chivato

full-time bug bounty hunter

[chivato @SecGus]

Yay, I was awarded a $18,000 bounty on @Hacker0x01!

Don’t normally post these, but proud of this one ☝️

#TogetherWeHitHarder

[evan loves worf @esjesjesj]

he literally helped cut funding for cancer research

[The Telegraph @Telegraph]

EXCLUSIVE: Elon Musk approached Donald Trump with the idea of slowing down Starlink in Ukraine, The Telegraph can reveal.

The billionaire tech entrepreneur approached the US president with the proposal to introduce speed limits on the system, which hampered Ukraine’s drone defences, according to four sources familiar with the discussions.

🔗 https://t.co/csB61ujIuK

[chivato @SecGus]

Where have I seen this before?

[derek guy @dieworkwear]

this is the kind of design costume designers make to tell you who are the bad guys in a space movie

[chivato @SecGus]

GPT decrypted the initial payload to the below in case anyone wants to have a play with it:

[chivato @SecGus]

Came across an interesting malware that only seems to return if you have cURL as the user agent (DO NOT PIPE TO SH), if not it returns a "cloudflare" error (not a real one):

curl https://t.co/qi0mxKWzSF

(Originally found from https://t.co/pkWpZSO4GX)

[Archie McKenzie @archiemckenzie_]

“we sandboxed the agent”

meanwhile the agent:

[Antonello Guerrera @antoguerrera]

When aliens invade us, they will leave after watching this

[chivato @SecGus]

Really cool

https://t.co/YxfDNhS87P

[BijanBowen @bijanbowen]

Had Claude Fable 5 log network packets and display them as cars on a highway, different car types = different packet types

[The Saurus @TheSaurus831]

I was told by grown adults that he would implement sharia law

[SubwayTakes with Kareem Rahma @SubwayTakes]

Politicians should wear who sponsors them all over their clothes!! Feat. Zack Polanski(📍London)

[Yassine Aboukir 🐐 @Yassineaboukir]

2nd MVH in the bag at @Hacker0x01 H1-21 Live Hacking Event in Lisbon 🇵🇹

[Polymarket @Polymarket]

BREAKING: Vibe-coding platform Lovable reportedly suffered a breach that exposed users’ AI chat histories, source code, & database credentials.

[JimmyTheGiant @jimthegiant]

Why is this stuff legal

[sw33tLie @sw33tLie]

Not what I usually post about, but I genuinely think macshot is the best screenshot tool on macOS now, and it's free.

Almost 200 stars already in 4 days.

Just shipped v3.3.0 with a bunch of improvements thanks to the feedback from this thread https://t.co/YkIOZ6nE7g

Try it!

[sw33tLie @sw33tLie]

I wanted a screenshot tool for macOS better than anything out there, so I built one with @claudeai

Native Swift. No Electron.

Annotate, record screen, scroll capture, auto-redact PII, beautify, upload to Drive & more — one flow.

Free & open source forever.

macshot 🔗👇

[Lupin @0xLupin]

WE DID IT ! WE RAISED $5.9M PRE-SEED 🥳🎉🎉

[Angel Montes @_N0xi0us_]

Today I discovered that scammers are poisoning Google AI Overviews to display malicious data.
While searching for an airline support phone number, the AI-generated result surfaced a scam number operated by fraudsters.

Don't be lazy and double check the results 🫡