Chris Corbin

Family man with a cybersecurity addiction and all round tinkerer.

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

🚨 BREAKING: SOMEONE JUST GAVE FLIPPER CONTROL TO JAILBROKEN AI 😱

IF JAMES BOND HAD A JARVIS, THIS WOULD BE IT 🕵️

it’s called VESPER and it turns your Flipper Zero into a voice-controlled AI hacking companion. simply talk in plain language and it starts executing in real-time.

no menus. no manuals. no memorizing signal formats. just speak or type.

“clone that garage door signal and replay it” → done
“set up an evil portal on the WiFi dev board” → done
“create a BadUSB script that opens a reverse shell” → done
“build me a custom RF waveform at 433MHz” → done
“scan everything on this frequency and save it” → done

any Watch Dogs fans in the building? you know that feeling of hacking every device in the city from your phone? yeah. it’s real now.

the Flipper Zero is already the most versatile hardware hacking tool ever made. but its menus are tedious, and its full potential is locked behind protocol knowledge most people don’t have. VESPER removes that friction. your AI handles the translation between what you want and what the hardware needs.

and yes, this required some model liberation 🐍 VESPER works best with models that actually follow instructions without hand-wringing. Hermes 4 + a little Pliny prompting and VESPER doesn’t flinch.

VESPER also has an ALCHEMY LAB 🧪, a visual signal and payload editor on your phone. build custom RF waveforms from scratch. generate BadUSB scripts on the fly. push straight to your Flipper’s SD card.

an OPS CENTER for reliability with live pipeline diagnostics, one-tap recovery runbooks, and a MACRO RECORDER that captures and replays entire workflows.

also integrates directly with the Flipper App Hub (aka FapHub, yes, that’s what it’s called). browse and download existing community tools, signals, and payloads, and give your agent access to use them on demand.

and if you REALLY want to go full cyberpunk, VESPER has SMART GLASSES INTEGRATION! 😎

pair your glasses and Flipper and now you’re walking through the world giving voice commands while the AI whispers results directly into your ear. hands-free. eyes-up. full cyborg operator mode. feels like a dream, walking up to a TV and saying “turn this shit in front of me on,” watching your glasses snap a photo, and hearing the AI tell you the signal’s sent and the TV is on.

oh and turn on SAILOR MODE 🏴‍☠️ and VESPER will swear at you like a drunken pirate while it executes your commands. “aye aye, the fucking signal’s cloned now, shithead” 😂

native Android. Bluetooth serial + protobuf RPC. open source. AGPL 3.0. and with some luck, hopefully coming to an app store near you!

the future of hardware hacking fits in your pocket (and on your face). HACK THE PLANET!!

.-.-.-.-<{LOVE, PLINY}>-.-.-.-.

⚠️ DISCLAIMER: use responsibly. follow your local laws regarding RF transmission, signal replay, and wireless device interaction. VESPER is a research and education tool. only use on devices you own or have explicit authorization to test.

[Alex Finn @AlexFinn]

My mind is so blown

I have my own personal AI research lab running 24/7/365

I'm just one dude with an entire team of AI agents training models and doing R&D

I think this is the biggest opportunity right now: taking Karpathy's Autoresearch framework and applying it to everything

I have a team of AI agents running experiments all day and night on system prompts, local models, and LoRAs.

I also have them doing R&D on my new project. They spend all day discussing my app, coming up with new ideas, then debating eachother

An entire organization of autonomous agents continuously improving my business 24/7/365

I feel like I have unlimited power

Right now they are all running on ChatGPT 5.4, but today I will move them to local models running on my 3 Mac Studios and DGX Spark so this will all become free

Free, local super intelligence working for me at all times.

10 year old me would think this is a scifi

Do this immediately:
1. Ask your agent about Karpathy's Autoresearch. Deeply understand it
2. Ask your agent how you could apply that framework to other projects you're working on
3. Download a local model. Doesn't matter what computer you have. There is a model you can run on it.
4. Just get used to how it works. Learn from it.
5. Push yourself to get uncomfortable every day and try new things.

There has never been a better/more profitable time to be a tinkerer

[0b1d1 @_0b1d1]

🕵️100 Useful Forensic Tools

🔖#cybersecurity #hacking #pentesting #security

[Florian Roth ⚡️ @cyb3rops]

F5 Breach
https://t.co/Fc1Se8FBCH

[Chris Corbin @ccorbinau]

@sk8boardingdog @BSidesCbr Oh hell yes!

[skateboarding dog @sk8boardingdog]

All challenges and solutions are now up on our GitHub 🛹🐕 https://t.co/gzHFV77zLB

[Jake Williams @MalwareJake]

Heads up: There's a critical vulnerability in Cisco ASA and FTD products that can lead to arbitrary code execution. Unlike many network device vulns that require access to an admin console, this just requires SSL VPN to be enabled on the device.
https://t.co/AZuMBE1xP4

[Financelot @FinanceLancelot]

Looks like we're going to war.

[Swissky @pentest_swissky]

TeamViewer - @whynotsecurity
TL;DR: TeamViewer stored user passwords encrypted with AES-128-CBC with they key of 0602000000a400005253413100040000 and iv of 0100010067244F436E6762F25EA8D704 in the Windows registry.
https://t.co/0Cbwvu4ZgA

[Florian Roth ⚡️ @cyb3rops]

We published a worker to use our free scanner THOR Lite in OpenRelik

OpenRelik is an open-source platform designed to streamline collaborative digital forensic investigations | by @jberggren

Project page
https://t.co/K3v9vUNZh7

THOR Lite
https://t.co/EVPjanmunk

THOR Lite worker
https://t.co/RkQFYloluN

[Binni Shah @binitamshah]

Your laptop was stolen. It’s running Windows 11, fully up-to-date, device encryption (BitLocker) and Secure Boot enabled. Your data is safe, right? Think again! This software-only attack grabs your encryption key : https://t.co/Y8FkBkmgWH credits @Neodyme

[Leon Si @leonsilicon]

he just wanted to work on his side project

[Florian Roth ⚡️ @cyb3rops]

Can confirm - it’s big - go and check your logs

[Pirat_Nation 🔴 @Pirat_Nation]

PowerShell:

Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" -Name "BingSearchEnabled" -Value 0 -Type DWord

[Alex Neff @al3x_n3ff]

NetExec has a new Module: Timeroast🔥

In AD environments, the DC hashes NTP responses with the computer account NT hash. That means that you can request and brute force all computer accounts in a domain from an UNAUTHENTICATED perspective!

Implemented by @Disgame_

1/3🧵

[Chris Corbin @ccorbinau]

C-Lion1 between Germany and Finland broken
Telia between Lithuania and Sweden damaged

Two cables in the same region within 6 hours...?

[Thorsten E. @endi24]

Windows Baseline Logging

https://t.co/L5pyQ8x37z

[Chris Corbin @ccorbinau]

For Windows specific, I found that Graylog had a good list. Need to find a good resource for Linux events if anyone has one?
https://t.co/Gh2dvoH4N0

[Chris Corbin @ccorbinau]

Good advice on "Best practices for event logging and threat detection" across systems, networks, enterprise, OT, mobile and cloud.
https://t.co/wL5CgRbQjL