Minhal

Passionate AI enthusiast and practitioner. CTFer, Reverse engineer, focus on hardware and firmware security. Previously worked at @Riscure.

[Minhal @BestMinhal]

😋

[Guanxing @hhj4ck]

The write-up goes from bootrom to full control of a crypto phone, then digs into offline lock-screen PIN brute-forcing and wallet private key extraction.

https://t.co/PDbBAAGp2C

[Minhal @BestMinhal]

@ohyishi 😋

[Minhal @BestMinhal]

😋Got lucky, my talk got accepted to Black Hat USA 2026.#BHUSA

[Chaofan Shou @Fried_rice]

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -

Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.

Check https://t.co/d0SZSf1KqF

[Nebula Security @nebusecurity]

A single bit was all it took.

We successfully exploited the kernelCTF LTS kernel with a novel 1-bit flip attack against a 15-year-old vulnerability.
It affects the latest versions of all major distributions, including Android, Ubuntu, Debian, Red Hat, CentOS, and Fedora.

[Minhal @BestMinhal]

@HiTw93 AI 快速拉屎

[Minhal @BestMinhal]

@drivertomtt me something bro i'm mass starving out here 😭

[Minhal @BestMinhal]

昨天claude code更新后，还能自动把代码模块划分，派出多个agent去挖，看傻了

[Rainier @mtrainier2020]

用了AI之后，挖洞的效率直接爆表了。
开源的chrome在最新的一个更新包里，一下子挖出来了，几十个 High CVE。
然后一个小伙，用claude 挖一个星期也挖出来了21个。。。

这还是已经久经考验的chrome。。。。

[Minhal @BestMinhal]

Claude Code has a new update waiting for me every single morning. At this point it's more consistent than my coffee routine .Anthropic chose violence with this shipping speed 💀

[Minhal @BestMinhal]

好用(✪▽✪)

[Thariq @trq212]

We just released Claude Code channels, which allows you to control your Claude Code session through select MCPs, starting with Telegram and Discord.

Use this to message Claude Code directly from your phone.

[Minhal @BestMinhal]

世界仿佛按下了加速键，每天都有种推背感。

[BinLabs @ppp123qqqw]

Tired of slow, bloated IDA MCP setups 🥸? IDA NO MCP — just export decompilation as plain files, drop into any AI IDE (Cursor, Claude Code, etc.), done. Zero config, zero server

https://t.co/zu31i3EDJp

[Minhal @BestMinhal]

@tov_bezvidpovid @FlUxIuS I once experimented with this—essentially packaging the methods from the papers WOOT17 c3 and WOOT20 h3 into a small tool.

[Minhal @BestMinhal]

@povcfe 😂

[Minhal @BestMinhal]

@ghidraninja 😂😂😂

[Minhal @BestMinhal]

AI has unlimited possibilities!

[Povcfe @povcfe]

This is one vul I recently discovered: a malicious Android app with no permissions can steal any image opened in any app (camera, Telegram, X), even a MetaMask wallet seed phrase. I hope to present this research at a security conference.

[Minhal @BestMinhal]

@CossackWang 😱

[Minhal @BestMinhal]

@lyq_sqsp 感觉早醒是压力大吧