LIVE
⭐2.16M influencer listings 🏢33K sponsor listings 🌍53.93B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🟣702.9K Twitch creators 🦋688K Bluesky creators 🎙️374.4K podcast creators 🐘142.5K Mastodon creators ▶️71.9K YouTube creators 🥊67.7K Kick creators ✈️47.7K Telegram creators 𝕏34.8K X creators 🎵16.9K TikTok creators 🎮5.3K Discord creators 🎬3.3K Rumble creators 🧵1.2K Threads creators ⭐2.16M influencer listings 🏢33K sponsor listings 🌍53.93B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🟣702.9K Twitch creators 🦋688K Bluesky creators 🎙️374.4K podcast creators 🐘142.5K Mastodon creators ▶️71.9K YouTube creators 🥊67.7K Kick creators ✈️47.7K Telegram creators 𝕏34.8K X creators 🎵16.9K TikTok creators 🎮5.3K Discord creators 🎬3.3K Rumble creators 🧵1.2K Threads creators
ℹ️ This listing was auto-generated from Mastodon's public data. Pentest-Tools.com hasn't claimed it, and it doesn't imply any partnership with or endorsement of SocialDB. Is this you? Claim it · Request removal (free).
Pentest-Tools.com

Pentest-Tools.com✓

Mastodon @pentesttools@infosec.exchange
⚔ Compare ☆ Watch Own this channel?
🔄 Data last refreshed 1 day ago
🤝

Make a deal with Pentest-Tools.com

🔒 Paid proposals held safely in escrow — released only when the work's approved.

📣Sponsored postOne disclosed post (toot) with your link and message. $12→ 🧵Sponsored threadA multi-post explainer or story — the fediverse rewards dept… $30→ 📦Product seeding / honest reviewSend me your product — I post a disclosed, honest take. Auth… $16→ 📌Pinned sponsored postA disclosed post pinned to the top of my profile for the mon… $36/mo→ 🔗Profile link (bio field)Your link in one of my profile metadata fields for the month… $18/mo→ 🔁Boost packageI boost (repost) your account's toots through the month — di… $24/mo→ 🏛️Instance / community sponsorshipSponsor the server I run — a sponsor line in the About/rules… $30/mo→ 🤝Mutual boost collabWe boost each other across instances — a value swap between … Swap→ 🎬UGC HireBranded content for your own channels & ads from $50→ 🎙️Podcast guest spotInvite Pentest-Tools.com onto your podcast (~45 min, remote) $26→

Every booking is a normal escrow-protected deal.

Followers
300
Account age
3 yrs
🧰 Free analysis for Pentest-Tools.com
🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

#WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c1 views #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha1 views GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in your scope, you know where to look. The rest of June: 🌐 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There'1 views Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in your scope, you know where to look. The rest of June: 🌐 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There'

📊 Post engagement

1
Avg engagement / post
0.3%
Engagement vs followers
Dec 2022
On Mastodon since

🔥 Top post: #WordPress admins - we got you covered! 🫡 → We've just shipped d · 1 likes + reposts

📊 Activity & format

Posting cadence
6.5 / week
Posts several times a week.
Content mix
Mostly images
Recent: 2 text · 9 image · 1 video.
Follower / following
1.1×
Follows 262 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗
🔥 Top post #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give atta… ★ 1
Nolan's Odyssey just hit theaters, and honestly, Odysseus had it easy. Ten years, one long trip, and he was done. ISO 27001 wants the trilogy every single year: detection, validation, remediation. Three-year cycle, a surveillance audit che… We kept getting asked the same handful of questions before people would trust us with a scan against prod. So we answered them properly instead of one at a time on sales calls. Non-destructive by default. Our own detection engines, not a w… Knowing you're exposed to a new CVE, with proof, before anyone has to ask. That's the moment that matters. NIS2 gives you 24 hours to raise the alarm once you know something's live. Get it wrong or too slow, and fines run into the millions… 👂 There's a lot of noise out there. The good stuff comes from a handful of people you've learned to trust. We've all got that short list. Vote below, then share it in the comments: who's the one you'd tell someone just starting out to foll… A public PoC called LegacyHive targets the Windows User Profile Service. It lets a standard user mount another user's registry hive, potentially an admin's, under their own classes root. No CVE, no Microsoft advisory, no patch. The researc… Zero CVEs doesn't mean zero risk. XZ had zero CVEs too, right up until v5.6.0 shipped a backdoor. RapidFort and ReversingLabs just launched a hardened OSS library catalog for that exact gap: checking what a package contains, not matching i… We point our own product at ourselves. The scanners and exploit modules our customers run, we run against our own infrastructure and web apps. New critical CVE, our own assets are among the first we test, so detection and validation hold u… GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it… ★ 1 Confirming a finding is the good part of the job. When that "maybe" becomes a yes, with PoC and all... But SOC 2 Type II wants twelve months of those. And most audit gaps aren't weak scanning. They're teams who did the work but can't produ… React2Shell. NGINX Rift. cPanel. ToolShell. Every one of them was a scramble for someone. Which assets does this touch? Is it real? Did we actually close it? Next week, on Wednesday, Pentest-Tools.com Office Hours is about turning that scr… ▶ Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in yo… ★ 1

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Dec 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 1 views per post.
📤Posts about 6.5× per week.

🕵️ Fake follower check

Estimated
75/100
Good Credibility score
92%
Real Real audience
Low Fake-follower risk
High Data confidence
  • Est. 92% real, active audience · Low fake-follower risk.
  • Engagement (~0.3% of followers engage each post) is around typical for Mastodon.
  • Verified account.
  • Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Pentest-Tools.com is a product for AI-enhanced offensive security testing. We built it for teams who need reliable proof to validate vulnerabilities in networks, web apps, cloud, and APIs. Over 2,000 teams in 119 countries trust us to scrutinize their infrastructures. Toots about #offensivesecurity #penetrationtesting / #pentesting #ethicalhacking and other #infosec topics we care about

📸 Gallery

Nolan's Odyssey just hit theaters, and honestly, Odysseus had it easy. Ten years, one long trip, and he was done. ISO 27001 wants the trilogy every single year: detection, validation, remediation. Three-year cycle, a surveillance audit checking your homework annually. No one-and-done epic here. Pentest-Tools.com is ISO/IEC 27001:2022 certified. We run the same evidence trail on ourselves: ✅ Detect We kept getting asked the same handful of questions before people would trust us with a scan against prod. So we answered them properly instead of one at a time on sales calls. Non-destructive by default. Our own detection engines, not a wrapper around someone else's open source tools. Findings come with evidence, not just a severity label. Data stays on EU infrastructure, workspaces isolated. Ful #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c Knowing you're exposed to a new CVE, with proof, before anyone has to ask. That's the moment that matters. NIS2 gives you 24 hours to raise the alarm once you know something's live. Get it wrong or too slow, and fines run into the millions, with leadership personally on the hook. Here's where Pentest-Tools.com does the lifting, so the answer is ready before the clock starts: ✅ Detection: every sca A public PoC called LegacyHive targets the Windows User Profile Service. It lets a standard user mount another user's registry hive, potentially an admin's, under their own classes root. No CVE, no Microsoft advisory, no patch. The researcher behind it has released a run of uncoordinated zero-days since April. Several past drops got weaponized within days and landed on CISA's KEV catalog. This one Zero CVEs doesn't mean zero risk. XZ had zero CVEs too, right up until v5.6.0 shipped a backdoor. RapidFort and ReversingLabs just launched a hardened OSS library catalog for that exact gap: checking what a package contains, not matching it to a CVE list. Our lead researcher Matei Badanoiu told The New Stack it's real progress. The call between feature, vulnerability, and backdoor still needs a hu GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha Confirming a finding is the good part of the job. When that "maybe" becomes a yes, with PoC and all... But SOC 2 Type II wants twelve months of those. And most audit gaps aren't weak scanning. They're teams who did the work but can't produce the trail. Here's where Pentest-Tools.com does the lifting, turning your testing into evidence as you go: ✅ Detection: scheduled scans log every finding times

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

WhenWolvesCryOut 🏳️‍⚧️ WhenWolvesCryOut 🏳️‍⚧️ 17% Alex White Alex White 17% mishika77　 mishika77　 16% Hobbits Wife Hobbits Wife 14% Kwit Kwit 13% SusannaAuthor Old White Hippie SusannaAuthor Old White Hippie 10%

More like this

Find more →
Mastodon
mishika77　
mishika77　
@mishika@mstdn.jp
300 Followers
Mastodon
Hobbits Wife
Hobbits Wife
@hobbitswife@mastodon.me.uk
300 Followers
Mastodon
WhenWolvesCryOut 🏳️‍⚧️
WhenWolvesCryOut 🏳️‍⚧️
@whenwolvescryout@meow.social
300 Followers
Mastodon
SusannaAuthor Old White Hippie
SusannaAuthor Old White Hippie
@susanna@bookstodon.com
300 Followers
Mastodon
Alex White
Alex White ✓
@planesailinggames@chirp.enworld.org
300 Followers
Mastodon
Kwit
Kwit
@kwit@climatejustice.social
300 Followers

✉ Message Pentest-Tools.com

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Pentest-Tools.com

Booking an event / appearance is a Pro feature. Upgrade to book Pentest-Tools.com for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Pentest-Tools.com gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.