ago.
👁️Averages 8 views per post.
📤Posts about 0.3× per week.
🕵️ Fake follower check
Estimated75/100
Good
Credibility score
92%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 92% real, active audience · Low fake-follower risk.
- Engagement (~2.3% of followers engage each post) is around typical for Mastodon.
- Verified account.
- Established account (8+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
['cto @sensepost', 'Caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'Security guy', 'Metalhead', 'Shells are my own', 'KOOBo+KXleKAv+KXlSnjgaM=']
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
＋
Lisa Kalayji
@lisakalayji@infosec.exchange
347
Followers
Mastodon
＋
tony 🏳️⚧️ 🏴 🚴🧗🏻
@autonomousapps@mstdn.social
347
Followers
Mastodon
＋
Cultura
@cultura@mastodon.uno
347
Followers
Mastodon
＋
logout
@logout@mastodonczech.cz
347
Followers
Mastodon
＋
BadWolf
@redflag@mindly.social
347
Followers
Mastodon
＋
basisfinden
@basisfinden@muenchen.social
347
Followers
Frequently asked questions
How much does leonjza :verified: charge for a sponsorship?
leonjza :verified: hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact leonjza :verified: for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify leonjza :verified:, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does leonjza :verified: have?
leonjza :verified: has 347 followers on Mastodon.
✉ Message leonjza :verified:
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with leonjza :verified:
Booking an event / appearance is a Pro feature. Upgrade to book leonjza :verified: for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ leonjza :verified: gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove