192.168.0.2

Security analyst || eMAPT | eJPT | PMPA | eWPTXv2 |

[192.168.0.2 @KishorSec]

@AndrewBolis FREE

[192.168.0.2 @KishorSec]

@NadzuAI AI

[Abdulkadir | Cybersec @cyber__razz]

How To Find Anyone Online Using OSINT

[Mololuwa | Cybersecurity - (The God Complex) @cyber_rekk]

Change your IP every 10 secs automatically

[Tom Dörr @tom_doerr]

Intercepts mobile HTTPS traffic with desktop MITM proxy

https://t.co/uVDYQYhbyB

[Tom Dörr @tom_doerr]

Simulates LLM attacks locally with 50+ vulnerabilities

https://t.co/hZRjOLxyOq

[Tim Jayas @TimJayas]

GitHub Repo: https://t.co/8xhQF4jfP4

Hit the notifications on for useful AI tools.

[Khairallah AL-Awady @eng_khairallah1]

In 14 minutes, this Anthropic engineer who wrote "Building Effective Agents" will

teach you more about making your AI Agents actually work together than everything you've scrolled past this year.

Watch it and Bookmark it now.

[Ronin @DeRonin_]

You can literally search for claude_desktop_config on GitHub and find hundreds of exposed Anthropic API keys

Thanks vibe coders ❤️

[Evan Luthra @EvanLuthra]

Anthropic pays engineers $750,000+ a year to understand how LLMs work.

Stanford just put a 2 hour lecture that covers 80% of it for FREE.

Bookmark this. Give it 2 hours today.

It might be the highest ROI thing you do this month:

[192.168.0.2 @KishorSec]

@AndrewBolis YT

[192.168.0.2 @KishorSec]

@AndrewBolis Yt

[obscaries ❘ AppSec @obscaries]

🚨 If you're hunting GraphQL bugs, this repo is a goldmine

👉 “awesome-graphql-security” is a curated list of tools, techniques & real-world resources for both attackers and defenders

From recon → exploitation → learning paths… it’s all here

💣 Perfect for bug bounty hunters

🔗 https://t.co/9ThzitmPkz

👇 Start exploring before others do

[Het Mehta @hetmehtaa]

Practical Thick Client Pentesting Checklist

1. Dump process memory; grep for creds, tokens, or sensitive data
2. Check clipboard after key app actions for leaked info
3. Extract SQLite/LevelDB/custom DBs; look for cached secrets
4. Review update/installer configs for dev or backup endpoints
5. Find leftover backup, temp, or crash dump files
6. Enumerate & fuzz IPC (pipes, COM, shared memory)
7. Tweak INI/XML/registry configs to unlock features or escalate
8. Feed malformed/oversized inputs to parsers; hunt for crashes or leaks
9. Spoof update servers via hosts/DNS poisoning
10. Replay or alter trial/license activations; change MAC/time to reset
11. Hook WinAPI/libs; log sensitive calls or bypass controls
12. Attempt DLL hijacking via crafted DLLs in search paths

And it goes on and on!

[Elorm Daniel @elormkdaniel]

FREE for ALL:

AWS: https://t.co/bIjMJbDpiN

CISSP: https://t.co/qdCYtHeKEc

CISA: https://t.co/ZX6F6yFXIW

CISM: https://t.co/ESCBVa9hzp

CRISC: https://t.co/y7FKe4pyNB

CCDA: https://t.co/Bc9TDvwIWR

Digital Marketing: https://t.co/cga6ivgpbV

Getting-Started-Becoming-a-Master-Hacker. PDF+VIDEO: https://t.co/TNFOBuOsI9

cc: TheMsterDoctor1

[obscaries ❘ AppSec @obscaries]

Fu-JS 🔎 — a powerful recon tool that crawls JavaScript across subdomains, uncovers hidden endpoints, extracts secrets, builds target-specific wordlists, and recursively expands attack surface from JS files.

Perfect for bug bounty hunters focused on client-side recon & endpoint discovery.

Source: https://t.co/9kOSm2XZQy

#BugBounty #Recon #AppSec #WebSecurity #JavaScript

[192.168.0.2 @KishorSec]

KishorBal/deep-C: Android deeplink misconfiguration detector and exploitation tool- An additional Web Interface have been added.
https://t.co/5HGVk9tR0b

#CyberSecurity #EthicalHacking #Pentesting

[chiefofautism @chiefofautism]

someone built an entire AI RED TEAM - multiple agents that coordinate HACKING ATTACKS together, ZERO human input

PentAGI, open source, one agent does recon, another scans, another exploits, another writes the report. they talk to each other and adapt based on what they find

it ships as one docker container with nmap, metasploit, sqlmap, hydra preinstalled. the AI decides which tool to use and when. you point it at a target and walk away

a red team engagement costs $30-50k and takes weeks. this is one docker command and API tokens

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Autonomous Multi-Agent Based Red Team Testing Service, AI hacker.

- https://t.co/fyNmTIiwe4

#infosec #cybersec #bugbountytips

[192.168.0.2 @KishorSec]

Finding deepLinks exploits on real world applications using :

https://t.co/yDjy2ju4AJ

#mobilehacking #android #bugbounty #pentest