Tanto Security
@TantoSecurity
Followers
399
Following
341
Media
26
Statuses
181
Tanto Security is a leading provider of advanced offensive cyber security services to leading organisations across Australia, New Zealand and North America.
Australia & New Zealand
Joined June 2021
Thanks for having us back and looking forward to see what the team cook up this year 👩🍳.
0
0
4
RT @corelanc0d3r: 🇦🇺 Corelan hits Melbourne for the FIRST time!. 💥 Stack Exploit Dev: Feb 3–6, 2026.🧨 Heap Masterclass: Feb 9–12, 2026. 🎯 w….
0
4
0
The post is at and we hope you enjoy reading it as much as we enjoyed putting it together! ❤️.
2
11
21
It also covers three separate rounds of fixes/mitigations and how they can be bypassed, some thoughts on how to reason about template injection, the importance of bug triage, and some possible workarounds for users of Insomnia.
1
0
2
The bug was found by our co-founder and Technical Director @marcioalm and the post walks through how he found the bug and took it through to being remotely exploitable.
1
0
3
Today we're releasing Sleepless Strings. It's a blog post about a template injection bug in the Insomnia API client that leads to RCE in the latest version with just a few HTTP requests to a malicious server 💥
1
12
40
We are excited to be a part of 0xCC again this year!.
Our next sponsor for 0xCC 2025 has really cool merch, and an even cooler team. Thank you so much for being a silver sponsor @TantoSecurity, we're so grateful to have your continued support!
0
0
3
We see you @justinsteven👀 👏.
This week on Red Canary Office Hours, Justin Steven, Head of Threat Research at @TantoSecurity, joined the discussion to share his front-line perspective on privileged user attacks. 🕵️♂️. Learn how commonly used developer tools caught his attention, how they can be exploited, and
1
0
4
Big ups to Team Tanto! 15th globally in the @hackthebox_eu Global Skills Benchmark CTF and number 1 in Oceania 😎 🚩
0
3
7
Some of our team will be up on the Gold Coast this week for the AUSCERT Security Conference. Come say hi and check out Lloyds talk on Friday at 1:45pm. 🏖️🥷.
0
2
5
“Lastly, once again, a fantastic effort to you all. Some very impressive findings.” - CISO - GovTech 08/04/2025. Again - from the April edition of "nice things our customers said about us this month" 🥷.
0
1
2
“Great report guys and I'm again very impressed with the quality of work from the Tanto team. Breath of fresh air compared to many others I've dealt with in the past.” CTO - FinTech 04/04/2025. From the April edition of "nice things our customers said about us this month" 🥷.
0
1
5
RT @0xcc: With 0xCC coming up in June, we’re looking to secure a few final sponsors to help make this year’s event even more amazing. If y….
0
7
0
Cyber security tip of the day: Ransomware can't hurt you if you execute it with a pure heart and good intentions 😇.
0
0
2
We're solemnly up to no good over on our Insta 😇 chuck us a follow if you want to watch Justin's descent into madness 👀
1
3
4