ℹ️ This listing was auto-generated from Mastodon's public data. Gareth Heyes :verified: hasn't claimed it, and it doesn't imply any partnership with or endorsement of SocialDB.
Is this you? Claim it · Request removal (free).
🤝
Make a deal with Gareth Heyes :verified:
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
2.7K
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🧰 Free analysis for Gareth Heyes :verified:
Known for
33 views
I think this is the best most elegant XSS vector I've ever found. It still works in Safari. Here's the write up:
https://thespanner.co.uk/xssing-typeerrors-in-safari
11 views
You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at Black Hat!
Can't wait to present these techniques! Here is a link to the abstract in case the screenshot is hard to read:
https://blackhat.com/us-26/briefings/schedule/index.html#css-the-bomb-i
8 views
We've just hit a very important milestone - our XSS Cheat Sheet now has 1337 vectors!
Browse them here: https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
6 views
New geolocation-based XSS vectors just landed in our XSS cheat sheet. Huge thanks to AmirMohammad Safari for the great submission.
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onpromptaction
📊 Post engagement
9
Avg engagement / post
0.3%
Engagement vs followers
Nov 2022
On Mastodon since
🔥 Top post: I think this is the best most elegant XSS vector I've ever found · 33 likes + reposts
📊 Activity & format
Posting cadence
0.44 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 0 text · 8 image · 4 video.
Follower / following
11×
Follows 236 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Mastodon ↗
🔥 Top post
I think this is the best most elegant XSS vector I've ever found. It still works in Safari. Here's the write up:
https://thespanner.co.uk/xssing-typeerrors-in-safari
▶
Messing around with inertia on my blog.
Demo:
https://thespanner.co.uk/
Just finished an improved toast dialog in Shazzer. It now shows the char codes with a preview of the character too when you press "Test Fuzz" or "Fuzz". If the character isn't printable it shows hex instead.
https://shazzer.co.uk/
Shazzer now displays ranges in nice unicode groups. I made the decision to convert large amount of character logs into ranges a while ago, this compresses the data really well and I can show massive amounts of data like JS variables easily.
You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at Black Hat!
Can't wait to present these techniques! Here is a link to the abstract in case the screenshot is hard to read:
https://bl…
I needed code snippets for presentations. I was worried about pasting code snippets into untrusted sites. So I just wrote my own using AI. You can trust I won't be tracking your code. It's very customisable and the default is for presentat…
▶
I've added tool tips to the tags in Hackvertor!
New geolocation-based XSS vectors just landed in our XSS cheat sheet. Huge thanks to AmirMohammad Safari for the great submission.
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onpromptaction
▶
Massive update to Hackvertor
- Syntax highlighting
- Code editors
- New auto decode box
- Tag and code completion
- Brand new auto decoder
Made Shazzer even more beautiful I took inspiration from F1.
We've just hit a very important milestone - our XSS Cheat Sheet now has 1337 vectors!
Browse them here: https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
▶
Been experimenting with AI to produce 3D effects. Here as you scroll the tiles rotate into place.
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 9 views per post.
📤Posts about 0.4× per week.
🕵️ Fake follower check
Estimated81/100
Excellent
Credibility score
97%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 97% real, active audience · Low fake-follower risk.
- Engagement (~0.3% of followers engage each post) is around typical for Mastodon.
- Organic base — far more followers than accounts it follows.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Web security researcher at PortSwigger. Author of JavaScript for Hackers, Shazzer and Hackvertor.
https://garethheyes.co.uk/#latestBook
https://leanpub.com/javascriptforhackers/
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
WFMU ✓
@wfmu@c.im
2.7K
Followers
Mastodon
鳥居ヨシツナ🔞
@yoshitsuna_torii@pawoo.net
2.7K
Followers
Mastodon
ひゆきぃ🎨🔞💕
@hiyukey@pawoo.net
2.7K
Followers
Mastodon
earthling
@appassionato@mastodon.social
2.7K
Followers
Mastodon
Mela News :verified: ✓
@melanews@mastodon.uno
2.7K
Followers
Mastodon
Picanúmeros ✓
@picanumeros@mathstodon.xyz
2.7K
Followers
✉ Message Gareth Heyes :verified:
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Gareth Heyes :verified:
Booking an event / appearance is a Pro feature. Upgrade to book Gareth Heyes :verified: for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Gareth Heyes :verified: gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.