Hüseyin Tıntaş

app sec

[Hüseyin Tıntaş @1337stif]

Klaket is an open-source engine that turns any video URL or file into LLM-ready data: a timestamped transcript, speaker labels, content-aware scenes with keyframes, and the text visible on screen (local OCR).
Everything lands on one JSON timeline.
https://t.co/TTLgsBAguM

[Microsoft Security Response Center @msftsecresponse]

@1337stif Nice work on this, Hüseyin!

[Hüseyin Tıntaş @1337stif]

@claudeai Need Windows/Linux support or deterministic UI control without fragile screenshots? I built OculOS. It exposes the OS accessibility tree directly to Claude via MCP as JSON. Instant & zero dependencies.
https://t.co/RiMSaIwW0V

[Hüseyin Tıntaş @1337stif]

"Open Spotify and play Linkin Park"

Claude did it. No screenshots. No pixels. Just JSON.

OculOS — if it's on the screen, it's an API.

https://t.co/uOo0mwdGre

[publiclyDisclosed @disclosedh1]

Node.js disclosed a bug submitted by @1337stif: https://t.co/h1uZ6Vv0WJ #hackerone #bugbounty

[Hüseyin Tıntaş @1337stif]

Claude, Cursor gibi AI agent'lara "şu işlemi yap" demek yetiyor, gerisini hallediyor.

Tek bir 3 MB boyutunda Rust binary ile çalışıyor. Windows, macOS, Linux. %100 lokal, cloud yok.
https://t.co/KDQUSifkTK

[Hüseyin Tıntaş @1337stif]

Masaüstündeki her uygulamayı API'ye çeviren açık kaynak bir araç geliştirdim.

Bilgisayarınızdaki her uygulamanın arayüzünü okuyup AI araçlarının kontrol etmesini sağlıyor. Buton tıklama, metin yazma, arama yapma.
Hepsi tek bir API servisi üzerinden kontrol edilebiliyor.

[Hüseyin Tıntaş @1337stif]

@akinlog ihtiyacım kadar yapıyorum🤝

[Hüseyin Tıntaş @1337stif]

It reads the OS accessibility tree — every button, text field, menu item gets a UUID endpoint.

curl localhost:7878/windows → list apps curl localhost:7878/interact/{id}/click → click anything

One Rust binary. REST API + MCP server. Works with Claude, Cursor, Windsurf.

[Hüseyin Tıntaş @1337stif]

"Open Spotify and play Linkin Park"

Claude did it. No screenshots. No pixels. Just JSON.

OculOS — if it's on the screen, it's an API.

https://t.co/uOo0mwdGre

[Hüseyin Tıntaş @1337stif]

@msftsecresponse Thanks a lot! 🤝

[Hüseyin Tıntaş @1337stif]

I found RCE in VS Code CVE-2026-21518
https://t.co/bpGfE73Yjl

[Hüseyin Tıntaş @1337stif]

@ynsmroztas 🙏🙏

[Hüseyin Tıntaş @1337stif]

CVE-2026-2441 PoC Chrome CSSFontFeatureValuesMap Use-After-Free
https://t.co/EhxclMjmSb

[Hüseyin Tıntaş @1337stif]

Kalkaneus is now live — an open-source MITM proxy for web security testing that can be considered an alternative to Burp Suite. Open for feedback and contributions. Completely free and open-source.

https://t.co/FR77dVNe2L

[Hüseyin Tıntaş @1337stif]

@gkndsn 🙏🙏

[Hüseyin Tıntaş @1337stif]

@IceSolst Actually, I was inspired by @fkadev 's https://t.co/iUlGi2QYpv project.
Thank you for your comment, I'm really glad you liked it. 🎉

[Hüseyin Tıntaş @1337stif]

🚀 Introducing Nuclei AI Prompts! 🔥
🔗 https://t.co/Y9dubbPObo

I'm excited to introduce Nuclei AI Prompts – a web platform providing a curated collection of ready-to-use security prompts for Nuclei, helping penetration testers and security researchers optimize their workflow.

[Hüseyin Tıntaş @1337stif]

@princechaddha @pdnuclei I am glad you liked it. 🎉

[Hüseyin Tıntaş @1337stif]

CVE-2025-24016 Wazuh Unsafe Deserialization RCE
Nuclei Template

https://t.co/9nP75olF39

[Hüseyin Tıntaş @1337stif]

Microsoft’un online servisleri ve Microsoft Teams üzerinde tespit ettiğimiz zafiyetler kabul edildi ve bu çalışmalarımız sonucunda teşekkür listesine isimlerimiz eklendi.

https://t.co/4cMvXE7qYc