#SecurityResearcher 🧑🏻💻 | #AIEnthusiast 🤖 | Lifelong learner 👾 | Sharing my raw #SelfNotes on threats, tools & emerging tech from my perspective.
localhost
Joined May 2022
- Tweets267
- Following73
- Followers9
- Likes304
Pinned Tweet
#VibeCoding isn't that simple. If you just rely on AI to fix the things, you'll end up with more problems than you can handle. Instead, use AI to dig into the root cause and treat it as a brainstorming partner to find the way of the solution.
We don't realize how important CO₃ is until we realize that we learned about it from @cyberwarfarelab! labs.cyberwarfare.live/crede…
I just earned the Offensive Cyber Operations with AI (OCO-AI) exam_certificate_v2 from @cyberwarfarelab! labs.cyberwarfare.live/crede…
NΞCTL retweeted
AI has evolved. So should your skills. Learn beyond prompting. Build real AI security expertise. 🚀
👉🏻 FLAT 90% OFF: cyberwarfare.live/product/of…
#ArtificialIntelligence #AISecurity #CWL
NΞCTL retweeted
AI can be a fantastic teammate for Bug Bounty hunters! 🤖
Claude Code mapped attack surfaces, spotted suspicious behaviour and uncovered real vulnerability paths.
But it still needed a human to validate the findings, prove the impact and guide it in the right direction 👀
See the full test 👇
yeswehack.com/learn-bug-boun…
I just earned the Active Directory Red Team Specialist (ADRTS) exam_certificate_v2 from @cyberwarfarelab! labs.cyberwarfare.live/crede…
It's an August, then goodbye Cancer, and welcome Leo...
ALT AI-driven penetration testing and C2 operations toolkit. Forked from Google Gemini CLI — adds a 40-module security scanner, credential management, DLL templates for privilege escalation, and a system prompt tuned for security engagements.
Learned a lot about #SliverC2 workflows, #ActiveDirectory operations, and chaining small findings into meaningful progress. Looking forward to the next exercises. 🚀
ALT You are tasked with performing a red team engagement on Puppet Inc. The company does not allow data leaving the internal network, so a c2 server has been set up internally and an employee executed a payload in order to simulate a successful social engineering attack.
Hiding keys in native code creates a false perimeter. Chained with deep links, they enable silent backend compromise.
medium.com/dkatalis/the-fals…
Inspired by @MobileHackLab "Strings" lab
NΞCTL retweeted
If you run Claude Code, Cursor or Codex for security work, antigravity-awesome-skills is worth a look 👀
A whole library of installable SKILL.md playbooks, including a security pack: SQLi testing, broken auth review, SAST config & more.
👉 github.com/sickn33/antigravi…
#BugBountyTips #YesWeRHackers
NΞCTL retweeted
Honestly, what is this ? I got a response from @github support team. So here after legal Security Research and PoC's is not allowed on GitHub ?
I'm Completely got disappointment by @github and @Microsoft @MsftSecIntel .
In what ways i distribute and share malware. Can anyone tell me if there is a mistake from my side, did i share 0 days, vulnerabilities, direct binaries or full exploit chain that harm users ? NONE ?
is posting Legal source codes and tools that are made of public PoCs are wrong ? there are thousand of full chain real expoits that bypasses EDRs, C2s that evades security solutions, phishing kits that bypasses MFA of Microsoft out there in @github , if that is legal then why cant this simple publically made poc can't be in the github ?
I have replied regarding my statements, please don't disappoint younger legal windows security researchers like this. I have some little hope on @github @Microsoft @MsftSecIntel .
I have a little hope. So Please don't make me loose on @github & @Microsoft & @MsftSecIntel .
Ticket ID: #4440743
Will be waiting for your kind response. Thank you.
xitter.cf/5mukx/status/206182709…
#github #microsoft #security #research
Hey @martinwoodward
My GitHub account was flagged without any prior notice. I'm a college student and have been an active open-source contributor for over 4 years. I've released multiple security research projects and even contributed to Microsoft's open source editor.
My repositories help security researchers test and strengthen defensive systems through authorized work. Today I was releasing updates to a new tool when the flag occurred. I've already submitted a reinstatement request (Ticket #4440743).
So I kindly request you to help and resolve this issue.
Thank you
One thing I’ve been experimenting with lately:
Using #KiroSkills to operationalize #bugbounty #workflows instead of relying on scattered scripts, notes, and ad hoc prompts.
I documented the approach here:
builder.aws.com/content/3DuG… @AWSCommunity
Just published my latest project about the #rag-agent @Docker here: hub.docker.com/r/maruha/rag-…
I'll appreciate any feedback from you guys 🙏🏻
NΞCTL retweeted
We've released two free lecture-levels from Fundamentals of ARM Exploitation today!
One each from our 🔬Reverse Engineering🔬 and ⛓️ARM ROP⛓️ chapters.
You can play through them right from your browser! Use this link, or the direct links below ⬇️
wargames.ret2.systems/