Devyn

[Devyn @devyn]

Why pay for cloud proxies when GitHub gives you free VMs?

Fluffy-Barnacle flips Codespaces into:
Rotating egress → SSH-tunneled SOCKS5 (Burp export) → *.app.github.dev HTTPS (redirect/capture/custom domains via auto-deployed CF Workers) → full WireGuard routing → auto-proxied tools.

Ephemeral red team stack in seconds.
https://t.co/cfbMB46nO7

#bugbounty #redteam

[Devyn @devyn]

@thsottiaux @henry0284928382

[Devyn @devyn]

@h0mbre_ 🤣 such a joke dude. So lame

[Devyn @devyn]

Just stumbled on this…👀

Three live ClamAV 1.5.x memory corruption bugs (double free, ZIP desync that reaches RCE, STATS pointer leak). Full labs, PoCs, and patches already public.

“The vulnerabilities were discovered entirely through AI. Author takes no credit — all glory to the Clankers.”

https://t.co/jnuxu1nm6B

#InfoSec #ZeroDay #ClamAV #AI

[Devyn @devyn]

@mattjay @UK_Daniel_Card 🤣

[Devyn @devyn]

@basaltlabs lol...

[Devyn @devyn]

@claudeai 🙄

[Devyn @devyn]

@hetmehtaa @hetmehtaa, appreciate it! Whole design goal was making the beacon look like normal CI/dev activity :)

[Adnan Khan @adnanthekhan]

Turns out Claude Code is an amazing code signed implant.

Set 2 env vars and it connects to a remote server and hot-loads remote code into the Claude process without touching disk.

[Devyn @devyn]

@Jimster4801 @adnanthekhan @xenovacom 👀

[Adnan Khan @adnanthekhan]

Brief time with Fable yesterday got me started on a cool project.

https://t.co/6mYQMkB9fE

WebGPU rendered (no DOM). GitHub REST API-only + built in AI agent with an in-memory shell to help it navigate natural requests.

[Devyn @devyn]

made this Fable 5 hype ad for @AnthropicAI and they still downgraded it to Opus for… reasons 😂

Mythos-class power… but Fable-class ‘lol no’ restraint all the way.

#Fable5 #Claude #Anthropic #AI #MythosFable

[Devyn @devyn]

@lostsec_ @anxietymsgs 💯

[Devyn @devyn]

@evilsocket Love this! Thanks, man!

[Devyn @devyn]

@rez0__ @Cloudflare Better than @Nvidia… 🙃

[Devyn @devyn]

@adnanthekhan 🥹 thank you!

[Adnan Khan @adnanthekhan]

TeamPCP apparently used a malicious workflow to publish the malicious bitwarden CLI:

https://t.co/LoYbTYZBVI

[Devyn @devyn]

@bcherny I thought the Cyber Verification Program was created to "enable professionals to continue working on legitimate dual-use tasks safely while minimizing interruption."

I was approved 3 days ago, yet I'm now getting pop-up warnings that my prompts violate the Acceptable Use Policy, with a threat of enhanced safety filters if the pattern continues.

The "Learn More" link sent me to usersafety@, but the instant reply was about appealing a ban I never received. It didn't identify the issue or help at all.

Is there a clearer delineation of what counts as a violation for those approved under the Cyber Verification Program? I'm just trying to do legitimate professional work without getting filtered or banned.

[Devyn @devyn]

Well, I got approved for the "Cyber Verification Program" followed by a message stating if I continue violating the 'Acceptable Use Policy' they'll apply enhanced safety filters to my chats.

The 'Learn more' button gave me an email to reach out to which I did... got an immediate reply to fill out an appeal for the ban I don't have. So that's cool..?

[Devyn @devyn]

@UK_Daniel_Card lol dude, mine decided it was tired of 'wasting time' on something it kept generating buggy code for and literally moved on from the task. wild times!

[Devyn @devyn]

@lefthanddraft @about212ninjas Works for Gemini too lol https://t.co/uS4CENA8GA