@mxrchreborn

HideAndSec 🐈‍⬛

 France
github.com/mxrch
Joined April 2017
  • Tweets762
  • Following467
  • Followers2.5K
78Media
Released GHunt 2.3.3 with a new module : 🕷️ Spiderdal ! Put a domain name and quickly find tied assets, including the hidden ones, by abusing Google's assets links statements. New way for doing recon before a pentest ! 🥳
12
123
3
755
61,124
the fuck you smiling about bitch
44
1,499
31
18,832
140,393
the fly found the horn
100
590
120
9,831
404,056
I've published UniBLEed, a fully wormable proximity Bluetooth RCE affecting Unitree's G1 humanoids. Blog spans cloud, mobile, firmware, Bluetooth & hardware. Two multi-bug RCE chains. 3 months into ~80 minutes, $6,700 in bounties. Go jailbreak your G1s!! boschko.ca/g1-ble-rce/

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the...

boschko.ca
9
83
10
226
24,342
New capability: See if an IP is a real user, VPN, Tor node or residential proxy 🔎 We name the provider and show how often and how recently the IP was seen relaying traffic. 👇
The OSINT Newsletter
@osintnewsletterAug 14
🌐 IP Search is now live on @OSINTindustries. One lookup returns location and ISP, VPN and proxy detection, abuse and threat reports, and open ports with CVEs. Ownership and exposure in one place instead of three separate services. tools.osintnewsletter.com/os…
7
5
1
36
2,997
“we sandboxed the agent” meanwhile the agent:
258
3,413
247
35,562
1,779,094
Unitree G1 proximity-based OTA RCE into isolated OCU. No network, no auth, no pairing. Just a string of cloud & BLE protocol bugs into a hardware BSS buffer overflow Don't leave your $25k robots unattended around @pwnoio Will release PoC post disclosure and patch
6
9
1
55
5,791
mxrch retweeted
22sh
@0x22shMar 11
You may know that one guy in high school who showed up at every party without being invited? Well, that was me. I always wondered whether there was an internet version of the same thing internethandout.com/post/fea…
6
19
102
6,456
🚨 6 arrests in a satanic child abuse network. Suspects were identified during OSINT Industries training with @NSWPolice by our trainer @OSINT_Tactical in the Strike Force Constantine investigation. OSINT training saves children’s lives. 👇
29
356
19
1,003
78,117
🚀 We’re hiring. OSINT Industries is expanding with 5 new hires. Build technology used by 100,000+ investigators worldwide. Roles: docs.google.com/document/d/1… Apply: docs.google.com/forms/d/e/1F…
7
1
37
5,247
Sherlock isn't actively maintained like it used to be, so I'd highly recommend using @OSINTindustries if anyone is looking for a more powerful tool.
3
1
7
1,570
incredible things are happening
195
945
182
15,147
1,040,628
🎉 Our robot dog has a new owner! A huge congratulations to the lucky winner of our giveaway at @_leHACK_ 2025 — and merci to everyone who stopped by Stand 6 for a demo (or just to pet the pup 🤖🐾). As you can see, it drew quite the crowd on a beautiful day here in Paris. 👏 Hats off to the leHACK team for an outstanding conference — a brilliant gathering of hackers, investigators, and curious minds from around the world.
2
4
31
3,718
OSINT Industries are all set up for @_leHACK_ 2025 in Paris! Stop by at Stand 6 and put us to the test: challenge us to see what we can find out about you! Oh . . . and we have a 'Chien Robot' to use the vernacular! Introduce yourself and take the controls!
1
3
21
3,644
mxrch retweeted
banteg
@banteg14 Jun 2025
guys?
1,044
3,865
1,128
39,323
3,323,462
New blog just dropped 🤠 I've spent hours boiling down why adversarial examples fundamentally exist, distilled down to technical crystal-clear explanations anyone can grasp. This is what I wish someone had given me months ago. Give it a read ❤️ boschko.ca/why-models-break/

When Models See Ghosts - Investigating Why Adversarial Examples Break Our Models

Explore why adversarial examples fundamentally exist & why models are often wrong almost everywhere.

boschko.ca
5
29
1
92
7,583
Released my VSCode theme "Obscure", a mix between Modern Dark and Cursor, that respects type hint. Feel free to try it ! 🌛
2
1
12
2,070
GitHub repo : github.com/mxrch/obscure-the… And to install it :
3
766
Gosh I love this modern Python era
1
6
955
Honestly, I fucking love OSINT Industries. They are one of the few "OSINT" companies which does OSINT for good. Honestly, I would highly recommend signing up, worth every cent IMO.
OSINT Industries
@OSINTindustries25 Feb 2025
🇺🇦💙🇬🇧 Standing with Ukraine—enhancing OSINT capabilities for a safer future! Since day one of Russia’s invasion, OSINT Industries has provided free access to our platform for Ukrainian police and government agencies, helping them defend their country, uphold law and order, and protect those most at risk. Recently, @euam_ukraine Senior OSINT Advisors, Juan Carlos Arias Lopez and Teo Mandoki led a four-day “training of trainers” course at Kharkiv National University of Internal Affairs (@khnuvs) in Vinnytsia. Attended by 22 law enforcement professionals, including members of Ukraine’s National Police, cybercrime units, and investigative teams, the training focused on integrating OSINT into criminal investigations. The course covered: ✅ Advanced OSINT techniques for law enforcement ✅ Digital security against hostile surveillance ✅ Practical training on OSINT Industries for real-world investigations With support from EUAM Ukraine, Kharkiv National University of Internal Affairs, and Ukraine’s law enforcement agencies, this initiative strengthens Ukraine’s ability to counter threats and conduct effective investigations. We are proud to stand with them in this fight.
2
16
2,624
✨ 𝗡𝗘𝗪: 𝗜𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝗶𝗻𝗴 𝗡𝗮𝗺𝗲 𝗦𝗲𝗮𝗿𝗰𝗵! ✨ Usernames, emails, phone numbers… Ever wanted to OSINT search with 𝗷𝘂𝘀𝘁 𝗮 𝗻𝗮𝗺𝗲? Now, with OSINT Industries, you 𝗰𝗮𝗻. Our latest 𝗡𝗮𝗺𝗲 𝗦𝗲𝗮𝗿𝗰𝗵 feature lets you quickly track down individuals across our modules with just a name. Try it today. 🔎
2
3
21
1,853
Load more