Thee B

[Beaver @Beaver_0x]

this is getting f*cking dangerous...

REA creator just dropped 20 GitHub repos to build a f*cking reverse engineering studio:

[01] analysis core
> REA: a single MCP that plugs into everything https://t.co/FroR9REhs6
> Ghidra: decompiler, free https://t.co/zpZpjM35ek…
> GhidraMCP: lets your agent drive Ghidra https://t.co/Q0py6LzfRE…
> ida-pro-mcp: hooks your agent into IDA Pro https://t.co/LGNYwjiaJG…

[02] mobile & apps
> jadx: turns Android APKs back into Java https://t.co/ZSmeMtmGoo
> Apktool: take APKs apart and put them back together https://t.co/gsTw4WxTjC…
> Frida: hook into apps while they run https://t.co/HodqBm2s8u
> ILSpy: decompiles .NET https://t.co/7dgZqSuCh0…

[03] binary & low-level
> radare2: RE framework that lives in your terminal https://t.co/WXHqHizq0P…
> x64dbg: debugger for Windows https://t.co/pq1Kjo4tZD
> ImHex: hex editor with its own pattern language https://t.co/uCOgLoceff
> angr: symbolic execution engine https://t.co/O8T99j4NPd

[04] network & runtime
> mitmproxy: sits in the middle and reads the traffic https://t.co/GNQWddsarF…
> dnSpy: debug and edit .NET apps https://t.co/xtpzpKA6PG
> rizin: the radare2 fork https://t.co/MOAXdxbf5h
> raddebugger: the debugger from Epic Games https://t.co/sEUHVD9Ojd…

[05] rebuild & verify
> awesome-ai-reverse-engineering: 122 repos, every one graded https://t.co/BtDM8f2EOL…
> awesome-reverse-engineering: curated by the guy who made REA https://t.co/5Wg8n96ZgR…
> REA workflows: ready-made investigation prompts, ship with REA
> clean-room loop: SPEC.md, oracles and checks until it matches

how it runs: binary -> REA -> SPEC.md -> rebuild -> oracle -> retry

save this, point it at any app and watch it explain itself.

[𝐤𝐣𝐮𝐥𝐢𝐮𝐬 @ethical_h4ck3r_]

SSTI - Server-Side Template Injection Scanner. 🔥

How to find SSTI vulnerabilities faster. 🔥

Tool: https://t.co/Lm2pMapeBX…

Command: python https://t.co/beXrSeWdH9 -u https://target[.]com/page?name=test

#bugbountytips #bugbountytip #bugbounty

[Leonard Rodman @RodmanAi]

5 GITHUB REPOS THAT ARE QUIETLY CHANGING HOW WE BUILD SOFTWARE

1. LiteLLM
One interface for hundreds of LLM providers.
→ https://t.co/qqrWBOoNwh

2. OpenTofu
Open-source infrastructure-as-code for managing cloud infrastructure.
→ https://t.co/hpwXlrdqTs

3. uv
An extremely fast Python package and project manager.
→ https://t.co/HpmbBP65BG

4. SearXNG
A privacy-focused metasearch engine for research and AI workflows.
→ https://t.co/0OxhDKI9uQ

5. Continue
Open-source AI coding platform for custom models and workflows.
→ https://t.co/lzS2255iSJ

Bookmark this.

[David das Neves @david_das_neves]

BloodHound — but for your AI-agent infrastructure.

AgentHound maps attack paths across MCP, A2A, gateways & AI services: recon, credential looting, model exfiltration. See your agents the way an attacker does. Nice work by adithyan-ak.

https://t.co/BQCyNvBDpJ

#AISecurity

[Thee B @KBZ2022]

@XBOX Hopefully you consider egypt as regional store for xbox store.

[Elon Musk @elonmusk]

Highly recommend this book!

[BDS Egypt @BdsEgypt]

منصة Monday بتساهم في مشاريع لإعادة إسكان المستوطنين داخل أراضينا المحتلة، غير إنهم بيفتخروا بتجنيد 7% من عمال شركتهم في جيش الاحتلال أثناء الحرب الحالية على فلسطين. لو شركتك بتستخدم منصة Monday، وفر لهم بديل ومتتورطش في دعم الاحتلال.

[urlscan.io @urlscanio]

You might know us because we analyse millions of suspicious URLs every day and generate detections for more than a thousand major online brands. But did you know that we also track millions of newly created hostnames and domains as part of our urlscan Pro platform?

[TheSecMaster @TheSecMaster1]

👑 Deepfake Clone Yourself with AI - Chat with Your Digital Twin 👁‍🗨

🟥 Link : https://t.co/mSuVwISwE4

Give 150+ Reactions for more Such Content ✔️

[freeCodeCamp.org @freeCodeCamp]

There are lots of ways to incorporate AI tools into your web apps.

In this course, you'll use ChatGPT, DALL-E, and GPT-4 (+ HTML, CSS, and JS) to build some fun projects.

You'll also learn how to use Firebase, Netlify, and some other popular tools.

https://t.co/JhOHu63z9S

[blackorbird @blackorbird]

GPTs for Cybersecurity Collection
https://t.co/BX45Csb89S

[Atal @ZabihullahAtal]

CISM Free Resources!
CISM (Certified Information Security Manager) is the gold standard in information security management and is globally recognized for excellence.

Disvoer the following:
1️⃣ Information Security Governance 🚀
2️⃣ Risk Management 💡
3️⃣ Information Security Program 🌟
4️⃣ InfoSec Program Implementation 🔑
5️⃣ InfoSec Program Management 📈
6️⃣ Incident Management and Response 🚨

Google Drive folder:
https://t.co/zyYQiOAoQa

Youtube Links:
1.
https://t.co/6ukQNAH32y

2.
https://t.co/en7wzUgGvq
3.
https://t.co/LJOaRZHUqq

Follow @ZabihullahAtal for Free Tech Knowledge, Updates, Insights, and Career Growth.

#CISM #CISMFreeResources #InfoSec #FreeLearning

[Shalini Tewari @maybeshalinii]

Javascript Notes and Cheatsheets [Handmade]🔥

[Daily OSINT @DailyOsint]

If you want to scan URLs for endpoints and secrets,

The cariddi #tool offers various options to handle it.

https://t.co/vnpF88mLtu

@edoardottt2

#OSINT #ThreatIntel #BlueTeam #infosec #investigation #intelligence #reconnaissance

[Clint Gibler @clintgibler]

���️ Noir

Attack surface detector from source code

* Automatically identify language & frameworks used
* Extract endpoints (URL/Method/Params) & web pages from source code
* Integrates w/ @Burp_Suite, @zaproxy, @CaidoIO

By @hahwul #bugbountytips

https://t.co/VDPHPAsPTq

[Dark Web Intelligence @DailyDarkWeb]

Global Threat Intelligence Report - by @BlackBerry

Actionable and Contextualized Intelligence to Increase Your Cyber Resilience

https://t.co/HPL0nVvh7p

#cybersecurity #threatintelligence

[Mohammed Junaid @mdjunaidap]

Practice Coding Here:

1. CodeForces
https://t.co/2Jj10qbyV8

2. Hackerrank
https://t.co/rnnwGGRd43

3. Leetcode
https://t.co/C3L4cOknXn

4. CodeChef
https://t.co/8azet6LH6J

5. CoderByte
https://t.co/brYQYhhPtl

6. HackerEarth
https://t.co/BhVCwxYSW4

7. Codewars
https://t.co/gkJ9CKdxEh

[Daily OSINT @DailyOsint]

If you want to research a domain passively,

Try pdlist, a minimalist passive subdomain finder.

https://t.co/oXtfTTyVqZ

@GNebbia

#OSINT #CTI #cli #infosec #investigation #intelligence #cybersecurity #reconnaissance

[Pratham @Prathkum]

15 AI websites that can help you find a remote job:

[s4thv1k @s4thv1k]

Started Preparing for OSCP.

In this thread I'll be sharing the resources and Rooms/Boxes that I solved.(before buying voucher)
#oscp #CyberSecurity #infosec