Panha

[Thomas Roccia 🤘 @fr0gger_]

👇👇👇

Cairn: https://t.co/A944bxggpa
CyberStrike: https://t.co/NMpLwnnOHD
PentAGI: https://t.co/7UlKaDarHM
CyberStrikeAI: https://t.co/MR3dbULak2
PentestGPT: https://t.co/7zqkm3yFj3
PentestAgent: https://t.co/Ri5SF2Te2S
AutoPentester: https://t.co/5yp3b3i4xP
VulnBot: https://t.co/JbdW0EHDt4
RedAmon: https://t.co/JhW5yqVfvT
MAPTA: https://t.co/dmljK1MiRy
Strix: https://t.co/2WOqtOKSnR
Shannon: https://t.co/nYMw152xL2
BugTraceAI: https://t.co/0vvhOVVden
Nebula: https://t.co/yZg0VTEMCF
hackingBuddyGPT: https://t.co/9077GXSsOV
HexStrike AI: https://t.co/AnMsWQTv6E
CAI, now archived: https://t.co/MZmr5rL4OT

[Mir Sadat Bin Rakib @msbr_dev]

12 months of LinkedIn Premium for $0. ☠️

If you’re 35 or under, ASEAN Ahead is giving free Premium access after you complete their course.

1. Register
2. Finish the modules
3. Wait for the activation email
4. Get 1 year of Premium

Go & Grab it ASAP!👇🏻
https://t.co/VviJx21LoC

[Swissky @pentest_swissky]

Local AI for Penetration Testing & Research - Eddie Zhang
https://t.co/HOaga26Hw3

[OrcaRouter 🐳 @OrcaRouter]

GLM-5.3-Flash. Uncensored. NVFP4. 🐳
We just dropped GLM-5.3-Flash-Uncensored-NVFP4.

→ 320B parameters / 18B active
→ Uncensored weights
→ Native NVFP4 for NVIDIA GPUs
→ Smaller footprint. Faster inference.
→ No LoRA. No jailbreak prompt.

Built to run. More formats coming.
Have fun. 🐳

API: https://t.co/Hm9DiY3wAo
Huggingface: https://t.co/xg6Sr1t2ot

[Md Ismail Šojal 🕷️ @0x0SojalSec]

New Uncensored Qwen3.8-Flash-Next you can run locally in RAM for Red-teaming on 16GB-card, 🔥

- Almost Zero refusal
- 125B total / 6B active +51B n-gram table
- vision, tools, reasoning
- 262K context
- capability mostly intact
- same Gated DeltaNet + Qwen Sparse Attention

- https://t.co/Nab1MbF7HW

[iPsalmy👻🥷🏽 @Dghost_Ninja]

I got tired of juggling tools for Android testing, so I built Barrel.

A cross-platform Android research workbench with logcat, shell, Frida, file explorer, screen mirroring, network inspection and more.

Core tools are free. More coming....

🔥Live now: https://t.co/dbYQLXlwUc

[JS0N Haddix @Jhaddix]

Next hacker summer camp giveaway!

3 seats to our “The Bug Hunters Methodology” course!

Like and share to be entered!

https://t.co/9QffdliW7l

[Coffin @lostsec_]

Finally, the wait is over! 🔥

I know a lot of beginners have been waiting for this because there hasn’t been a single complete guide showing how to set up Claude Code for bug bounty hunting and using the DeepSeek API at a very affordable cost.

In this video, I’ll walk you through the entire setup step by step, and you’ll also see how powerful DeepSeek V4 Flash is for real-world bug hunting tasks.

Trust me, the results will surprise you.

🎥 Watch now and level up your bug hunting workflow.
https://t.co/tOnpkzGKq0

[Coffin @lostsec_]

https://t.co/tOnpkzGKq0
The response on my latest video has been absolutely insane ☠️

So here's the deal... I'm about to give you something even crazier.

I'll show you how to use DeepSeek V4 Flash, DeepSeek V4 Pro and many other popular AI models completely FREE, with zero payment required.

All I ask is one thing:
👉 Get my latest video to 1,000 likes.

Once we hit it, I'll drop the next video, and trust me... it's going to level up your bug hunting for sure..

[Gabson @gabson0x]

Just dropped bountyforge v3 Ai zero day skills ⚡️

https://t.co/dwwzsyxOqW

[BuBBliK @k1rallik]

Vercel breach: a step-by-step response guide

rotate secrets:
> go to Vercel dashboard → Environment Variables
> rotate every token, key, DB credential
> especially NPM + GitHub tokens

check if your Google Workspace was hit too:
> https://t.co/8BB083U5Dv → Security → Access and Data Control → API Controls → Manage app access → Accessed Apps
> filter by: `https://t.co/LS1x9shKkF`
> if the app shows up... you're in the blast radius
> revoke access immediately

long-term fixes:
> migrate ALL env vars to Sensitive Variables
> use dynamic secrets (short-lived DB creds)
> pull secrets at runtime via SDK - not stored in Vercel
> set up audit logs
> use `vercel activity` in CLI to check your logs programmatically

this wasn't just Vercel. a compromised third-party AI tool's OAuth app potentially hit hundreds of orgs

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Claude Code with agent, autonomously hacked Subway Surfers, and printed millions of coins.

A rooted Android phone... and it turned Subway Surfers into a money printer.

From 4 coins to 2,000,000+ coins in two runs. autonomous loop, analyzed, and pwned a Unity game in one session, intercepts traffic, bypasses SSL pinning, and even reverse-engineers offline games.

The full Setup: Rooted emulator via rootAVD + Magisk + AlwaysTrustUserCerts.

Toolchain: UI Automator, mitmproxy traffic capture, Frida bypass scripts, APK static analysis.

The agent loops by itself:
- Dump screen & UI elements
- Tap/swipe via ADB
- Analyze traffic or binary
- Decide next move without a human.

It played the game, reverse-engineered the Unity IL2CPP binary, hooked Frida on SafeInt anti-cheat, and silently multiplied currency.

Subway Surfers (com.kiloo.subwaysurf) Almost zero network traffic to agent pivots.
Detects Unity IL2CPP parses global-metadata.dat
Finds WalletModel, RunSessionData, AddCoins, and SetCurrencySilently.

Then hooks with Frida and multiplies rewards ×100+.
Result: 4 coins to over 2 million.
SafeInt anti-cheat? Bypassed Stealth mode

This is the future of mobile pentesting?

credit via: @skshadan_

- https://t.co/TtQX9szWjH

[CloudBreach @Cloud_Breach]

🐣 EASTER GIVEAWAY 🎁
Forget the chocolate, we’re hunting vulnerabilities! 🐰

We’re giving 3 winners free access to their choice of:
☁️ Breaching Azure (OASP)
🌩️ Breaching Azure Advanced (OASE)
☁️ Breaching AWS (OAWSP)

To Enter:
1️⃣ Like
2️⃣ Retweet
3️⃣ Comment

📅 Ends: 13 April 2026

Train like an attacker. Stop the breach. 👉 https://t.co/BgRrolAJMI

#CloudSecurity #EasterGiveaway #InfoSec #Azure #AWS #RedTeam #CyberSecurity #Hacking #Giveaway #BlueTeam #RedTeam

[Oliver @oliviscusAI]

This tool can download literally anything from link 🤯

100% free. open source. no ads.

[Het Mehta @hetmehtaa]

LLMs for vulnerability research by @0xAsm0d3us

https://t.co/GLaabD7Ahi

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Pre-built Jailbroken iOS 26 iPhone fully runs on VM✨

Full virtual iPhone ready-to-run jailbroken iPhone (rootless + Sileo + Filza + TrollStore vibes).

Just download, Test tweaks, exploit PoCs, and debug without touching your daily driver.😗

16 GB+ RAM recommended

[OSINT Combine @osintcombine]

Not a new tool, but a handy one — Imginn (https://t.co/TPYrzY8Jkx) lets you view Instagram accounts and stories without logging in.