Mänu✓

Mastodon @emanuelduss@infosec.exchange 📍 Switzerland

⚔ Compare ☆ Follow Own this channel?

🔄 Data last refreshed 3 days ago

🤝

Make a deal with Mänu

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

225

Account age

3 yrs

🎁 Free analysisfor Mänu

🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

This is probably the easiest way to perform reverse DNS lookups over IP address ranges using the built-in tool getent and bash brace expansion:
getent hosts 130.59.{20,31}.{0..255}
Useful if you are on a system/container with limited tools.
#pentest #dns #linux

11 views This is probably the easiest way to perform reverse DNS lookups over IP address ranges using the built-in tool getent and bash brace expansion: getent hosts 130.59.{20,31}.{0..255} Useful if you are on a system/container with limited tools. #pentest #dns #linux

Simple shell function that calls the https://ip.thc.org service (both endpoints, with all entries / pagination support) to get subdomains or CNAMEs pointing to a subdomain, or IP addresses pointing to a subdomain:
```bash
thc-ip(){
local domain="$1"
for url in "https://ip.thc.org/${domain}?l=100" "https://ip.thc.org/cn/${domain}?l=100"
do
echo -e "[*] Querying ip.thc.org..."
while t

2 views Simple shell function that calls the https://ip.thc.org service (both endpoints, with all entries / pagination support) to get subdomains or CNAMEs pointing to a subdomain, or IP addresses pointing to a subdomain: ```bash thc-ip(){ local domain="$1" for url in "https://ip.thc.org/${domain}?l=100" "https://ip.thc.org/cn/${domain}?l=100" do echo -e "[*] Querying ip.thc.org..." while t

📊 Post engagement

Avg engagement / post

2.7%

Engagement vs followers

Nov 2022

On Mastodon since

🔥 Top post: I created a presentation and a Docker-based hands-on lab in whic · 25 likes + reposts

📊 Activity & format

Posting cadence

0.22 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 10 text · 2 image · 0 video.

Follower / following

0.5×

Follows 465 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗

🔥 Top post I created a presentation and a Docker-based hands-on lab in which you can learn how SSH works, how it can be attacked and how to protect it: https://sshlabs.compass-security.training/ #security #infosec #network #ssh #openssh #pentest ★ 25

Fast Android File Access via SSHFS over Wi-Fi or USB (MTP Alternative): https://emanuelduss.ch/posts/fast-android-file-access-via-sshfs/ #android #mtp #sshfs ★ 1

Simple shell function that calls the https://ip.thc.org service (both endpoints, with all entries / pagination support) to get subdomains or CNAMEs pointing to a subdomain, or IP addresses pointing to a subdomain: ```bash thc-ip(){ loca… ★ 2

This is probably the easiest way to perform reverse DNS lookups over IP address ranges using the built-in tool getent and bash brace expansion: getent hosts 130.59.{20,31}.{0..255} Useful if you are on a system/container with limited tool… ★ 11 I created a presentation about Windows authentication, logon sessions, cached credentials, access tokens and how these can be used to impersonate users and perform privilege escalation. Video: https://youtu.be/_ODdwpxXRR4 Slides: https://w… ★ 6 802.11evil now shows a Wi-Fi QR Code, sends router advertisements for IPv6 support, can set static routes via DHCP and disable Wi-Fi to only act as a router. See changelog: https://emanuelduss.ch/posts/create-evil-wifi-access-point/#change… ★ 6 I discovered a bypass in Fortinet FortiProxy Domain Fronting Protection, which is used to detect and block domain fronting and Host header spoofing. This vulnerability can be abused to bypass web filters. - Advisory: https://www.compass-se… There will be a 6 part video series about Kerberos: from protocol basics and details, to attacks and remediations: https://blog.compass-security.com/2025/09/taming-the-three-headed-dog-kerberos-deep-dive-series/ YouTube playlist: https://… ★ 1 New blog post about fast and easy file sharing via IPv6 link-local addresses over a network cable and how it can be used to bypass & abuse some always-on corporate VPNs: https://emanuelduss.ch/posts/fast-and-easy-file-sharing-via-ipv6-link… ★ 3 Zscaler SAML SP Authentication Bypass via Certificate Cloning & Signature Spoofing (CVE-2025-54982): https://blog.amberwolf.com/blog/2025/august/advisory---zscaler-saml-authentication-bypass/ #saml #zscaler ★ 1 Interessante Talks von den Chemnitzer Linux-Tagen @clt_news: - "OpenSSH, das neue Zeug" von @leyrer über neue SSH features: https://media.ccc.de/v/clt25-331-openssh-das-neue-zeug #ssh - "Festplattenverschlüsselung mit TPM 2.0" von Susanne … ★ 9 "Simple" unauthenticated RCE on the IBM AIX NIM server (server used to manage AIX infrastructures) by replaying a simple plaintext TCP packet: https://www.oneconsult.com/en/blog/cybersecurity/critical-ibm-aix-nim-vulnerabilities-cve-2024-5… ★ 1

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 6 views per post.

📤Posts about 0.2× per week.

📍Based in Switzerland.

🕵️ Fake follower check

Estimated

89/100

Excellent Credibility score

99%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 99% real, active audience · Low fake-follower risk.
Strong engagement (~2.7% of followers engage each post) — an active, real audience.
Verified account.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

IT security. Linux & network protocols. Pentesting web applications, networks & AD infrastructures. Mostly technical stuff here.

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Alonso Caballero / ReYDeS 18%

cretinodicrescenzago 17%

Clément Joly :rust: 16%

Jesień Linuksowa 16%

Sustentabilidade é Acção 11%

Felix B. Ohmann 10%

More like this

Find more →

Mastodon ＋

Clément Joly :rust: ✓

@cjoly@hachyderm.io

225 Followers

Mastodon ＋

Alonso Caballero / ReYDeS

@alonso_reydes@infosec.exchange

225 Followers

Mastodon ＋

Jesień Linuksowa ✓

@jesienlinuksowa@fosstodon.org

cretinodicrescenzago ✓

@cretinodicrescenzago@livellosegreto.it

224 Followers

Mastodon ＋

Sustentabilidade é Acção

@sustent_accao@masto.pt

225 Followers

Frequently asked questions

How much does Mänu charge for a sponsorship?

Mänu hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.

How do I contact Mänu for a brand deal or collaboration?

Send a paid deal or collab request right here on SocialDB — we notify Mänu, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.

How many followers does Mänu have?

Mänu has 225 followers on Mastodon.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

Mänu✓

Make a deal with Mänu

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

🔀 Audience overlap

More like this

Frequently asked questions

✉ Message Mänu

🎤 Event / appearance with Mänu