1XHunter_Oshio

I m OneX

[Tom Dörr @tom_doerr]

Removes temporary files, scans for malware, and monitors system performance on Windows, macOS, and Linux.

https://t.co/UkravUGMnv

[Vivek | Cybersecurity @VivekIntel]

DorkAgent – AI-Powered Google Dorking for Bug Hunters 💥💀

DorkAgent is an open-source Python tool that combines LLMs with Google Dorking to automate OSINT, reconnaissance, and bug bounty research. It generates targeted dorks, searches Google through Serper API, and produces structured security reports.

✨ Key Features:
• 🤖 AI-generated Google Dorks using GPT, Claude, or Gemini
• 🔍 Automated OSINT & reconnaissance workflows
• 📄 Generates detailed bug hunting reports
• ⚡ Dynamic LLM model selection
• 🎯 Customizable search queries, time ranges & dorks
• 🛠️ Modular architecture with automatic dependency setup

⚙️ Requirements:
• Serper API Key
• OpenAI, Anthropic, or Gemini API Key

🔗 https://t.co/mVNXoDE1cP

#CyberSecurity #BugBounty #OSINT #GoogleDorking #AI #Pentesting

[Tom Dörr @tom_doerr]

Modifies network packets to bypass Deep Packet Inspection and unblock restricted websites and services.

https://t.co/eBU4SKpuoV

[Clandestine @akaclandestine]

Hunting
Siberian kl remote

191.96.78.44//5000
198.27.114.57//5000
188.220.168.153//5000
190.102.43.112//5000
107.174.52.32//5000
102.165.46.103//5000
144.91.118.30//5000
151.243.219.4//5000
151.243.236.198//5000
104.234.41.205//5000
138.255.160.82//5000
147.93.183.34//5000
104.234.41.145//5000
45.158.8.50//5000
144.225.189.37//5000
190.102.40.215//5000
151.243.219.247//5000
144.31.149.60//5000
82.153.205.67//5000
198.27.91.243//5000
147.93.182.61//5000
191.96.78.158//5000
151.243.218.166//5000
https////204.12.209.183
200.9.155.254//5000
178.92.163.20//5000
191.96.78.79//5000
45.158.8.31//5000

[Tom Dörr @tom_doerr]

Pentest command launcher with 200 cybersecurity cheat sheets

https://t.co/AEPdfa3RWk

[NVIDIA AI @NVIDIAAI]

NVIDIA Metropolis Blueprint for video search and summarization (VSS) 3 is here.

Now your coding agent can analyze massive live streams and libraries of videos with a simple natural language prompt. Here's what's new:

- 16 new agent skills: Search, summarize, alert, report, review clips. All from natural language prompts.
- One unified open source repo: Source code, Docker and Helm deployment profiles for fast, easy deployment.
- Multi-video reports and Nemotron 3 Nano Omni: Insights across video and audio at scale.
- 3D multi-camera tracking: Production ready + #1 SOTA for smarter scene understanding.

Try VSS skills 👉 https://t.co/XvKJ0Kb8VV

[Allen Braden @allen_explains]

50 WEBSITES GOOGLE DOESN'T WANT YOU TO KNOW

1. 12ft. io — bypass any paywall
2. libgen. is — millions of free textbooks
3. sci-hub. se — free research papers
4. alternativeto. net — find free app alternatives
5. justwatch. com — find where to stream anything
6. archive. org — access any old webpage ever
7. gutenberg. org — 70K free classic books
8. pdfdrive. com — free PDF downloads
9. openculture. com — free courses from top unis
10. wolframalpha. com — solve any math instantly
11. photopea. com — free Photoshop in browser
12. squoosh. app — compress any image free
13. remove. bg — remove image backgrounds free
14. cleanup. pictures — erase objects from photos
15. unscreen. com — remove video backgrounds
16. carbon. now. sh — turn code into art
17. ray. so — beautiful code screenshots
18. shots. so — free product mockups
19. smartmockups. com — mockups without Photoshop
20. haveibeenpwned. com — check if you were hacked
21. virustotal. com — scan any file for malware
22. privnote. com — send self destructing messages
23. temp-mail. org — disposable email instantly
24. file. io — share files that auto delete
25. archive. ph — save any webpage forever
26. similarsites. com — find any site alternatives
27. radio. garden — listen to any radio worldwide
28. everynoise. com — explore every music genre
29. tunefind. com — find songs from any show
30. musicforprogramming. net — music to focus with
31. mynoise. net — custom focus soundscapes
32. coffitivity. com — cafe sounds for productivity
33. elicit. org — AI research paper assistant
34. consensus. app — search what science agrees on
35. connectedpapers. com — map research visually
36. semanticscholar. org — free academic search
37. scispace. com — understand any research paper
38. summarize. tech — summarize any YouTube video
39. phind. com — AI search for developers
40. regex101. com — test any regex instantly
41. codebeautify. org — format any code cleanly
42. jsonformatter. org — read JSON like a human
43. explainshell. com — understand terminal commands
44. raindrop. io — bookmark manager that works
45. downdetector. com — check if any site is down
46. tineye. com — reverse image search
47. fast. com — check your internet speed
48. smallpdf. com — edit PDFs free
49. ilovepdf. com — merge and split PDFs
50. 10minutemail. com — temp email in seconds

The internet is bigger than Google shows you.

Most people never leave the first page.

[connect24h @connect24h]

さすがGoogleがまたぶち込んできた。
「いい感じのUIにして」って10回言っても伝わらなかったのに、
このファイル1枚置いたら一発で意図通りになった。
↓ Google製 DESIGN.md
（YAMLでトークン定義＋なぜその値なのかをプロ―ズで説明）
AIコーディングの"指示の属人化"が終わる予感
https://t.co/JCQrEBNmsr

[atomic.chat @atomic_chat_hq]

Mistral OCR 4 turned a handwritten calculus exam into clean LaTeX!

We gave it a photo of a hand-written exam page. The model read the handwriting and rebuilt every formula into structured digital text

Output: Time: 5.1s · Cost: $0.09

Formulas came through exactly right - the hard part was nailed. The graph, unfortunately, it didn’t redraw. But that’s the telling part: most OCR tools just dump the text and quietly drop the figure. OCR 4 caught the plot, boxed it, and tagged it as a chart. It doesn’t get redrawn, but it gets read and accounted for

[Hasan Toor @hasantoxr]

Tencent 🔥: They open-sourced a long term memory system for AI agents that cuts token usage by 61.38% and it runs fully local with zero external API dependencies.

TencentDB Agent Memory builds a 4-tier semantic pyramid:

> L0: Raw conversation logs
> L1: Atomic facts extracted from those logs
> L2: Scene blocks grouped from related facts
> L3: Full user persona distilled from everything above

The agent reads the persona first and drills down to raw logs only when it needs to verify a specific detail.

- Upper layers carry judgment.
- Lower layers carry evidence.

For short-term memory, it compresses heavy tool logs into Mermaid symbol graphs. Instead of thousands of tokens of verbose output sitting in context, you get a lightweight node map. The agent navigates it using node IDs, pulling the full raw text only when an error occurs.

The benchmark numbers from the WideSearch test: task success rate up 51.52%, token consumption down 61.38%. On PersonaMem, accuracy jumped from 48% to 76%.

These were measured over continuous long-horizon sessions running 50 consecutive tasks each not isolated single-turn evals.

https://t.co/WbXghYvsjf

[Erick @ErickSky]

Baidu acaba de romper una de las limitaciones más grandes del OCR actual.

Unlimited-OCR procesa documentos enteros de una sola pasada, sin chunking.

Es el siguiente paso después de DeepSeek-OCR.

REPOOO👇

[そう｜Claude Codeで始めるAI自動化 @so_ainsight]

Webページをスクショして、AIが画像のまま読む。HTMLをテキストに変換する工程を丸ごと捨てる発想のRAGが出た。

RAGというのは、外部の文書をAIに検索させて回答の根拠にする仕組みのこと。

表やグラフがレイアウトごと崩れる、スクレイピングがうまく動かない。こうした問題を「画像で取ればいい」とまとめて解決している。

これが PixelRAG。

[ThreatFoXX @Dixit_404]

Campaign targeting Cambodia (Angkor Wat International Half Marathon) 🇰🇭

C2: wewrurui[.]com → 38.181.22.75 (AS140227, HK)
Malware: gh0st RAT

SilverFox / China-nexus (High Confidence)

@ElementalX2 @smica83 @skocherhan @AndreGironda @malwrhunterteam @500mk500

[PA13L0 @Fluyeporlaweb]

Google NotebookLM es una de las mejores herramientas de IA que existen.

El problema es que todo lo que subes se queda en los servidores de Google.

Tus documentos. Tus PDFs. Tus notas. Tus investigaciones.

Un solo desarrollador pasó meses construyendo el reemplazo completo.

Lo publicó gratis. 25.4k estrellas en GitHub. Docker en un comando.

Se llama Open Notebook y hace exactamente lo mismo que NotebookLM.

Pero con tus modelos. En tu máquina. Sin que nadie vea lo que investigas.

Lo que puede hacer:

✅ Sube PDFs, videos de YouTube, URLs, audio, texto y archivos de Office
✅ Chatea con tus documentos via RAG - respuestas ancladas en tus fuentes, no inventadas
✅ Genera podcasts de audio a partir de tus notas - para repasar lejos de la pantalla
✅ Notas asistidas por IA que resumen y conectan ideas entre documentos
✅ 16+ proveedores de modelos: Claude, GPT, Gemini, DeepSeek, Ollama y Groq gratis
✅ Con Ollama funciona 100% offline - cero APIs de pago
✅ Actualizado hace 21 horas. v1.9.0. 37 releases. 51 contribuidores.
✅ 100k+ pulls en Docker Hub. MIT.

La diferencia con NotebookLM que más me ha flipado:

Con NotebookLM tienes a Gemini.
Con Open Notebook no tienes nada.

Y eso es lo mejor que puede pasarte.

Porque significa que conectas el modelo que quieras.

el enlace 👇

[VECERT Analyzer @VECERTRadar]

🚨 CYBER INTELLIGENCE ALERT: ILLICIT MARKET EXPOSED — "FreeCity" 🇨🇳

⚠️ HIGH THREAT: CYBERCRIME PLATFORM IDENTIFIED WITH FULL ACCESS TO THE CLEAR/DARK WEB

[STATUS: ACTIVE TRANSACTIONAL PORTAL / ENDPOINT MAPPING COMPLETED / INFRASTRUCTURE MONITORING]

Through open-source intelligence (OSINT) audits by VECERT, the logical infrastructure and front-end of the automated black market known as FreeCity has been fully mapped. The platform operates in a hybrid and identical manner on both the surface web and the Tor anonymous network, serving as a centralized hub for the global trade of compromised assets, KYC/PII data, and money laundering services.

🎯 Identified Platform: FreeCity (underground marketplace and indexed forum).

🌐 Surface URL (Clear Web): https://freecity(.)uk/.

🧅 Tor Network Address (.onion): http://anwangokzgv725vgg3sjxu7rmwvvod47ilmhd7prhjorzn6pvngvruyd(.)onion.

📂 Operators / Ecosystem: Chinese-speaking cybercrime syndicates with transnational distribution capabilities (trading focused on data from Asia, Europe, and the Americas).

📂 CATALOG OF ILLICIT ASSETS DETECTED IN THE MARKET

The automated marketplace's production interface actively indexes the following high-severity threat categories:

1. 🗂️ Data Leaks and Market Intelligence (Data Reports)
Example of Trading: Active sale of the database of the Indonesian financial portal MyPertamina (5.7 million records)

Compromise of State Networks: Database of more than 10 million records from the Chinese police (https://t.co/ZzxkBXcsXX) being traded

Recent Consumer Databases: Sale of pension fund records and financial databases from 2026 of companies located in Jiangsu.

🔑 Identified Identity Data (KYC / Passports)

Massive listings and digitized packages of identity documents, including high-definition passports from the People's Republic of China and identity verification (KYC) data sets to circumvent international banking controls.

💸 Money Laundering and Evasion Services (Cryptocurrencies)
Offers of automated schemes called "The Safest Bitcoin Laundering Method of 2026," designed to mix and launder cryptocurrencies obtained through ransomware extortion or financial theft using automated wallet networks.

🧪 Controlled Substances and Physical Goods (Narcotics)
Distribution channels and direct sales of high-potency synthetic chemicals and narcotics.

🔍 STRATEGIC INTELLIGENCE NOTE

[VECERT ANALYSIS]: The discovery of marketplaces like FreeCity highlights the globalization and automation of the cybercrime economy. By operating under a conventional UK domain extension (.uk) in parallel with its mirror on the Tor network, operators seek to capture traffic from mid-level attackers who lack advanced anonymous browsing tools.

#CyberSecurity #FreeCity #ChineseDarkMarket #DataBreach #PassportLeak #CryptoLaundering #InfrastructureMapping #Endpoints #ThreatIntelligence #CyberAlert #VECERT #Infosec #AnWang

[Techjunkie Aman @Techjunkie_Aman]

Docker quietly created its biggest competitor.

It’s called Podman.

And a lot of Linux developers are switching fast.

Why?

Because Podman removes one of Docker’s biggest architectural problems:

the daemon.

No central background service.
No always-running root process.
No giant privileged attack surface.

Instead you get:

• rootless containers
• Docker-compatible CLI
• Kubernetes integration
• OCI support
• pods
• systemd integration
• lower idle resource usage

And most Docker commands still work almost identically.

The bigger trend here is fascinating:

developers are moving toward infrastructure that is:
• lighter
• rootless
• open
• daemonless
• easier to secure

Modern Linux tooling is evolving incredibly fast.

[Nana Sei Anyemedu @RedHatPentester]

DELETED, BUT NOT ERASED: RECOVERING MESSAGES FROM NOTIFICATION LOGS

The FBI was reportedly able to recover copies of incoming Signal messages from a suspect's iPhone even after the Signal application had been removed few months ago. This was achieved through forensic analysis of the device's push notification database, where portions of message content had been stored.

So I decided to use that same methodology and it worked.

Importantly, this is not a failure of Signal's end-to-end encryption. Rather, it highlights a well-known mobile forensics artifact issue.
iOS uses write-optimized storage, meaning deleted data may persist on a device until it is eventually overwritten.

When a message is delivered to an iPhone via Apple's Push Notification Service (APNs), iOS may generate and display a notification preview, depending on the device's notification settings. These previews can be temporarily stored within system-level databases and notification logs.

As a result, even if the messaging application is deleted, residual artifacts containing portions of message content may remain on the device. Some digital forensic tools can identify and recover these artifacts during an examination, providing investigators with valuable evidence that may no longer be accessible through the application itself.

The underlying issue is that the iPhone caches items that appear as notifications on your lock screen.
I hope Apple will limit the time that messages are cached to minimize risk to users.

Turn off or disable notifications for secure messaging apps or other apps you think are sensitive.

[Vivek | Cybersecurity @VivekIntel]

JS-Tap: Weaponizing JavaScript for Red Teams 💀🔥

🔥 Features:

• Generic JS payloads
• Works on unknown web apps
• No prior app knowledge needed
• Client-side reconnaissance
• Browser activity monitoring
• Session visibility
• DOM inspection
• User interaction tracking
• Data collection capabilities
• Custom payload support
• Red team focused

Perfect for red teamers, AppSec engineers, and web security researchers.

🔗 https://t.co/1rBIdNbigi

#RedTeam #JavaScript #AppSec #WebSecurity #Pentesting #CyberSecurity

[Bitshadow @fbgwls245]

New Black X #Ransomware Leak Site

4 Victims
They've been active since 2025

/blackxppq2jvqyg4slyg3sbszv7ib2avaaycvhff5qipgdoepqi57xyd[.]onion

[DeFi Warhol @Defi_Warhol]

📂 Crypto research tools for advanced users
┃
┣ 📂 Wallet intel & forensics
┃ ┣ 📂 @arkham
┃ ┣ 📂 @nansen_ai (Query)
┃ ┣ 📂 @bubblemaps
┃ ┗ 📂 @AppBreadcrumbs
┃
┣ 📂 Onchain analytics
┃ ┣ 📂 @cryptoquant_com
┃ ┣ 📂 @Footprint_Data
┃ ┗ 📂 @SentoraHQ
┃
┣ 📂 L2 & ecosystem data
┃ ┣ 📂 @l2beat
┃ ┣ 📂 @growthepie_eth
┃ ┗ 📂 @BitcoinLayers
┃
┣ 📂 Trading & wallet tracking
┃ ┣ 📂 @tradingview
┃ ┣ 📂 @DeBankDeFi
┃ ┣ 📂 @frontrunpro
┃ ┗ 📂 @CoinMarketCal
┃
┣ 📂 Research & news
┃ ┣ 📂 @Delphi_Digital
┃ ┣ 📂 @BinanceResearch
┃ ┣ 📂 @Cointelegraph
┃ ┗ 📂 @DefiantNews
┃
┗ 📂 AI & attention
┣ 📂 @SharpeLabs
┣ 📂 @getmoni_io
┗ 📂 @alphagate_io