ZeroSploit retweeted
Builds an open-source ESP32-based quadcopter from scratch with less than 2k lines of Arduino firmware.
github.com/okalachev/flix
ZeroSploit retweeted
Claude just got a red-team playbook.
Claude-Red just dropped a full pentest skill pack for Claude :
- 78 SKILL.md files.
- 23 categories.
- Load on demand unused skills don’t burn context.
Web, AD, cloud, containers, CI/CD, wireless, EDR evasion, exploit-dev.
Use it for authorized red team, bounty in scope, research, CTF.
ZeroSploit retweeted
We were building an AI Security startup. We killed the startup idea and released the red-team engine instead — OpenHunterAI github.com/LumosLab-Innovati…
ZeroSploit retweeted
Anti-Forensics - Hiding Your Presence with Nyx
Nyx can remove forensic artifacts across Linux, Windows and macOS.
It goes through multiple modules, including IoT Smart Home devices, cryptocurrency artifacts, IDS and IPS logs, network traces and much more
hackers-arise.com/anti-foren…
ZeroSploit retweeted
CVE-2026-82329 · JFrog Artifactory (self-hosted)
Blank join key → unauth SERVICE admin JWT → platform admin token (aud=*).
Validator (stdlib only):
github.com/ynsmroztas/CVE-20…
Authorized testing only.
#BugBounty #InfoSec #AppSec #bugbountytip #bugbountytips #infosec #recon
ZeroSploit retweeted
《APT单兵作战指南》
github.com/GhostWolfLab/APT-…
《AI安全指南》
github.com/GhostWolfLab/AI_S…
进攻性信息收集
github.com/GhostWolfLab/Ghos…
我们推出的AI边缘计算设备
wolfbox.cloud/
我们的研究文章
blog.ghostwolflab.com/
官网
ghostwolflab.com/
ZeroSploit retweeted
Malleon - automates HTTP/HTTPS configuration for Cobalt Strike Malleable C2 profiles using real traffic captured from legitimate applications github.com/r3xmax/Malleon/
ZeroSploit retweeted
🔥Hi OSINTers,
Identify the followers and followed accounts that a private Instagram profile interacts with.
I built Instagram Private Graph powered by my own algorithm to uncover a large portion of the followers and followed accounts linked to private Instagram profiles.
➡️GitHub: github.com/0x6rss/instagram-…
ZeroSploit retweeted
‼️ New Ransomware Group: Vexy
Dark Web Onion: http://vexytsr3chimdz6siwaqi2lvxxwfkxvffkpwyanr2llequ2hkm56jvqd[.]onion
ZeroSploit retweeted
🚨 SOMEONE JUST TURNED AN LLM INTO AN AUTONOMOUS RED TEAM
Cyberstrike is an open source AI security agent built to automate penetration testing from your terminal.
Plug in your Claude, GPT, or other LLM subscription and you get:
→ 13+ specialized security agents
→ 7,600+ security skills
→ 120+ OWASP test cases
→ 150+ AI providers
→ 5,300+ models
→ 56+ built in tools
→ 176+ MCP tools
Instead of one AI trying to do everything, it splits security work across specialized agents.
This is where AI powered pentesting gets seriously interesting.
Use it only on systems you own or have explicit permission to test.
REPO BELOW
ZeroSploit retweeted
One of the simplest (and most impactful) bugs to look for is switching out the algorithm on JWT tokens to "none". Here are the steps:
🟧 Decode the JWT and set the header to {"alg":"none","typ":"JWT"}.
🟧 Change the sub claim to {"sub":"administrator"}.
🟧 Strip the signature, keeping the trailing dot so the token ends in .
🟧 Send it!
Try it yourself here 👇
portswigger.net/web-security…
ZeroSploit retweeted
One of the few uncensored/abliterated models that will not hallucinate heavily that I tried. huggingface.co/theresa00l/Qw…
ZeroSploit retweeted
Hello guys،
Do you want to Bypass all production EDR ?
Read my new research to enjoy in kicking EDRs defenses.
0xmaz.me/posts/LACUNA-Chain-…
The proof-of-concept implementation is available at github.com/MazX0p/LACUNA-Cha…
#Maldev
ZeroSploit retweeted
🚨 Nightmare Eclipse GitHub account and repositories were suspended yesterday.
The researcher who has popped off with zero-days has created a new account on GitLab... gitlab.com/nightmare-eclipse
They have a message for Microsoft though and July 14th seems to be a day that will be worth watching.
