Booleanaire

Shokunin at @KahuLabs_ , Security Researcher, Dog Father

[Nicolas Krassas @Dinosn]

Awesome Large Language Models for Vulnerability Detection https://t.co/p0DR30TQEg

[Nicolas Krassas @Dinosn]

A curated collection of 86+ Nuclei templates focusing exclusively on zero-day and actively exploited vulnerabilities in the wild. Templates use passive detection techniques (version/date matching) and are organized by year for easy navigation.

https://t.co/ZyRtKsAssn

[Intigriti @intigriti]

Several ways to enumerate links & URLs (including some cool recon techniques!) 👇

> Crawling (with separate UAs)
> Content discovery (with different HTTP methods & content types)
> Web archives (Internet Archive + URL shortener archives)
> Google & Github/GitLab dorking
> Analyzing JavaScript files (including previous, archived versions)
> Scraping API & product docs
> Mobile app analysis (static & dynamic!)
> Third-party integrations (Postman, Insomnia, etc.)

[Owais @syaedowais]

This can't be real, the irony.

[ellen livia ᯅ @ellen_in_sf]

This week in security:
- LiteLLM, backdoored release exfiltrating secrets
- Axios, supply chain malware via dependency
- Railway, CDN caching leaked user data
- OpenAI Codex, command injection via GitHub branch names
- Mercor 1TB data leak
- Delve, data leak + compliance risk

infra is the attack surface now

[Wes Bos @wesbos]

Claude Code leaked their source map, effectively giving you a look into the codebase.

I immediately went for the one thing that mattered: spinner verbs

There are 187

[Chaofan Shou @Fried_rice]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Nicolas Krassas @Dinosn]

pentest-ai - 6 Claude Code subagents for offensive security research (engagement planning, recon analysis, exploit methodology, detection engineering, STIG compliance, report writing) https://t.co/tVvvkGoP68

[Booleanaire @0xbool]

@ICICILombard @AmericanExpress is the agent in this. Both of your teams have been useless

[Booleanaire @0xbool]

@ICICILombard @AmericanExpress is the agent in this. Both of your teams have been useless

[Booleanaire @0xbool]

@ICICILombard @ICICIBank_Care Very poor customer support from ICICI Lombard. Renewal payment was successfully made 2 days ago through the payment link shared by your team, but no renewal document has been issued yet. I am still receiving messages saying my policy will not be

[Booleanaire @0xbool]

renewed unless I pay today. Email only pushed me to a chatbot. Need urgent human intervention and confirmation of renewal.

[Booleanaire @0xbool]

@ICICILombard @ICICIBank_Care Very poor customer support from ICICI Lombard. Renewal payment was successfully made 2 days ago through the payment link shared by your team, but no renewal document has been issued yet. I am still receiving messages saying my policy will not be

[Booleanaire @0xbool]

renewed unless I pay today. Email only pushed me to a chatbot. Need urgent human intervention and confirmation of renewal.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

We announced the Critical Research Lab this week.

And for our FIRST post, we got @J0R1AN's:
- Exploiting Web Worker XSS with Blobs

Go check it out! https://t.co/XP8ACSFV2q

[Vitor Falcão "busfactor" @busf4ctor]

The @GoogleVRP blog has this amazing table. It's perfect for understanding some security boundaries and defenses and a good checklist to use for testing targets.
https://t.co/jbyi5S1SoG

[Booleanaire @0xbool]

@GreeksLive @grok what does this say about PA expectations?

[Booleanaire @0xbool]

@ShardiB2 @grok illustrate?

[The Kobeissi Letter @KobeissiLetter]

Key Events This Week:

1. August Retail Sales data - Tuesday

2. Fed Interest Rate Decision - Wednesday

3. FOMC Press Conference - Wednesday

4. Fed Dot-Plot Projections - Wednesday

5. Philadelphia Fed Manufacturing Index - Thursday

6. Initial Jobless Claims data - Thursday

The first Fed rate cut of 2025 is coming this week.

[Nicolas Krassas @Dinosn]

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

https://t.co/a5Xj68qh5L