https://teapawt.net/t.co/EyHi6O0p7e
Michigan
Joined May 2008
- Tweets4K
- Following132
- Followers420
- Likes238
SteveSchofield retweeted
My friend @lsanger just launched DeepDiveBible.org. It’s a free Bible study library with group tools built in: 10 translations side by side, the Hebrew and Greek a tap away, 31 classic commentaries, 220 maps. Check it out! deepdivebible.org
Three Kali laptops, one hands-on career lab. I used dot from my Mac to help set up Linux, deploy OWASP Juice Shop and AI activities, and build an Ethernet cable challenge. Here’s the story: steveschofield.substack.com/…
24
SteveSchofield retweeted
#otd in 1971 Bell Labs released the first Unix Programmer's Manual.
Download the free PDF here (third edition): shorturl.at/8NP0j
(v/@CoolSWEng)
SteveSchofield retweeted
Today @_rybaz and I are publicly releasing all the materials for our Introduction to Harness Engineering for Vulnerability Research training we gave at @unpromptedconf last week.
Our goal was to teach the concepts we've been using to do much deeper security research and make both vulnerability analysis and red team engagements far more impactful.
The workshop can be found here: grahamhelton.github.io/harne…
The slides can be found here: grahamhelton.com/talks/2026-…
SteveSchofield retweeted
Necesito que se manifiesten todos los que han visto alguna vez Starsky & Hutch (1975-1979)
Joshua 1:5
No one will be able to stand against you all the days of your life. As I was with Moses, so I will be with you; I will never leave you nor forsake you."
21
SteveSchofield retweeted
Video of my @UnpromptedAU & Bsides Canberra talks out now
I built an autonomous N-Day exploit pipeline for the Windows kernel w/ mix of deterministic and AI-led stages. Results were comparable to what Anthropic achieved with Mythos using a much less powerful model.
Now online from BSides Canberra 2026: @chompie1337 presents “Building an Autonomous N-day Exploit Generation Pipeline”.
Watch now: youtu.be/03Xh_6_6U4M
SteveSchofield retweeted
Now online from BSides Canberra 2026: @chompie1337 presents “Building an Autonomous N-day Exploit Generation Pipeline”.
Watch now: youtu.be/03Xh_6_6U4M
SteveSchofield retweeted
一键反编译 Android 应用并逆向提取全套 HTTP API 的 AI 技能扩展：Android Reverse Engineering Skill 📱🔓
告别繁琐的静态分析，让 Claude 帮你秒级分析 APK/XAPK、恢复混淆类名并提取完整 API 接口与鉴权逻辑
👥 【适用人群】
适合需要快速逆向分析 Android 应用、提取第三方服务 API 接口、分析应用安全漏洞或重构代码逻辑的移动端开发者与安全研究人员
🎯 【核心 3 大杀手级功能与架构亮点】
1️⃣ 快速指纹识别与智能反编译：秒级检测 Flutter/RN 框架与混淆层，内置 jadx 及 Fernflower 引擎双向比对
2️⃣ Kotlin 混淆恢复与 API 提取：利用 Kotlin 元数据还原被 R8 混淆的 ViewModel/Repository 类名，自动提取 Retrofit/Ktor 接口与 HMAC 签名逻辑
3️⃣ 端到端调用流链路追踪：从 Manifest 页面交互层追踪至 ViewModel 并下钻到底层 HTTP 网络请求，透视完整架构
💡 架构亮点：采用跨平台 Shell 与 PowerShell 脚本封装底层 JADX 工具链，作为 Claude Code 插件无缝嵌入 AI 驱动的命令行逆向工作流
⚡️【极速安装与挂载指令】 在 Claude Code 中直接执行命令即可添加该 Skill：
/plugin marketplace add SimoneAvogadro/android-reverse-engineering-skill
⭐ Star 数：约 8.2k
🔗 开源仓库： github.com/SimoneAvogadro/an…
#Android #ReverseEngineering #ClaudeCode #JADX #APK #API #开源项目 #开发者工具 #安全工具
SteveSchofield retweeted
Bug Bounty Methodology with OpenCode CLI – Step by Step
1. Install OpenCode
curl -fsSL raw.githubusercontent.com/an… | bash
2. Clone the Bug Bounty Skills
git clone github.com/awarexone/Agentic…
cd Agentic-Bug-Hunter
./install_tools.sh
./install.sh --opencode
3. Start OpenCode and Check Skills
Run opencode then type:
do you have bug bounty skills?
4. Core Workflow
• Scope (never go out of bounds)
• Recon
• Hunt
• Validate
• Report
5. Run Recon
recon target.com/
(It handles subdomains, live hosts, crawling, and nuclei)
6. Hunt for Bugs
It covers IDOR, Auth Bypass, XSS, SSRF, Business Logic, SQLi, File Upload, GraphQL, and more.
7. Autopilot Mode (Optional)
autopilot target.com/ --normal
8. Generate Reports
After validating a finding,
type report to get a clean, professional report with CVSS, PoC, and impact.
Repo: github.com/awarexone/Agentic…
Most annoying error when using local models and claude code.
API Error: 400 request (66793 tokens) exceeds the available context size (65536 tokens), try increasing it
6
110
A Fun Home Lab Exercise: Forwarding a YubiKey from a Mac to Kali Linux
Read on: steveschofield.substack.com/…
106