Henry Cee_Kay

Cybersecurity and other stuffs

[Rohit @heyrohitai]

🚨 Anthropic just showed a 27-minute workshop on how to actually do prompts for Claude.

Taught by the people who built it.

Free. No registration. No paywall.

I've seen $300 courses that don't cover what they teach in the first 8 minutes.

Watch it and bookmark it now.

[Het Mehta @hetmehtaa]

The most complete list of LLM vulnerability research for cybersecurity I've found:

https://t.co/3L4zH8f31p

It covers threat intelligence, NIDS rule labelling, vulnerability detection, code repair, and jailbreak defenses etc.

[TheOuts1derX @TheOuts1derX]

GitHub repos with reports/writeups for bug bounty hunters:

1. HackerOne Reports https://t.co/AFNt3oGGO0
2. Google VRP Writeups https://t.co/hkuwO1Yz6i
3. Facebook Bug Bounty Writeups https://t.co/H2AbmfHrRJ
4. Awesome Bugbounty Writeups https://t.co/8vrqvBWsh3
5. Daily Bugbounty Writeups https://t.co/82Bja7EERg

#BugBounty #BugBountyTips #Infosec #EthicalHacking #CyberSecurity

[7h3h4ckv157 @7h3h4ckv157]

90+ recon modules
48 secret-regex patterns
80+ dorks
9 read-only credential validators
27 attack-path templates
5,500+ lines of structured tradecraft.

Might be helpful. Try: https://t.co/xgi9WrBG7F

[Hasan Toor @hasantoxr]

Goodbye Claude Code subscription fees.

Someone just built a proxy that runs Claude Code completely free... and it's wild.

You literally plug in a free NVIDIA API key and point Claude Code at localhost.

That's it.

It handles everything:
- Converts Anthropic API calls to NVIDIA NIM format
- Unlocks 40 requests/min for free
- Supports Kimi K2, GLM 4.7, MiniMax M2, Devstral and more
- Streams thinking tokens and tool calls live
- Even includes a Telegram bot so you can run Claude Code from your phone

No API bill. No rate limit panic. No vendor lock-in.

Honestly, this goes beyond router tools like OpenRouter.

It doesn't just swap the model... it turns Claude Code into a free agent you can control remotely.

The project is open-source on GitHub.

It's called free-claude-code.

[Chaofan Shou @Fried_rice]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[7h3h4ckv157 @7h3h4ckv157]

Many folks are asking for OffSec Exam HTB Lists, sharing again 📍

Complete. https://t.co/n9owjzQ8hk (Credit: @0xdf_ )

[Nicolas Krassas @Dinosn]

Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation https://t.co/afoXjzyRaj

[张惠倩 @momika233]

Bypass SSRF WAF rule blocking access
Additional Internal URLs Accepted

https://0x7f000001/ | Yes | localhost (hex) |
https://[::1]/ | Yes | IPv6 loopback |

#BugBounty #BugBountyTips

[Intigriti @intigriti]

Simple cheat sheet to exploit CSRF vulnerabilities! 😎

[Henry Cee_Kay @Henrymayer40]

@yourtechgirl24 Send

[Behi @Behi_Sec]

💡SSRF Trick:

If 127.0.0.1 is black-listed, try these instead:

- 127.1
- 0177.1
- 0x7f.1
- 127.X.X.X

They all resolve to the same IP address.

[BleepingComputer @BleepinComputer]

HR giant Workday discloses data breach amid Salesforce attacks - @serghei
https://t.co/pva8OLVFye

https://t.co/pva8OLVFye

[0b1d1 @_0b1d1]

Search Engine for pen-testers and bug Hunters

[Intigriti @intigriti]

@GodfatherOrwa @net_code @securitum_com 5️⃣ Beyond SSTI

@isec_pl shares their methodology for finding and identifying a server-side template injection in Craft CMS (PHP).

https://t.co/sV57ywlJQb

[Rikesh Baniya @rikeshbaniya]

if the target uses zendesk to handle support emails

you could send an email with payload

`{{ticket.ccs[0].name}}a{{ticket.ccs[0].phone}}` by adding `[email protected]` in CC

and extract victim info ranging from phone, address to payment info

#bugbounty #bugbountytips

[Henry Cee_Kay @Henrymayer40]

@TheMsterDoctor1 I'm ready to earn my OSCP

[Damian Player @damianplayer]

I compiled 200+ n8n automation templates you can copy & paste into your business or sell to other companies.

Just straight plug-and-play systems for:

– Lead gen
-Content creation
– Email outreach
– CRM updates
– AI workflows
– Slack/Discord bots
…and more.

Follow + Reply “n8n” and I’ll send it over.

This is completely FREE. Don't even want your email.

[Muhammad Waseem @wgujjer11]

Big shoutout to @pdiscoveryio for @pdnuclei Nuclei brilliance! Keep systems safe! 🌱❤️
Command:
nuclei -u https://t.co/4jjHPncfhP -tags tech,oracle -s info,high,critical,medium -es unknown -cloud-upload -c 30 -stats -headless

#Nuclei #bugbounty #Cybersecurity

[Abdulaziz @stuipds]

How we gained full control over 3,000 companies and all their registered branches.

This took us about 3 weeks of studying the target to find about all the vulnerabilities explained.

Hope you enjoy reading!
https://t.co/Gz1xlo7LJb