tintinweb Goto Github PK

followers: 1.5K following: 27.0 repos: 92.0 gists: 10.0

Name: tintinweb

Type: User

Bio: Uncertified Panda Trainer 🪴🐼🐼🪴

Twitter: nicht_tintin

Location: #moon

Blog: https://www.oststrom.com

> socials

> gpt-3 'who is tintinweb'

> break --things

🍧 Smart Contracts
🧁 Peer-to-Peer Networking Nodes
🍰 Protocols
🍬 Decoders
🍪 Custom Cryptography and Decompression Algorithms

Nom nom nom nom nom ...🐿️

> whoami

🧙‍ I ...

improve Security for the Ethereum Ecosystem
review complex Smart Contract Systems and Off-Chain components
research new attack vectors
buidl useful Tools to satisfy the lazy efficiency monk in me

🥷 I ...

practice Responsible Disclosure
do this just for fun
am on the Ethereum & Ethereum 2.0 Vulnerability Leaderboard
am #39 in theCyber
disclosed multiple vulnerabilities in cpp-ethereum, mist, parity and bitcoin-core, and bitcoin miners
broke parts of Android, OpenSSH, Putty, Python, various Web Applications, and Embedded Devices

> trophy

OS agnostic, any programming language, any architecture, things will be reverse engineered if needed.

🏆 - Public Disclosures / Exploits / PoCs
🏆 - SSL DROWN attack / Hon. mention
🏆 - Ethereum Bug Bounty
🏆 - Ethereum 2.0 Bug Bounty
🏆 - Research
🏆 - VSCode Extensions
🏆 - npm

^{Be a Hero, tip a 🍺 🙂 ⟶ Ƀ: 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth: 0x438B38E30eF117C15fBfF833f9C2c70182925815}

tintinweb's Projects

mythril

Security analysis tool for Ethereum smart contracts

openssl-version_scan

Scan Files and Processes for traces of static and shared OpenSSL libraries and display version information.

paramiko-sshfuzz

A generic decorator based ssh protocol message fuzzer based paramiko the Native Python SSHv2 protocol library

porosity

Decompiler for Blockchain-based Ethereum Smart-Contracts

pub

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

pycryptodome

A self-contained cryptographic library for Python

pyetherchain

A python interface to the ethereum blockchain explorer at www.etherchain.org ❤⛓🐍

A python-ctypes based process memory scraper that attempts to find key-material by matching template C structs in memory (OpenSSL ssl_session_st, dsa_st, rsa_st, bignum_st, ec_key_st, dh_st and generic ASN.1)

python-smtpd-tls

An extension to the standard python 2.x smtpd library implementing implicit/explicit SSL/TLS/STARTTLS

random-ssl-server

spawns a server listening for HTTPS (SSL) requests supplying random auto-generated certificates for each request. [HTTPS,SSL,Fuzzing,Testing,Resiliency]

rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts with optional command-line interface (cli) and jenkins-ci build-script template