Real, exploitable vulnerabilities. No noise. Nuclei scans fast. Neo closes the loop. @pdnuclei × @neo_ai_engineer
Joined July 2019
- Tweets3K
- Following153
- Followers44.4K
- Likes1.7K
Pinned Tweet
subfinder. httpx. nuclei. katana. naabu. dnsx. interactsh. cvemap. neo.
this is projectdiscovery.
ProjectDiscovery retweeted
We wrote up how to find every PHP service you run, including the ones on odd ports, under sub-paths, inside appliances and containers, and how to patch and verify them.
Commands plus prompts for your coding agent.
We also started SecureTheWeb.org
It checks Chaos for services running an affected version and emails their security@ inbox for free, with the fix.
We are enriching Chaos over the coming months so the next time a bug like this lands, the affected services are mapped fast and remediation starts sooner.
Read: go.projectdiscovery.io/SIC1T…
We wrote up how to find every PHP service you run, including the ones on odd ports, under sub-paths, inside appliances and containers, and how to patch and verify them.
Commands plus prompts for your coding agent.
We also started SecureTheWeb.org
It checks Chaos for services running an affected version and emails their security@ inbox for free, with the fix.
We are enriching Chaos over the coming months so the next time a bug like this lands, the affected services are mapped fast and remediation starts sooner.
Read: go.projectdiscovery.io/SIC1T…
🚨 PHP2Shell: CVE-2026-109618 & CVE-2026-109619🚨
Two critical PHP remote code execution bugs, affecting apps built on PHP like WordPress, Drupal, Magento, Laravel, and Joomla.
Discover every PHP server you run and see which ones are exploitable.
Run directly with Neo: go.projectdiscovery.io/php2s…
ProjectDiscovery retweeted
You’ve probably seen the eMudhra certificate issue everywhere by now.
Apple has already blocked the affected certs but we should still update the OS, apps and dev tools.
You can quickly use Claude/Codex to fix it:
> Check my macOS System Keychain and Homebrew/OpenSSL CA bundles for the affected eMudhra intermediate certificates listed at emudhra.we-have-a-problem.co…. Check whether they're present or trusted and flag anything that needs attention. Don't modify anything without asking
ProjectDiscovery retweeted
subfinder. httpx. nuclei. katana. naabu. dnsx. interactsh. cvemap. neo.
this is projectdiscovery.
Recurring security work can quietly burn through credits if you treat it like a lightweight check.
In @neo_ai_engineer, every Automation run is a full task.
What if your pentest kept moving while you slept?
In Episode 4 of Plugged In With Neo, Patrick shows how Projects preserve context, Automations repeat proven prompts, and Autopilot chooses the next security task plus a first look at Triage.
CHAPTERS
00:00 Welcome and episode overview
01:03 Give the Work a Home: Projects
02:24 Creating a project and setting shared context
04:23 Project tasks, issues, files, visibility, and secrets
06:56 When to use projects instead of personal tasks
08:18 Run Work on a Schedule: Automations
09:55 Full reports, changes-only output, and scan cadence
11:36 Choosing models, agents, credentials, and outputs
14:34 Reviewing automation runs and history
15:49 Project automations and Neo's API-first workflow
16:41 GitHub, GitLab, OAuth, and custom API integrations
19:41 Automation costs, failures, notifications, and limits
21:40 Let the Project Drive: Autopilot
24:05 Autopilot demo, guardrails, and downstream actions
26:04 Autopilot best practices and persistent project memory
27:44 Projects, Automations, and Autopilot recap
28:44 Triage preview: validating findings from every tool
29:48 Triage demo and on-the-fly connectors
32:55 Q&A: Autopilot quality and security backlogs
34:37 Free plan availability and closing
ProjectDiscovery retweeted
instead of worrying about the 'perfectly' engineered prompt, @neo_ai_engineer let's you kick off security tasks like you're speaking to a colleague, in the apps you're already using.
ProjectDiscovery retweeted
@neo_ai_engineer can do anything you need with its context and results of your previous runs.
Security teams don’t need more reports!
They need to know which findings
are real, exploitable, and worth fixing first.
This early Triage preview shows how Neo will help turn a growing backlog into validated, actionable security work.
Coming soon to @neo_ai_engineer
What if your pentest kept moving while you slept?
In Episode 4 of Plugged In With Neo, Patrick shows how Projects preserve context, Automations repeat proven prompts, and Autopilot chooses the next security task plus a first look at Triage.
CHAPTERS
00:00 Welcome and episode overview
01:03 Give the Work a Home: Projects
02:24 Creating a project and setting shared context
04:23 Project tasks, issues, files, visibility, and secrets
06:56 When to use projects instead of personal tasks
08:18 Run Work on a Schedule: Automations
09:55 Full reports, changes-only output, and scan cadence
11:36 Choosing models, agents, credentials, and outputs
14:34 Reviewing automation runs and history
15:49 Project automations and Neo's API-first workflow
16:41 GitHub, GitLab, OAuth, and custom API integrations
19:41 Automation costs, failures, notifications, and limits
21:40 Let the Project Drive: Autopilot
24:05 Autopilot demo, guardrails, and downstream actions
26:04 Autopilot best practices and persistent project memory
27:44 Projects, Automations, and Autopilot recap
28:44 Triage preview: validating findings from every tool
29:48 Triage demo and on-the-fly connectors
32:55 Q&A: Autopilot quality and security backlogs
34:37 Free plan availability and closing
What if your pentest kept moving while you slept?
In Episode 4 of Plugged In With Neo, Patrick shows how Projects preserve context, Automations repeat proven prompts, and Autopilot chooses the next security task plus a first look at Triage.
CHAPTERS
00:00 Welcome and episode overview
01:03 Give the Work a Home: Projects
02:24 Creating a project and setting shared context
04:23 Project tasks, issues, files, visibility, and secrets
06:56 When to use projects instead of personal tasks
08:18 Run Work on a Schedule: Automations
09:55 Full reports, changes-only output, and scan cadence
11:36 Choosing models, agents, credentials, and outputs
14:34 Reviewing automation runs and history
15:49 Project automations and Neo's API-first workflow
16:41 GitHub, GitLab, OAuth, and custom API integrations
19:41 Automation costs, failures, notifications, and limits
21:40 Let the Project Drive: Autopilot
24:05 Autopilot demo, guardrails, and downstream actions
26:04 Autopilot best practices and persistent project memory
27:44 Projects, Automations, and Autopilot recap
28:44 Triage preview: validating findings from every tool
29:48 Triage demo and on-the-fly connectors
32:55 Q&A: Autopilot quality and security backlogs
34:37 Free plan availability and closing
ProjectDiscovery retweeted
We found live API keys from NVIDIA, Nutanix and AllenAI employees just sitting on public GitHub.
-> some could upload models under the company's name
-> some had been public for almost 2 years
-> 120k+ HuggingFace logins leaked in malware dumps
Anyone with one of these keys could upload a poisoned model as a real company. And there's no easy way to tell.
We found live API keys from NVIDIA, Nutanix and AllenAI employees just sitting on public GitHub.
-> some could upload models under the company's name
-> some had been public for almost 2 years
-> 120k+ HuggingFace logins leaked in malware dumps
Anyone with one of these keys could upload a poisoned model as a real company. And there's no easy way to tell.
🚨 CVE-2026-104935 🚨
Ivanti Connect Secure authentication bypass (CVSS 10.0).
Discover every Ivanti VPN you run and see which ones are exploitable.
Run directly with Neo: go.projectdiscovery.io/CVE-2…
ProjectDiscovery retweeted
Gave the CTF to @neo_ai_engineer with no extra prompt, just the instructions on the page. It solved it and wrote a writeup while I was busy.
It acts like a curious kid who learns by trying things.
Every other Wednesday, we host a 45-minute live session on getting the most out of Neo.
The next session is on Wednesday, October 14th at 1 PM ET, covering how to schedule tasks, manage projects, and leverage Autopilot for efficient security testing
We'll also give one randomly selected attendee additional Neo usage 👀
Save your spot → go.projectdiscovery.io/plugg…
