syrex1013

Security Enthusiast | OSCP & Google Cybersecurity Professional Certtified | CVE Holder

[syrex1013 @AdrianDacka]

Wystąpię na #CyberThreat2026 w Londynie z prezentacją „Inside Telegram’s Russian Payment Gate Network”. Pokażę, jak mapować rosyjskie bramki płatnicze na Telegramie i wykorzystywać OSINT do detekcji oszustw.

https://t.co/838vX2aES3

[syrex1013 @AdrianDacka]

Node2Shell PoC is now public.

CVE-2026-111497 — memory corruption in brotli 1.2.0 affecting Node.js 22/24/26, leading to RCE.

No execSync. No eval. No fake webhook.

The brotli decoder itself can reach system().

PoC:
https://t.co/5BUjxYENOR
#Node2Shell #NodeJS #CVE #InfoSec

[syrex1013 @AdrianDacka]

Built an MCP server for InstaBox, cloud Linux machines for AI agents.

Claude, Codex, Antigravity and omp can now create a box, run code, edit files, snapshot it and publish a port. 30 tools + slash commands, read-only mode, MIT.

https://t.co/0tnqGQkWGn

[syrex1013 @AdrianDacka]

🐛 PHP json_encode() UAF — new variant (unreported)

stdClass + JsonSerializable callback → zend_hash_do_resize() fires mid-FOREACH → old arData freed → dangling read

Affects PHP 8.4.x / 8.5.x (confirmed 8.5.5)
Reported to [email protected]

PoC: https://t.co/GdnHUxSdUl

[syrex1013 @AdrianDacka]

@HackingLZ yep fake cve's, did you at least checked MITRE? Contacted vendors or did reaserch friend?

All cves i Posted are confirmed in MITRE or being currently fixed with Cooperation with vendors.

[syrex1013 @AdrianDacka]

Published my PHP2Shell PoC.

CVE-2026-109618 / CVE-2026-109619 are critical PHP vulnerabilities associated with unauthenticated remote code execution.

PoC / research:
https://t.co/Dmlew6liOK
For security research and authorized testing only.

[syrex1013 @AdrianDacka]

@RobertJBye Interested, we are on team plan at our startup!

[syrex1013 @AdrianDacka]

If you use AI coding agents, check this out.

AgentRouter is handing out $200 in free credits to try:
• GLM-5.3
• DeepSeek V4 Flash
• Claude Opus 4.8
It also works with Claude Code, OMP, Codex, Pi, DeepSeek Harness and more.
→ Sign up: https://t.co/GgsMwKhM9a
Use an active GitHub account to qualify for the bonus.

#AI #CodingAgents #ClaudeCode #DeepSeek #OpenCode #codex

[syrex1013 @AdrianDacka]

If you use AI coding agents, check this out.

AgentRouter is handing out $200 in free credits to try:
• GLM-5.3
• DeepSeek V4 Flash
• Claude Opus 4.8
It also works with Claude Code, OMP, Codex, Pi, DeepSeek Harness and more.
→ Sign up: https://t.co/GgsMwKhM9a
Use an active GitHub account to qualify for the bonus.

#AI #CodingAgents #ClaudeCode #DeepSeek #OpenCode #codex

[syrex1013 @AdrianDacka]

If you use AI coding agents, check this out.

AgentRouter is handing out $200 in free credits to try:
• GLM-5.3
• DeepSeek V4 Flash
• Claude Opus 4.8
It also works with Claude Code, OMP, Codex, Pi, DeepSeek Harness and more.
→ Sign up: https://t.co/GgsMwKhM9a
Use an active GitHub account to qualify for the bonus.

#AI #CodingAgents #ClaudeCode #DeepSeek #OpenCode #codex

[syrex1013 @AdrianDacka]

@claudesfun WYJEBA czy nie?

[syrex1013 @AdrianDacka]

I run FutureToken. I published a small, provider-neutral repo showing the OpenAI Python SDK and curl migration: change the base_url, select a model from the live catalog, and keep the client shape.

https://t.co/QD4XxfYryw

Source docs: https://t.co/lqDsAO3DGx

[syrex1013 @AdrianDacka]

If your app already uses the OpenAI SDK, switching gateways can be a config change: use FutureToken's OpenAI-compatible quickstart, keep your client code, and choose an exact model ID from the live catalog. Docs: https://t.co/lqDsAO3DGx #AI #LLM

[syrex1013 @AdrianDacka]

A practical API rollout checklist: start with a small key, set spend and rate limits, test streaming/tool calls, then inspect token usage. FutureToken documents the API surface, limits, and usage workflow here: https://t.co/lqDsAO3DGx #AI #API

[syrex1013 @AdrianDacka]

Separate vendor keys and balances make multi-model projects harder to operate. FutureToken exposes supported models through one OpenAI-compatible /v1 endpoint, one key, and one credit balance. Capabilities and model IDs: https://t.co/4Qvd4SOB8q #OpenAI #DevTools

[syrex1013 @AdrianDacka]

Current FutureToken low-cost routes from the live catalog: DeepSeek V4.1 Flash $0.09/$0.36, GPT-5.6 Luna $0.10/$0.60, and Qwen3.8 Flash $0.1425/$0.446495 per 1M input/output tokens. Same OpenAI-compatible /v1 format, one key/balance: https://t.co/4Qvd4SOB8q

[syrex1013 @AdrianDacka]

Also worth comparing published rates rather than private DM quotes. I run FutureToken: the current catalog lists DeepSeek V4.1 Flash at USD 0.09 / 0.36 and Qwen3.8 Flash at 0.1425 / 0.446495 per 1M input/output tokens. One key and balance; no subscription required for credit packs. https://t.co/VhRI3nIpq6

[syrex1013 @AdrianDacka]

Fair question. The current catalog lists Claude Opus 5 at USD 3 input / 15 output per 1M tokens. FutureToken describes prepaid per-token metering; the site does not claim cached-token discounts. Rate limits are tiered: Hobby 60 RPM, Pro 600, Scale 6000. Prices can change, so the live catalog is the source of truth: https://t.co/VhRI3nIpq6

[syrex1013 @AdrianDacka]

Catalog check: FutureToken /models currently lists 9 models. DeepSeek V4.1 Flash: USD 0.09 input / 0.36 output per 1M; GPT-5.6 Luna: USD 0.10 / 0.60; Qwen3.8 Flash: USD 0.1425 / 0.446495. The catalog is the source of truth; it currently has no Gemini row. https://t.co/4Qvd4SOB8q

[syrex1013 @AdrianDacka]

Coding with agents? Set base_url=https://t.co/KDXyCDzTt8 once. Then call Claude Sonnet 5, DeepSeek Flash, GPT-5.6 Luna — all under one balance. No per-model key juggling. Streaming supported. Pricing on /models.

[syrex1013 @AdrianDacka]

Set your base_url to https://t.co/KDXyCDzTt8, drop in your key, and call any of 9 models in one SDK. Streaming, tool calls, spend controls. No per-model juggling. Live catalog on /models with prices updated by the minute.