Dev Bùi Hiếu

Cybersecurity 🔥

[Matt Brown @nmatt0]

Oneshot camera hacking.

[Daily CyberSecurity @Daily_CyberSec]

Ryūjin is a research-grade Bin2Bin protector/obfuscator with features like MiniVM (Hyper-V isolation), junk code insertion, anti-debug, and TrollReversers (BSOD).
https://t.co/R4b19WZXO5

[Shai Benbasat (MrShibolet) @MrShibolet]

First day at CloudFlare , pushed a little update and taking the afternoon off ✌️

[Dev Bùi Hiếu @DevBuiHieu]

📷 Tiệm Phở của Anh Hai APK (Brother Hai’s Pho Restaurant)
Tôi vừa port lại game này từ pc sang android. Anh em tải về chơi thử xong nêu đánh giá dưới cmt nhé 📷
https://t.co/NMlKubghrH
Nếu có lỗi gì hoặc tính năng gì cần bổ sung hãy cứ mở issue nhé.

[blueblue @piedpiper1616]

GitHub - Yuri08loveElaina/CVE-2025-49667: Windows Win32 Kernel Subsystem - https://t.co/ksXUc9bagP

[blueblue @piedpiper1616]

GitHub - hunters-sec/CVE-2025-55188-7z-exploit: 7z exploit POC versions prior to 25.01 - https://t.co/sRsHrCb2n4

[Clandestine @akaclandestine]

GitHub - 0pepsi/Linux-persistence: A no-reboot, in-memory Linux persistence PoC leveraging namespace joining, user-namespace elevation, and self‑deletion. https://t.co/wpxhqYYUN9

[0b1d1 @_0b1d1]

🎭 Evil-noVNC: Realistic Phishing Simulation Tool 🎯

Evil-noVNC is a powerful tool for simulating advanced phishing attacks by streaming a live browser session (via noVNC) to the target. The result? A near pixel-perfect login page rendered remotely, not just a static clone.

[Denis Laskov 🇮🇱 @it4sec]

Hacking your mom's Mazda key fob: from replay and jamming to relay and card cloning. 🚘၊၊||၊🥷🏻💰

More details on:
LinkedIn: https://t.co/QK3f9vtvK3
Substack: https://t.co/stzEuTI0i9

[Yassin @Yass1nMohamed]

I made a list of all my weird XSS Payloads so you all can just copy and paste it 🖤

https://t.co/xZZ8G4pGSq

#CyberSecurity #Hacking #BugBounty #bugbountytips #infosec

[Dark Web Informer @DarkWebInformer]

WPProbe: A fast and stealthy WordPress plugin enumeration tool

GitHub: https://t.co/wOl58McFWO

• Uses REST API to detect 3,000+ plugins without brute-force
• Maps plugins to known CVEs with version info
• Stealthy, Brute-force, and Hybrid scan modes
• Output in CSV or JSON
• Supports Docker, Go install, and Nix environments
• Ideal for pentesters and bug bounty researchers

[Denis Laskov 🇮🇱 @it4sec]

Serious vulnerability in Bluetooth protocol: once a device goes to sleep, its session can be hijacked by attacker. 🔵၊၊||၊🧲😴

More details on:
LinkedIn: https://t.co/9dGqfUX8ZG
Substack: https://t.co/fvJgXWyPud

[0x6rss @0x6rss]

WhatsApp messages that seem to come from someone even though they never sent anything? No clicks, no permissions. Just a few technical steps! I demonstrated a manipulation technique for digital forensics experts.

Blog post: https://t.co/sH9MEOxWp3

PoC: https://t.co/hYIFXUtE6I

[Dark Web Informer @DarkWebInformer]

Phoneinfoga: Information gathering framework for phone numbers

GitHub: https://t.co/B4qGlAI0S8

[yar @notrealltd]

It’s just insane that it’s only 2MB

[satswassie @satswassie]

bruh where tf did i end up last night

[0xor0ne @0xor0ne]

Vulnerability research using LLMs (OpenAI’s o3): Zero day in Linux kernel’s SMB (CVE-2025-37899)

https://t.co/1UdtbL2MhZ

Credits @seanhn

#infsec #llm

[Bilal @0xcc00]

You can now even dump LSA/SAM hashes from normal Windows machines using -o TARGET flag.

[Yunus Emre Öztaş @ynsmroztas]

🚨 New Tool Drop!

📱 Android Native Scanner — automatically detects RCE, tokens, API keys, URLs & base64 payloads inside .so files!

🔍 Features:
🧨 system, exec, popen → RCE scoring
🔐 API key / token / JWT detection
🌍 Extracts hardcoded URLs & endpoints
🧬 JNI & native method scanner
📄 Auto-generated TXT reports

📎 Project →
https://t.co/CTFYNWlihJ

💣 No more manual hunting in .so files.
⚡ One script, full visibility.

#BugBounty #Android #ReverseEngineering #BugBountyTips #cybersecuritytips #MobileSecurity #infosec

[Hors @horsicq]

obfus.h is the very powerfull compile-time obfuscator for C (win32/64). Supports virtualization, anti-debugging, control flow obfuscation and other code mutation techniques to prevent disassembly or decompilation. #CodeSecurity #Obfuscation #infosec

https://t.co/i6dnpRJUAF