C4pela

$ Intelligence gathering enthusiast...
... osint | humint | sigint | psyop | cyber security awareness | Web3 | DeFi / SY0-601/701 / PT0-001/002

[m0rphyn @LNS_zak]

LunarisSec uncovered a critical vulnerability affecting https://t.co/rzrHN6bdJ6.

The vulnerability exposed sensitive PII belonging to more than 800 government employees, including full names, email addresses, phone numbers, physical addresses, and access URLs.

[VECERT Analyzer @VECERTRadar]

🚨 CYBER INTELLIGENCE ALERT: ALLEGED DATA EXFILTRATION: STATE AND GEOGRAPHIC INFRASTRUCTURE — BRAZIL 🇧🇷

[STATUS: UNCONFIRMED / ALLEGED THEFT OF GEOGRAPHIC INTELLIGENCE DATABASES / SOURCE: UNDERGROUND FORUM]

THREATENING ACTOR "SHELl" CLAIMS TO POSSESS OVER 100 GB OF THE FEDERAL POLICE INTELLIGENCE SYSTEM DATABASE

The threat actor identified by the alias shelI has posted on a criminal forum the alleged exfiltration and sale of the complete database of the Inteligeo system, a centralized platform for collecting geographic, cartographic, and environmental intelligence information used by the Brazilian Federal Police (Polícia Federal - PF) for tracking commercial activities, environmental crimes, and territorial control. The attacker claims the stolen data exceeds 100 GB of structured data.

🏢 Allegedly Affected Entity: Brazilian Federal Police (Polícia Federal - PF / Inteligeo System).

👤 Threat Actor: shelI

⚔️ Potential Attack Vector: Code injection into Inteligeo backend endpoints, compromise of credentials belonging to analysts or investigative personnel of the PF, or leakage of SQL relational database backups exposed on perimeter servers.

🔍 Verification Status: UNCONFIRMED. As of June 22, 2026, neither the Brazilian Federal Police nor the Ministry of Justice has issued official statements regarding any data breaches affecting the Inteligeo system. However, the alert is being processed under criteria of high risk and criticality for the supply chain and national security, because the structured list of 106 database tables exposed by the attacker maintains absolute technical consistency with Brazil's internal environmental, mining, and financial control systems.

🗂️ FORENSIC ANALYSIS OF THE EXPOSED TABLE SCHEMA

The inventory of exposed tables reveals a massive compromise of data from multiple Brazilian ministries and regulatory agencies, consolidated within the Federal Police's database. The schema is divided into the following highly sensitive sectors:

🪵 1. Deforestation Control, Flora, and Environmental Management (Sinaflor / Ibama)

The database contains critical records related to the fight against environmental crimes and illegal logging in biomes such as the Amazon and the Atlantic Forest:

sinaflor_proj_merge_dash_a (and variants: asv, floresta, pmfs, uso_alt): Consolidated records from Sinaflor (National System for the Control of Forest Products), which regulates Sustainable Forest Management Plans and Vegetation Clearing Authorizations (ASV).

autorizacao_desmat_sema / autorizacao_exploracao_sema: State-level deforestation and exploitation permits issued by State Secretariats of the Environment (SEMA).

vw_embargos_ibama / vw_embargos_icmbio: Lists and histories of sanctions, fines, and active land embargoes imposed by Ibama and ICMBio on environmental offenders.

sicar_reserva_legal_pol / sicar_area_imovel_pol: Geographic polygons from SICAR (National Rural Environmental Registry System), revealing the boundaries of private properties and protected legal reserves.

🪙 2. Rural Credit and Financial Fraud Data (Central Bank of Brazil)

A section of particular interest from a corporate and regulatory compliance perspective:

vw_bacen_glebas / vw_bacen_mutuarios / vw_bacen_propriedades: Data linked to the Central Bank of Brazil (BACEN) and the SICOR system (Rural Credit and Proagro Operations System). ⚠️ RISK AND IMPACT ANALYSIS OF LOGICAL OPERATIONS

👤 Obstruction of Ongoing Police Investigations: By compromising the Inteligeo database, groups linked to organized crime, illegal mining, and Amazon deforestation could gain advance access to heat maps, investigation targets, Ibama enforcement actions (seizures/embargoes), and lists of properties under Federal Police scrutiny, thereby nullifying the element of surprise in tactical operations.

🛡️ TECHNICAL RESPONSE RECOMMENDATIONS (SOC / CSIRT BRAZIL)

🛑 Perimeter Isolation and SQL Query Forensic Audit: Administrators of the Brazilian Federal Police's digital infrastructure are urged to immediately audit the database management systems (DBMS) powering the Inteligeo environment, specifically looking for massive table dumps or unusual requests targeting the views (vw_) listed by the attacker.

📊 MONITORING AND EVALUATION

Intelligence System: https://t.co/wk9bZJ2Nli

Quickly assess your website's security at: https://t.co/QZhWp0kFrO

#CyberSecurity #Brazil #PoliciaFederal #Inteligeo #DataLeak #BacenLeak #IbamaEmbargos #Sinaflor #MiningProcesses #ThreatIntelligence #CyberAlert #VECERT #Infosec #UnverifiedIncident

[Elon Musk @elonmusk]

“Full access” 😂

[Proton Mail @ProtonMail]

If you use Gmail, you need to read this.

Google’s AI, Gemini, can read your emails, attachments, bank statements, etc.

For many, this feature was switched on without consent.

Here's how to turn it off 🧵

1/

[C4pela @C4pela]

@curt_24_24 @AshCrypto

[C4pela @C4pela]

@marryevan999

[Hasan Toor @hasantoxr]

Goodbye Claude Code subscription fees.

Someone just built a proxy that runs Claude Code completely free... and it's wild.

You literally plug in a free NVIDIA API key and point Claude Code at localhost.

That's it.

It handles everything:
- Converts Anthropic API calls to NVIDIA NIM format
- Unlocks 40 requests/min for free
- Supports Kimi K2, GLM 4.7, MiniMax M2, Devstral and more
- Streams thinking tokens and tool calls live
- Even includes a Telegram bot so you can run Claude Code from your phone

No API bill. No rate limit panic. No vendor lock-in.

Honestly, this goes beyond router tools like OpenRouter.

It doesn't just swap the model... it turns Claude Code into a free agent you can control remotely.

The project is open-source on GitHub.

It's called free-claude-code.

[C4pela @C4pela]

@inoccnyt Monstro....top Man, parabéns pelo project!

[Raunak Yadush @raunak_yadush]

Windows 11 has been secretly running a keylogger in the background

this whole time

and sending every keystroke to Microsoft servers.
Here's the fix they don't want you to know about

Win+R → regedit → HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\TIPC → Double click "Enabled" → Set value to 0 → Restart PC

Stop Microsoft from reading every word you type in Valorant chat, Discord, and Chrome.

[Geoff Wacker @GeoffWacker]

That's fuckin' right!

[Stern Drew @SternDrewCrypto]

🚨 MANDATORY VACCINATIONS ARE BEING RAMMED THROUGH IN EUROPE RIGHT NOW! 🚨

The globalist overlords in Europe just dropped the hammer. Mandatory vaccinations are no longer a “conspiracy theory” they’re shoving it down everyone’s throat with new laws and penalties that will make your blood run cold.

This is about total CONTROL.

They’re testing the waters in Europe first because once the sheep there are locked in, the blueprint spreads like wildfire. Next stop: Australia, New Zealand, Canada, and every other “free” Western nation that still pretends to value bodily autonomy.

Your kids, your elderly parents, YOU they want needles forced into arms whether you like it or not. Refuse and face fines, job loss, travel bans, or worse. This is the Great Reset in action, turning citizens into compliant lab rats for their endless jab agenda.

Big Pharma laughs all the way to the bank while governments play God with your DNA. The same elites who lied about everything before are back for round two, and this time they want it MANDATORY.

They fear an awakened population that says NO. Stand up now or watch your freedoms get injected away forever.

The dominoes are falling. Europe today. Your country tomorrow.

Resist or submit. The choice is being made for you unless you fight back HARD.
The Resistance is here @DNAOnChain 🫡

[C4pela @C4pela]

@BowTiedMara "xenofobia do bem"

[BuBBliK @k1rallik]

Anthropic tried to kill 8,100 GitHub repos. Then this happened

> They filed a DMCA. GitHub nuked the entire network within hours. Developers got notices for forks of Anthropic's OWN public repo - one guy's fork had zero leaked code.

> Boris Cherny, head of Claude Code, had to go on X personally: "This was not intentional. Should be better now."

> Meanwhile Sigrid Jin - who used 25 billion Claude Code tokens last year - woke up at 4AM and rewrote the entire thing in Python before sunrise. DMCA can't touch a clean-room rewrite.

> It hit 50K stars in 2 hours. Fastest repo in GitHub history.

> Today claw-code officially launched as an independent project with a formal press release. And the Rust port merged today - what started as a panic rewrite now ships release 0.1.0.

> 140K stars. 102K forks. More than Anthropic's own repo.

> 512,000 lines are in the wild forever. What started as Anthropic's biggest embarrassment just became their most dangerous competitor.

You cannot make this up.

[Stern Drew @SternDrewCrypto]

🚨 THE CIA JUST GOT EXPOSED HIDING A CANCER CURE FOR 60 YEARS!

They KNEW back in 1951!

A declassified CIA document (buried since the Cold War and only forced out recently) proves the agency reviewed Soviet research showing parasitic worms behave EXACTLY like cancer tumors at a biochemical level. Even better: anti-parasitic drugs were DESTROYING tumors in lab tests!

But instead of shouting it from the rooftops and saving millions, they CLASSIFIED IT and let it rot in their vaults while Big Pharma raked in TRILLIONS on poison chemo, radiation, and "treatments" that keep patients sick for life.

Why? Because a cheap, simple cure would CRUSH their trillion-dollar cancer industry cash cow. This was never about health. It was population control, Rockefeller medicine, and keeping the sheeple weak, broke, and dependent. How many of your family members, friends, or loved ones suffered and died while the elites laughed all the way to the bank?

The document is public. The truth is out.

They can't bury this forever.

WAKE UP, SHARE THIS BEFORE THEY SCRUB IT, AND DEMAND ANSWERS!

Who else is done being their lab rats? 🧬💀

[Nav Toor @heynavtoor]

🚨 Someone just turned your WiFi router into a full-body surveillance system.

No cameras. No wearables. No video. Just radio waves.

It's called RuView. It uses the WiFi signals already in your room to detect human poses, track breathing, measure heart rate, and see through walls.

Not a concept. Not a research paper. Working code you can run right now.

Here's what this thing actually does:

→ Tracks full 17-point body pose using only WiFi signals
→ Detects breathing rate (6-30 BPM) without touching anyone
→ Measures heart rate (40-120 BPM) from across the room
→ Sees through walls, furniture, and debris up to 5 meters deep
→ Tracks multiple people simultaneously with zero identity swaps
→ Self-learns from raw WiFi data. No labeled datasets needed

Here's how it works:

WiFi signals pass through your room and hit the human body. The body scatters those signals differently based on position, breathing, even heartbeat. RuView reads that scattering pattern and reconstructs everything.

A mesh of 4 ESP32 nodes ($48 total) gives you 360-degree coverage with 12 measurement links, 20 Hz updates, and sub-30mm precision.

Here's the wildest part:

It has a disaster response mode called WiFi-Mat. It detects survivors trapped under rubble through concrete walls, classifies injury severity using START triage protocol, and estimates 3D position. The kind of tool that saves lives after earthquakes.

The Rust implementation processes 54,000 frames per second. That's 810x faster than the Python version. The entire Docker image is 132 MB.

The AI model fits in 55 KB of memory. Runs on an $8 ESP32 chip.

Train once, deploy in any room. No retraining. No recalibration.

1,100+ tests. SHA-256 verified capability audit.

22.4K GitHub stars. 2.7K forks. MIT License.

100% Open Source.

[Nav Toor @heynavtoor]

🚨 Someone just open sourced a fully autonomous AI hacker and it's terrifying.

It's called Shannon.

Point it at your web app, and it doesn't just scan for vulnerabilities. It actually exploits them. Real injections. Real auth bypasses. Real database exfiltrations.

Not alerts. Not warnings. Actual working exploits with copy-paste proof-of-concepts.

Here's what this thing does autonomously:

→ Reads your entire source code to plan its attack
→ Maps every endpoint, API route, and auth mechanism
→ Runs Nmap, Subfinder, and WhatWeb for deep recon
→ Hunts for Injection, XSS, SSRF, and broken auth in parallel
→ Launches real browser-based exploits to prove each vulnerability
→ Generates a pentester-grade report with reproducible PoCs

Here's the wildest part:

It follows a strict "No Exploit, No Report" policy. If it can't actually break it, it doesn't report it. Zero false positives.

It pointed at OWASP Juice Shop and found 20+ critical vulnerabilities in a single run including complete auth bypass and full database exfiltration.

On the XBOW Benchmark (hint-free, source-aware), it scored 96.15%.

Your team ships code daily with Claude Code and Cursor. Your pentest happens once a year. That's 364 days of shipping blind.

Shannon closes that gap. One command. Fully autonomous.

The Red Team to your vibe-coding Blue team. Every Claude coder deserves their Shannon.

10.6K GitHub stars. 1.3K forks. Already trending.

100% Open Source. AGPL-3.0 License.

[Thierry @0x7hierri]

🔥OSINT websites
# Multipurpose
https://t.co/QG83lvv7IT
https://t.co/VSUohaeALN
https://t.co/LVFP5n0tTp
https://t.co/JUdeYAS65A
https://t.co/b4IsTOXLwT
https://t.co/CHtVujb8S7
https://t.co/ChjGCgCOBA
https://t.co/TIkNFWrRQk
https://t.co/ghNRnU1H0b
https://t.co/aPdxX0xf1J

[CG @cgtwts]

This guy just built a real-time global intelligence dashboard and open sourced it for free.

>You can now monitor the war

>It tracks conflicts, military activity, infrastructure, protests, and market signals live.

>Runs in your browser
>MIT licensed.