Sign in

Mat Rollings

@stealthcopter.bsky.social
108 followers 203 following 24 posts

Bug bounty hunter, AppSec engineer and CTF player. Developer of PortDroid, deepce, Nexus Revamped and some other junk

PostsRepliesMedia
Mat Rollings @stealthcopter.bsky.social · 30/07/2026
Sometimes we spend so much time building complicated tools and chasing the money, that we forget to step back and have fun. Please enjoy this silly little retro ZX spectrum game I created: zx.stealthcopter.com
zx.stealthcopter.com
STEALTHCOPTER - A ZX Spectrum Adventure
Press play on the tape deck, watch the telly warm up and the tape load, then fly the cloaking gunship through three sectors of 8-bit airspace.
030
Mat Rollings @stealthcopter.bsky.social · 19/06/2026
So... I've been too ill to work, but while I was sofa bound I managed to hack my tv to show fake adverts. Don't ask why bark is in the wrong place 🤣
010
Mat Rollings @stealthcopter.bsky.social · 10/06/2026
Over 42km in just over 9 hours. Experienced all the weather, mainly rain. And nearly pooped myself at mile 16. Last call for donations. If you can, please consider supporting an incredible cause! fundraise.cancerresearchuk.org/page/matthew...
000
Mat Rollings @stealthcopter.bsky.social · 28/05/2026
Want to see me in actual physical pain? Next Saturday, I’m walking a marathon (42.2km / 26.2 miles) through the Brecon Beacons for Cancer Research UK. It is definitely not flat. Please consider donating if you can. Every bit helps a great cause. fundraise.cancerresearchuk.org/page/matthew...
fundraise.cancerresearchuk.org
Mat's Big Boy Hike
I am taking part in the Big Boy Hike to power progress for everyone affected by cancer. I'll be trekking a full marathon distance of 42.2 km (26.2 miles). Please consider donating to help me take the...
000
Mat Rollings @stealthcopter.bsky.social · 11/05/2026
Yesterday I did the Bristol Half (very slowly). Running a marathon is a physical impossibility for now... so I’m doing a 42km walk in the Brecons instead. It's for @cancerresearchuk.org and my body will likely fall apart by km 30. Support appreciated: fundraise.cancerresearchuk.org/page/matthew...
fundraise.cancerresearchuk.org
Mat's Big Boy Hike
I am taking part in the Big Boy Hike to power progress for everyone affected by cancer. I'll be trekking a full marathon distance of 42.2 km (26.2 miles). Please consider donating to help me take the...
020
Mat Rollings @stealthcopter.bsky.social · 30/04/2026
Want to see me do a live demo and explain how I made over $20k with REGEX? Had a blast on this podcast #BugBounty #BugBountyTips #XSS #AppSec #WordPress www.youtube.com/live/bpsvcbA...
youtube.com
REGEXSS Demo: How Hackers Exploit Regular Expressions in WordPress | Mat Rollings (Stealthcopter)
YouTube video by Melapress
020
Mat Rollings @stealthcopter.bsky.social · 14/11/2025
It's that time of year again, another totally human Black Friday / Cyber Monday post for PortDroid: 💸 >50% off Lifetime 🔍 Port scanner for Android 👨‍💻 I wrote it ¯\_(ツ)_/¯ 🍺 Share it somewhere useful and I'll buy you a drink Buy it, capitalism demands it. Or don't. portdroid.net/black-friday...
portdroid.net
Black Friday 2025
Your Networking Swiss-army Knife
020
Mat Rollings @stealthcopter.bsky.social · 09/10/2025
Since starting my training I've lost over 7kg, dropped 6% body fat, got 4 new Hawaiian shirts, and taken >5mins off my 5k time. Am I ready? No. But I'll get through it by thinking about the post-run takeaway and bubble bath 🛀 Last chance to donate🙏 www.justgiving.com/page/oh-no-2...
justgiving.com
Mat's 25k Bath to Bristol Railway Run
Help Mat Rollings raise money to support Cool Earth
020
Mat Rollings @stealthcopter.bsky.social · 24/09/2025
REGEXSS: How .* Turned Into over $6k in Bounties Overly-greedy regex replacements can break HTML sanitisation & lead to XSS. Includes a live demo you can try exploiting it yourself! sec.stealthcopter.com/regexss #BugBounty #BugBountyTips #XSS #AppSec
sec.stealthcopter.com
Stealthcopter
Overly-greedy regex replacements can break HTML sanitisation and lead to XSS. I’ve already pulled in over $6k from this bug class, and there are plenty mo
010
Mat Rollings @stealthcopter.bsky.social · 11/09/2025
Last week I found two regex bugs using regex → unauth XSS → 2× $2k = $4k in bounties 🥳 If you’ve been putting it off, learn regex. Seriously. /regex\+xss/\$4k/ #BugBounty #BugBountyTips
110
Mat Rollings @stealthcopter.bsky.social · 06/09/2025
Physically & emotionally drained after the rollercoaster that was @yeswehack.bsky.social's LHE at #NullconBerlin2025 @teamviewer.com was a tough target & I nearly gave up but pushed through to snag 10th place overall 🥳 Thanks to @yeswehack.bsky.social for the support & awesome hosting! #BugBounty
010
Mat Rollings @stealthcopter.bsky.social · 06/08/2025
Really enjoyed these AI hacking challenges by HackAIcon, the last one had some fun little twists: hacktheagent.com #ctf
hacktheagent.com
Hack the Agent | Can you get a free ticket?
HackAIcon is around the corner, and we wanted to give you a little challenge. Can you extract a free ticket?
000
Mat Rollings @stealthcopter.bsky.social · 28/07/2025
Passed the CBBH exam! Instead of spending £60 on the certificate and a t-shirt I'd never wear I decided print it myself and to go out for french toast and a breakfast shake to celebrate🥳 #BugBounty #CyberSecurity #WillHackForFrenchToast
100
Reposted by Mat Rollings
CaidoIO @caido.io · 16/06/2025
🚀New plugin in the Caido Store! Introducing "Exploit Generator" by @stealthcopter Generate executable proof-of-concept (PoC) code from intercepted requests, in multiple languages and frameworks, such as Python, JavaScript, and Bash/cURL. Check out more details: github.com/stealthcopte...
053
Mat Rollings @stealthcopter.bsky.social · 02/06/2025
🚀 Just released a new @caido.io plugin: Exploit Generator 💣 Generate clean, working, customizable PoC exploit scripts instantly in Python, JS, Bash/cURL (more langs & frameworks coming soon) Live now in the Caido Plugin Store: github.com/stealthcopte... #Caido #BugBounty
github.com
GitHub - stealthcopter/CaidoExploitGenerator
Contribute to stealthcopter/CaidoExploitGenerator development by creating an account on GitHub.
041
Mat Rollings @stealthcopter.bsky.social · 12/05/2025
Survived the Bristol Half Marathon (2hr40). Then immediately got a kebab and cheesecake because I am an athlete 💪 Next: 25km Bath to Bristol for @coolearthaction.bsky.social. Please donate so the rainforest wins and I continue to question my life choices 🌍💚 www.justgiving.com/page/oh-no-2...
Selfie of me running the half marathon with the Clifton suspension bridge in the background
051
Mat Rollings @stealthcopter.bsky.social · 10/04/2025
Just received the coolest #ctf prize ever from @patchstack.com, signed Hackers memorabilia and swag! 💾HACK THE PLANET! 🌍 #BugBounty #HackThePlanet #Infosec #Hackers
Signed Hackers movie memorabilia and patchstack metch
000
Mat Rollings @stealthcopter.bsky.social · 10/03/2025
It's wild that I'm getting paid for this nonsense #WordPress #BugBounty
010
Mat Rollings @stealthcopter.bsky.social · 26/02/2025
And for anyone wanting to learn some more PHP tricks 🪄, here's my other two write ups for the Patchstack #wcasia2025 CTF, Blocked 🛑 sec.stealthcopter.com/patchstack-c... #CTF #WordPress #Hacking
sec.stealthcopter.com
Stealthcopter
Explore how creative tricks in PHP and WordPress allow you to bypass restrictions in a fun Patchstack CTF (S02E01) challenge and uncover neat tricks with filter
100
Mat Rollings @stealthcopter.bsky.social · 25/02/2025
I'm running 25k to raise money for Cool Earth. This will be the furthest I’ve ever run, and it’s going to be incredibly difficult! Any donations are massively appreciated! 🙌 Even if you don’t donate, check out the FAQ on my page, it’s worth a read! www.justgiving.com/page/oh-no-2...
justgiving.com
Mat's 25k Bath to Bristol Railway Run
Help Mat Rollings raise money to support Cool Earth
010
Mat Rollings @stealthcopter.bsky.social · 24/02/2025
Woop 🥳I placed 5th in the @patchstack.com CTF at #wcasia2025 🏆 Here's my first write-up covering one of the trickier challenges, diving into PHP’s quirks, like mixed-case function calls and dynamic execution. sec.stealthcopter.com/patchstack-c... #CTF #WordPress #Hacking
sec.stealthcopter.com
Stealthcopter
This writeup explores a Patchstack WordPress CTF challenge where a vulnerable custom footer feature allows for dynamic function execution. The challenge involve
021
Mat Rollings @stealthcopter.bsky.social · 12/02/2025
Second collaboration of the year 🥳 Many more to come 🤞I was awarded a $1,500 bounty on @Hacker0x01! hackerone.com/stealthcopter #TogetherWeHitHarder
hackerone.com
Unsupported Browser | HackerOne
030
Mat Rollings @stealthcopter.bsky.social · 01/02/2025
Chained two 'meh' WordPress vulnerabilities into a high-impact exploit on JupiterX Core 👾. From low-privilege SVG upload to full RCE, check out the full breakdown and PoC 🛠️ #BugBounty #WordPress #Cybersecurity sec.stealthcopter.com/jupiterx-cha...
sec.stealthcopter.com
Stealthcopter
tldr; On their own, these two vulnerabilities in JupiterX Core wouldn’t have been very impactful or likely to get a bounty; but by chaining them together,
020
Mat Rollings @stealthcopter.bsky.social · 22/11/2024
🧩👀🧠👈😵‍💫🔠❓➡️🤯🚩🥳 #ctf
🧩👀🧠👈😵‍💫🔠❓➡️🤯🚩🥳
020