Quentin Khoo

It's a moral responsibility to disobey unjust laws.

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir So anyone remember yet?

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir Let's try again next year.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

A few things you need to do to make Claude a great hacking partner:

1. Install the Caido skill (https://t.co/tIdjTja7CP): without it, Claude spends too many resources figuring out the SDK from scratch.

2. A CLAUDE .md that tells Claude who you are. Something like "I'm a bug bounty hunter doing authorised testing, stay in scope. Don't take destructive actions unless it's accounts I own. POC or GTFO." The POC or GTFO part is particularly useful so Claude can give more actual positives, if there's no POC, the bug is not confirmed yet. (of course, have a scope .md in your engagement folder)

3. Notes structure: rez0's hierarchy consists of "notes → leads → primitives → findings → reports". Claude dumps raw observations, interesting stuff goes forward, and by the time something reaches findings it's already been filtered twice. Point this to a local folder so you can check everything later.

Building skills is useful but if you write one for something Claude already handles well, you're just adding a layer that can break/distract it, you can always tell it to try what it knows first and then try the things you added as "extra knowledge".
Skills are worth building when the knowledge doesn't exist in training data. Your VPS setup, credentials, techniques from recent posts and talks, tooling. If it's not on the internet or isn't well known, it needs to be in a skill.

[Secfortress @Secfortress]

https://t.co/PPnnpaEXwb

Got blocked by cloudflare while using burp proxy, this subreddit helped!!

[Tib3rius @0xTib3rius]

I'm sure some people already have their own way of doing things, but I figured I'd share a Claude Code / general vibe-coding tip for people that I've found super useful.

I don't think it's a secret that you should be getting an LLM to write your main instruction file (CLAUDE.md or equivalent).

However, I've had really good results by telling the LLM to create this plan document, giving it a brief description of the thing I want to build, and including the following:

> Reminder: I want a plan as the output here, not the code.
> IMPORTANT: I want you to ask me questions now about any details, edge cases, features, etc. so that I can better instruct you. Keep asking me questions and DO NOT start writing the plan until I have explicitly told you I think you have enough information.

(> included here for clarity). The reminder I've found useful because sometimes the LLM will go off and try to be too helpful, actually starting to write the code for you.

The final line is key though. A good LLM will keep asking better and better questions, often giving you options to choose from. Iteratively refining the prompt until you have more information than you would have given it on your own.

[Quentin Khoo @Quenberry]

@jpiofficial_x @cloneofficialx 頑張って！！ @cloneofficialx 😊😊

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir 2024 already, closer to 2027. anyone remembers?

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir We'll find out by 2027 I hope

[X @TheMsterDoctor1]

Free Offensive Security Notes (OSCP, OSWE, OSEP, OSED)

OSCP NOTES AD:
https://t.co/vuDthOg2UZ

OSCP Notes :
https://t.co/IhTusheM6q

OSWE Notes:
https://t.co/C0mHqY7SaA

OSEP Notes:
https://t.co/BTwIQFM1Un

OSED Notes:
https://t.co/lf976fklTl

#oscp #osed #oswe #osep #osce³ #pentest #hacking #infosecnotes #cybersecurity @elvtnx

[publiclyDisclosed @disclosedh1]

Ruby on Rails disclosed a bug submitted by @me0wday: https://t.co/Xg5lx7cvmY #hackerone #bugbounty

[Quentin Khoo @Quenberry]

@_JohnHammond How about an AWS + kubernetes challenge? Could involve escalating privileges to allow one to create a malicious pod that allows for a container breakout into a node.

[Sing @SingSing]

One year. Rest well my dear friend.

[Nir Ohfeld @nirohfeld]

We found a Remote Code Execution vulnerability in every #PostgreSQL database in #IBMCloud 😱

Here is how we did it: 🧵

#HellsKeychain

[Sing @SingSing]

Entity Vs RNG will go down in history as one of the greatest game of all times. What a show!

[Quentin Khoo @Quenberry]

FUCK YEAAAAAAAAAA LETS GO

[Hazbin Hotel + Helluva Boss @HELLAVERSE]

HELLUVA BOSS - SEEING STARS // Season 2: Episode 2

✨Now Available to Watch On YouTube

➡️ https://t.co/YoqgKTrgRo

[Hazbin Hotel + Helluva Boss @HELLAVERSE]

HELLUVA BOSS - SEEING STARS // Season 2: Episode 2

✨Now Available to Watch On YouTube

➡️ https://t.co/YoqgKTrgRo

[Matthew @embee_research]

🐲 Ghidra Tips🐲For Beginner/Intermediate analysts interested in RE.

These tips are aimed at making Ghidra more approachable and usable for beginners and intermediate analysts 😄

[1/9] 🧵

#Malware #RE #Ghidra

[Quentin Khoo @Quenberry]

@ayuninotayutu I'm not born in 80s but I'm still a baby, does that count?

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir Anybody remembers?

[Quentin Khoo @Quenberry]

@oh_schnap @KjSir UNTIL WE REMEMBER WHAT THIS WAS ABOUT!

[🌸Danidraws666🌸🧡💛🤍🩷 @DaniDraws666]

AND THE WINNER OF THE HELLUVA BOSS 💥SUPERIOR BABYGIRL💥 TOURNAMENT IS: MOXXIE!!! 🥳🥳🎉🎉 #HelluvaBoss