Ciarán Cotter
@monkehack
Followers
4K
Following
5K
Media
68
Statuses
1K
• Irish/Japanese web hacker living in Scotland. • Researcher for @ctbbpodcast Lab. I run https://t.co/Ja1P3vco1X | Newsletter weekly at https://t.co/KA5b2kY8ih
Edinburgh, Scotland
Joined March 2021
📖 Monke's Guide to Bug Bounty Methodology An exhaustive article answering pretty much everything you ever wanted to know about methodology. Enjoy :) #bugbounty
https://t.co/XYdwaqweUS
monke.ie
15
97
310
Exceptionnally back on X for that. If you are a Magento or Adobe Commerce user, patch as soon as possible - the patch of my bug will be released imminently. This has one of the most severe impact possible, and is easy to trigger. Expect attacks, very soon. #magento #ecommerce
Urgent: Adobe will drop critical patch tomorrow, outside of regular patch cycle. Fixes SessionReaper attack, affects Adobe Commerce / Magento 2.3.1+. Concept patch accidentally leaked. https://t.co/Yh8yL4e3s5
2
5
26
No newsletter issue this week because I’m on holidays in Japan and I haven’t been working. I’m meeting some hacker friends here tomorrow so I’ll write about that next week ✌️
3
0
24
Life in the Nordics 🌲 | Foraging wild blueberries and mushrooms while enjoying some fun nosework training with our dogs. It’s been almost 2 years or so since I uploaded a video on the channel. And it’s not what most of you are custom to. But if you want to get a glimpse into
9
5
112
Meet Ciarán Cotter, aka @monkehack, one of Ireland’s top bug bounty hunters and the brain behind Simian Security, specialising in client-side and AI Hacking. Catch him live at HackAIcon on the 25th of September, where he'll share what you won’t hear anywhere else.
0
2
15
I had an amazing time at Defcon! It was great to finally meet some online friends irl. I��ll see you all again next year, hopefully! #defcon33
1
4
84
They evidently used GPT-5 to generate the chart. #openai
0
0
6
monke.ie
Music, Vegas, Vibes
0
0
14
Looked over my shoulder and @LiveOverflow was 2 feet away from us 😊 just defcon things @monkehack @0xLupin
9
3
222
Takes like this are why I can make a living doing freelance security work
Basically 95% of "hacks" nowadays are either just social engineering or someone left an S3 bucket public. Whitehack hacking / going after bug bounties is a slave-tier exercise and honestly a pretty embarrassing pursuit. CVE filing has become a joke. The actual security field /
2
0
41
I quit Instagram recently, have basically no time wasting activities in my routine and somehow I still don't have enough time to do everything I want to do...
2
0
45
This one dude I know (allegedly) poisoned the global AI training data corpus with self-propagating trigger-activated sleeper jailbreak payloads
share a piece of (alleged) cybercrime lore about y… uhh, someone who is not yourself ofcourse
116
103
4K
It’s 10pm, I get my usual decaf latte during my evening walk and I’m not sure if they gave me the decaf… it feels like I’m playing Russian Roulette with a cup of coffee
2
0
10
I'll be speaking at HackAIcon in Lisbon, Portugal on September 25th - and I'll be disclosing an interesting vulnerability in my keynote. Stay tuned!
🎤 HackAIcon Speaker Announcement Meet Ciarán Cotter, aka @monkehack , one of Ireland’s top bug bounty hunters and the brain behind Simian Security, specialising in client-side and AI Hacking. Formerly a researcher at AppOmni, he now spends his days poking at the edges of
3
5
59
My hot take on AI is that it's going to make core skills like programming more valuable. It's too easy to let AI do everything for you. The divide between people who've mastered core skills, and the people who allow AI to replace their own skills, will only grow.
3
7
37
Product idea: image recognition that checks your posture and zaps you with a mild electric shock if you're not sitting up properly
3
0
13