LIVE
⭐8.4M influencer listings 🏢95.9K sponsor listings 🌍117.7B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋3.7M Bluesky creators 🎙️1.4M podcast creators 🟣1.2M Twitch creators 📈679.6K Pinterest creators 🥊302.8K Kick creators 251.1K YouTube creators 𝕏250.6K X creators 🐘243.1K Mastodon creators 🎵129.4K TikTok creators ✈️106.8K Telegram creators 🎮13.5K Discord creators 📈10K Substack creators 🎬4.6K Rumble creators 🧵3.6K Threads creators ⭐8.4M influencer listings 🏢95.9K sponsor listings 🌍117.7B combined audience reach 📊13 platforms indexed 🗺️130+ countries covered 🏷️10,000+ niches 🦋3.7M Bluesky creators 🎙️1.4M podcast creators 🟣1.2M Twitch creators 📈679.6K Pinterest creators 🥊302.8K Kick creators 251.1K YouTube creators 𝕏250.6K X creators 🐘243.1K Mastodon creators 🎵129.4K TikTok creators ✈️106.8K Telegram creators 🎮13.5K Discord creators 📈10K Substack creators 🎬4.6K Rumble creators 🧵3.6K Threads creators
Pentest-Tools.com

Pentest-Tools.com✓ Add us as a preferred source on Google

Mastodon @pentesttools@infosec.exchange
⚔ Compare ☆ Follow Own this channel?
🔄 Data last refreshed 1 day ago
Followers
302
Account age
3 yrs
🎁 Free analysisfor Pentest-Tools.com
🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

#WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c1 views #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha1 views GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in your scope, you know where to look. The rest of June: 🌐 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There'1 views Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in your scope, you know where to look. The rest of June: 🌐 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There'

📊 Post engagement

1
Avg engagement / post
0.3%
Engagement vs followers
Dec 2022
On Mastodon since

🔥 Top post: #WordPress admins - we got you covered! 🫡 → We've just shipped d · 1 likes + reposts

📊 Activity & format

Posting cadence
6.5 / week
Posts several times a week.
Content mix
Mostly images
Recent: 2 text · 9 image · 1 video.
Follower / following
1.2×
Follows 261 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗
🔥 Top post #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give atta… ★ 1
Nolan's Odyssey just hit theaters, and honestly, Odysseus had it easy. Ten years, one long trip, and he was done. ISO 27001 wants the trilogy every single year: detection, validation, remediation. Three-year cycle, a surveillance audit che… We kept getting asked the same handful of questions before people would trust us with a scan against prod. So we answered them properly instead of one at a time on sales calls. Non-destructive by default. Our own detection engines, not a w… Knowing you're exposed to a new CVE, with proof, before anyone has to ask. That's the moment that matters. NIS2 gives you 24 hours to raise the alarm once you know something's live. Get it wrong or too slow, and fines run into the millions… 👂 There's a lot of noise out there. The good stuff comes from a handful of people you've learned to trust. We've all got that short list. Vote below, then share it in the comments: who's the one you'd tell someone just starting out to foll… A public PoC called LegacyHive targets the Windows User Profile Service. It lets a standard user mount another user's registry hive, potentially an admin's, under their own classes root. No CVE, no Microsoft advisory, no patch. The researc… Zero CVEs doesn't mean zero risk. XZ had zero CVEs too, right up until v5.6.0 shipped a backdoor. RapidFort and ReversingLabs just launched a hardened OSS library catalog for that exact gap: checking what a package contains, not matching i… We point our own product at ourselves. The scanners and exploit modules our customers run, we run against our own infrastructure and web apps. New critical CVE, our own assets are among the first we test, so detection and validation hold u… GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it… ★ 1 Confirming a finding is the good part of the job. When that "maybe" becomes a yes, with PoC and all... But SOC 2 Type II wants twelve months of those. And most audit gaps aren't weak scanning. They're teams who did the work but can't produ… React2Shell. NGINX Rift. cPanel. ToolShell. Every one of them was a scramble for someone. Which assets does this touch? Is it real? Did we actually close it? Next week, on Wednesday, Pentest-Tools.com Office Hours is about turning that scr… ▶ Here we go. Product updates - the June edition. This month your coverage got a LOT wider. 80 new detections landed in the Network Scanner, including pre-auth RCE in Oracle PeopleSoft and an auth bypass in Palo Alto PAN-OS. If any are in yo… ★ 1

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Dec 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 1 views per post.
📤Posts about 6.5× per week.

🕵️ Fake follower check

Estimated
52/100
Fair Credibility score
76%
Mixed Real audience
Medium Fake-follower risk
High Data confidence
  • Est. 76% real, active audience · Medium fake-follower risk.
  • Low engagement (~0.3% of followers engage each post) — a sign of an inflated or inactive audience.
  • Verified account.
  • Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Vulnerability detection | Autonomous pentesting | Human expertise Built by offensive security practitioners, Pentest-Tools.com gives security teams a unified place to test their defenses continuously, go deeper when needed, and prove what needs to be fixed. Toots about #offensivesecurity #penetrationtesting #pentesting #ethicalhacking and other #infosec topics we care about. We battle-test our products to ensure: ✔️low FPs ✔️rich evidence (screenshots, attack replay, data snippets) ✔️solid reporting Our research team proactively looks for new vulnerabilities and attack techniques to enrich our detection & exploits DB. Unlike scanners that stop at detection or have a single approach, Pentest-Tools.com matches testing depth to the situation: ✔️control what gets tested, how & when with deterministic Scanning & Validation ✔️investigate web apps on-demand with autonomous AI Pentests ✔️bring in human-led offsec services when business context and independent attestation matter

📸 Gallery

Nolan's Odyssey just hit theaters, and honestly, Odysseus had it easy. Ten years, one long trip, and he was done. ISO 27001 wants the trilogy every single year: detection, validation, remediation. Three-year cycle, a surveillance audit checking your homework annually. No one-and-done epic here. Pentest-Tools.com is ISO/IEC 27001:2022 certified. We run the same evidence trail on ourselves: ✅ Detect We kept getting asked the same handful of questions before people would trust us with a scan against prod. So we answered them properly instead of one at a time on sales calls. Non-destructive by default. Our own detection engines, not a wrapper around someone else's open source tools. Findings come with evidence, not just a severity label. Data stays on EU infrastructure, workspaces isolated. Ful #WordPress admins - we got you covered! 🫡 → We've just shipped detection for #wp2shell through our Network Scanner. ⚡️ The fastest way to use it is to: ◉ run a single-CVE scan for CVE-2026-63030 - which also covers CVE-2026-60137 - the SQL injection flaw that chains to give attackers RCE ◉ Based on your scan results, either patch or confirm you're already on 6.8.6, 6.9.5, or 7.0.2. ◉ Re-scan to c Knowing you're exposed to a new CVE, with proof, before anyone has to ask. That's the moment that matters. NIS2 gives you 24 hours to raise the alarm once you know something's live. Get it wrong or too slow, and fines run into the millions, with leadership personally on the hook. Here's where Pentest-Tools.com does the lifting, so the answer is ready before the clock starts: ✅ Detection: every sca A public PoC called LegacyHive targets the Windows User Profile Service. It lets a standard user mount another user's registry hive, potentially an admin's, under their own classes root. No CVE, no Microsoft advisory, no patch. The researcher behind it has released a run of uncoordinated zero-days since April. Several past drops got weaponized within days and landed on CISA's KEV catalog. This one Zero CVEs doesn't mean zero risk. XZ had zero CVEs too, right up until v5.6.0 shipped a backdoor. RapidFort and ReversingLabs just launched a hardened OSS library catalog for that exact gap: checking what a package contains, not matching it to a CVE list. Our lead researcher Matei Badanoiu told The New Stack it's real progress. The call between feature, vulnerability, and backdoor still needs a hu GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about five seconds, and it escapes containers. The story isn't that it exists, it's how reliable it is. Daniel Bechenea, security manager at Pentest-Tools.com: "An exploit reported at 97% reliable, with public code anyone can run, changes tha Confirming a finding is the good part of the job. When that "maybe" becomes a yes, with PoC and all... But SOC 2 Type II wants twelve months of those. And most audit gaps aren't weak scanning. They're teams who did the work but can't produce the trail. Here's where Pentest-Tools.com does the lifting, turning your testing into evidence as you go: ✅ Detection: scheduled scans log every finding times

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

jonathanbossenger jonathanbossenger 17% Pixelkitties :verified: Pixelkitties :verified: 14% David Choffnes David Choffnes 12% Nuclear Oatmeal :paranoid: Nuclear Oatmeal :paranoid: 11% IronCladLou IronCladLou 11% Ji'hyn :therian: Ji'hyn :therian: 10%

More like this

Find more →
Mastodon ＋
Pixelkitties :verified:
Pixelkitties :verified:
@pixelkitties@socel.net
302 Followers
Mastodon ＋
Ji'hyn :therian:
Ji'hyn :therian:
@jihyn@bark.lgbt
302 Followers
Mastodon ＋
jonathanbossenger
jonathanbossenger ✓
@jonathanbossenger@fosstodon.org
302 Followers
Mastodon ＋
Nuclear Oatmeal :paranoid:
Nuclear Oatmeal :paranoid:
@nuclearoatmeal@beige.party
302 Followers
Mastodon ＋
David Choffnes
David Choffnes ✓
@proffnes@discuss.systems
302 Followers
Mastodon ＋
IronCladLou
IronCladLou
@ironcladlou@hachyderm.io
302 Followers

Frequently asked questions

How much does Pentest-Tools.com charge for a sponsorship?
Pentest-Tools.com hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Pentest-Tools.com for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Pentest-Tools.com, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Pentest-Tools.com have?
Pentest-Tools.com has 302 followers on Mastodon.

✉ Message Pentest-Tools.com

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

  • ✓ Message any influencer from their listing
  • ✓ The influencer gets notified by email
  • ✓ Manage every conversation in one inbox
See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Pentest-Tools.com

Booking an event / appearance is a Pro feature. Upgrade to book Pentest-Tools.com for an in-person or virtual appearance — payment held safely in escrow until the event is done.

  • ✓ Book them for events, livestreams, panels & more
  • ✓ Pentest-Tools.com gets notified by email
  • ✓ Fee held in escrow, released after the appearance
See Pro $9.95/mo →

Already Pro? Log in.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

✉️ Contact