Pak Cyberbot

(T³) Technical Thinking Tinkerer

[Pak Cyberbot @PakCyberbot]

Won a 𝗳𝗿𝗲𝗲 𝗢𝗦𝗖𝗣 + PEN-200 bundle from @offsectraining by winning 𝟭𝘀𝘁 place in their 𝗥𝗲𝗽𝗼𝗿𝘁 𝗪𝗿𝗶𝘁𝗶𝗻𝗴 𝗖𝗼𝗻𝘁𝗲𝘀𝘁 — Alhamdulillah, passed #OSCP with 𝟭𝟬𝟬/𝟭𝟬𝟬 on my first attempt!

Check out: https://t.co/Ftvd5SAUXa

[Pak Cyberbot @PakCyberbot]

@brutecat Awesome work💪

[shubs @infosec_au]

https://t.co/rLl6ZzmuvY

[Pak Cyberbot @PakCyberbot]

📌 The PoC video will be available on my YouTube channel:
https://t.co/gWc9URcA7q

📌 A complete technical breakdown will be published on my Medium:
https://t.co/ogLfQkS8ps

My Meta Profile: https://t.co/2ALUqM91Zs
[2/2]

#Meta #BugBounty #WEB #Pentesting

[Pak Cyberbot @PakCyberbot]

Alhamdulillah, I’m excited to share that I’ve received my first bug bounty from Meta 🎉
I identified a Denial of Service (DoS) vulnerability in one of Meta’s web assets. It’s currently in the process of being fixed, and once resolved, I’ll be publishing a detailed write-up. [1/2]

[XBOW @Xbow]

“The vulnerability with the highest CVSS score in this month’s update is a critical remote code execution flaw in the Microsoft Devices Pricing Program. CVE-2026-21536 (CVSS score: 9.8), per Microsoft, has been fully mitigated [...] Artificial intelligence (AI)-powered autonomous vulnerability discovery platform XBOW has been credited with discovering and reporting the issue.” https://t.co/w9hhiuot2R

[Nav Toor @heynavtoor]

🚨 Someone just open sourced a fully autonomous AI hacker and it's terrifying.

It's called Shannon.

Point it at your web app, and it doesn't just scan for vulnerabilities. It actually exploits them. Real injections. Real auth bypasses. Real database exfiltrations.

Not alerts. Not warnings. Actual working exploits with copy-paste proof-of-concepts.

Here's what this thing does autonomously:

→ Reads your entire source code to plan its attack
→ Maps every endpoint, API route, and auth mechanism
→ Runs Nmap, Subfinder, and WhatWeb for deep recon
→ Hunts for Injection, XSS, SSRF, and broken auth in parallel
→ Launches real browser-based exploits to prove each vulnerability
→ Generates a pentester-grade report with reproducible PoCs

Here's the wildest part:

It follows a strict "No Exploit, No Report" policy. If it can't actually break it, it doesn't report it. Zero false positives.

It pointed at OWASP Juice Shop and found 20+ critical vulnerabilities in a single run including complete auth bypass and full database exfiltration.

On the XBOW Benchmark (hint-free, source-aware), it scored 96.15%.

Your team ships code daily with Claude Code and Cursor. Your pentest happens once a year. That's 364 days of shipping blind.

Shannon closes that gap. One command. Fully autonomous.

The Red Team to your vibe-coding Blue team. Every Claude coder deserves their Shannon.

10.6K GitHub stars. 1.3K forks. Already trending.

100% Open Source. AGPL-3.0 License.

[Summer Yue @summeryue0]

Nothing humbles you like telling your OpenClaw “confirm before acting” and watching it speedrun deleting your inbox. I couldn’t stop it from my phone. I had to RUN to my Mac mini like I was defusing a bomb.

[Hack The Box @hackthebox_eu]

Nothing to see here... 🫣
Here are the pieces of content coming to the #HackTheBox platforms this week!
🔵 JustSomePages, a Sherlock created by iamr007
🔴 Interpreter, an HTB Season 10 Machine, created by ReziT
🔴 PyDome, a Challenge created by pakcyberbot

Find them on #HTB Labs and Enterprise Platform:
https://t.co/pEyBbbOi9u

#Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills

[Pak Cyberbot @PakCyberbot]

My new challenge, "PyDome", has been released on Hack The Box ( @hackthebox_eu ).
Give it a try and let me know your thoughts!

https://t.co/WO7C8Fi32T

Feedback or constructive criticism is greatly appreciated.

#hackthebox #challenge #pydome #pakcyberbot

[Tom Dörr @tom_doerr]

Humanoid robot with open-source hardware and software

https://t.co/OUmjQH4Ush

[Google VRP (Google Bug Hunters) @GoogleVRP]

Want to see what elite security research looks like? 🌟 @omer_asfu, one of Google Cloud VRP's best, dropped a cross-tenant finding: CVE-2025-13292 (https://t.co/79YhC1kJst)

[Pak Cyberbot @PakCyberbot]

@mehdi_badami @cyb_detective Thanks

[Pak Cyberbot @PakCyberbot]

That's called dedication

[ₕₐₘₚₜₒₙ @hamptonism]

This is who you’re competing against,

Chinese fruit seller and chip designer.

Yea, you’re cooked:

[liad eliyahu @liadeliyahu]

🚨 We turned Google Gemini into a double agent.

By sending a single, "silent" calendar invite, we hijacked Gemini’s calendar capabilities to exfiltrate private data—with zero lines of code in the exploitation.

The AI didn't just leak info; it actively worked for us. 🧵👇

[Pak Cyberbot @PakCyberbot]

🚀 𝗙𝗶𝗿𝘀𝘁 𝗖𝗩𝗘 𝗨𝗻𝗱𝗲𝗿 𝗠𝘆 𝗡𝗮𝗺𝗲 — 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟮𝟭𝟲𝟰𝟬

@ReviveAdserver

🔗 https://t.co/aKX7mftZHy
🔗 https://t.co/ry0oWBkEvI

#CVE #vulnerability #nist #nvd #hacking #cybersecurity

[Google VRP (Google Bug Hunters) @GoogleVRP]

Want to see what top-notch security research looks like?

Look no further than @j_domeracki's latest research, a standout contributor to the Google Cloud VRP! 🪲💪

https://t.co/lEsYWZuQMf

[Pak Cyberbot @PakCyberbot]

@Arden_2210 48

n^2 - 1

Multiply the number by it's number example 4x4 = 16 and then - 1

[Pak Cyberbot @PakCyberbot]

@yeswehack Yes, I learned Ruby syntax and libraries for that.

[Pak Cyberbot @PakCyberbot]

🔓 Just beat the "Dojo #48 - RubitMQ" challenge on @YesWeHack!
Think you can match my skills? 🌟
https://t.co/mMi30t2P7A
#YesWeHack #ChallengeAccepted