Rolix

Serial flagger
Member of @rhackgondins

[Rolix @Rolix_cy]

Hello there ! I’m really proud to announce that my first tool is now out 🔥

Kubestroyer is a golang tool that take advantage of #Kubernetes clusters misconfigurations to break into it and automate your penetration tests.

You can download it here :
https://t.co/nSaa3jhW4a

[Hippie @hiippiiie]

I made a fun little game: ZeroDay Tycoon 🐛

Start as a broke bug bounty hunter, survive triage and your worst enemy (Duplicate), and build a cybersec empire.

100% free, plays in your browser.

👉 https://t.co/ShNSNPBk3Z
💬 discord : https://t.co/Zo9XzpB9Z1

[Kévin GERVOT (Mizu) @kevin_mizu]

I'm happy that my first article as part of the @SLCyberSec research team is finally out! 😁

It covers an interesting ImageMagick race condition that I found back in June, which, combined with a polyglot payload, allowed me to achieve file read/RCE on Discourse. This should resonate with those who've seen the recent @HacktronAI research.

I hope you'll enjoy it! 👇

[Vulnotes @vulnotes]

Need a starting point for your next report? 📄

Explore report and presentation templates, ready to import and customize in Vulnotes. Add your branding, adapt the content and skip the blank page 👾

Browse the templates 👉 https://t.co/WpIRcPIrmM

[Vulnotes @vulnotes]

Vulnotes Air-Gap Workstation is now available for Linux, Windows & macOS. 🐧🪟🍎

Built for defense, restricted client sites, secure labs and classified networks, where systems cannot connect to the network.

https://t.co/G0pCiU1h3b

[Vulnotes @vulnotes]

It's official: Vulnotes is live 🎉
The platform for your entire pentest engagement
✍️ Visual report editor
🔁 Built-in review workflow
📤 Export to docx, pdf, csv..
🤖 AI: screenshots → findings, translate, rewrite
🔌 API + MCP

👉 https://t.co/1XhBsTSGw0

[Vulnotes @vulnotes]

Our documentation is live 📚

✍️ Writing and managing vulnerabilities
🎨 Designing your own report templates
🤖 Using AI features (and configuring them)
🔐 Administration, SSO, permissions
📤 Integrations, API

Check it out 👉 https://t.co/72JUwHr4rf

[Vulnotes @vulnotes]

AI-assisted reporting shouldn't cost you your clients' trust.

Vulnotes never sends real names, emails, IPs or domains to the model. Just placeholders 🛡️

[Kévin GERVOT (Mizu) @kevin_mizu]

I'm happy to release the first version of my DOMLogger++ plugin for @CaidoIO! 🔎

It improves the browser extension in several ways:
• Persistent, per-project storage
• Temporary session recording
• AI support
• Stack trace reconstitution
• ...

👉 https://t.co/tj72KXjAN9

[Vulnotes @vulnotes]

Turn screenshots info findings in seconds⚡

With Vulnotes, AI can generate a finding directly inside your report from your screenshots. Get help to rewrite, fix grammar, simplify technical wording, or make it more concise.

[Vulnotes @vulnotes]

One of the biggest time-wasters in pentesting? Exporting a report again and again just to check formatting 🐢

With Vulnotes’ real-time preview, you see your vulnerabilities, executive summary and other sections exactly as they’ll look in the final report. No export needed 🚀

[Laluka@OffenSkill @TheLaluka]

Leave some for us 😭😭😭
(Or answer the Claude Advocate form I filled so I can join 🙄😏🫰(thx again @_mudpak 💌))

[Vulnotes @vulnotes]

Creating cybersecurity report templates shouldn’t be painful.

That’s why we built our own template editor, designed from the ground up for security teams. Also thinked for designing your slide deck for client briefings 👌

Easier, faster, smarter. 👾

[Vulnotes @vulnotes]

With just a few clicks, migrate everything from your old pentest reporting solution to Vulnotes 🚀
- Vulnerabilities
- Vulnerability categories
- Companies & clients

[Rolix @Rolix_cy]

@vxunderground @nikhil_mitt @struppigel CARTP pls

[Vulnotes @vulnotes]

Vulnotes was at Grehack! 🎉
For the first time, we presented Vulnotes to the public during the amazing pre-Grehack event organized by Root-Me & Offenskill.

Thank you so much for all your feedback and for the interest you showed in the product! Excited about what's coming next!

[Laluka@OffenSkill @TheLaluka]

Stream is UP !
GOTO( https://t.co/WANxEdDCPc );

[Laluka@OffenSkill @TheLaluka]

Voilà -avec un peu d’avance sur le week-end- le replay de la 200ème, sourcé et chapitré ! 🥰

J’en profite pour tous et toutes vous re-re-remercier.
Que vous ayez été présents en speaker ou en viewer, ça fait vraiment chaud au cœur de voir notre belle commu se développer 💟

https://t.co/UU9tU2svX1

[Laluka@OffenSkill @TheLaluka]

Hoy, c'est CE SOIR à 21H !

Dernier heads-up, mettez votre meilleur rappel / mémo / réveil, ou demandez à votre chat de vous ping !

Au programme : Hack Web / Hack IoT / Devops / Troll / Stories / CLI Tools / AI / Red-Team & Le QUIZZ !

Ah, et des goodies à gagner aussi, bc why not ! 🙃

[Kévin GERVOT (Mizu) @kevin_mizu]

I didn’t manage to get a place for the CCC this year… I’m looking for two. If you’re selling one or know someone who is, please contact me 🙏

[Laluka@OffenSkill @TheLaluka]

LA soirée du 200ème épisode est annoncée ! 👀 RDV ce Mardi 18 à 21h sur (oui comme d'hab en fait..) : 💌 https://t.co/WANxEdEaEK 💌