Darth Revan

I love learning, Security, friends and family. Love EDM, tech, Motorsports, & anything that moves fast. 1 Corinthian 13:4-8

[Darth Revan @darkhunt3r]

You can follow me on masterdon - @[email protected]

[Yasir Ai @AiwithYasir]

China open-sourced a model that reconstructs any scene in 3D from a regular video, in real-time.

one camera. no LiDAR. 10,000+ frames without falling apart.

just walk around with your camera and watch the entire world get rebuilt in 3D at 20 fps.

→ runs at ~20 FPS on a single GPU
→ Stable over 10,000+ frames
→ Beats optimization-based methods on benchmarks
→ Works on drone footage, driving videos, indoor walkthroughs

100% open source.

[The Hacker News @TheHackersNews]

🛑 URGENT - A single anonymous HTTP request can run code on an unpatched #WordPress 6.9 or 7.0 site, even on a default install with zero plugins.

The new wp2shell flaw sits in core and still has no CVE for scanners to match.

Affected releases and mitigations 🠖 https://t.co/K0BhT3DwJ7

[Nico @nicos_ai]

Google lanzó la herramienta que todo desarrollador pedía desde hace años.

Se llama CodeWiki.

Pegas cualquier repositorio y la IA lo convierte automáticamente en una documentación interactiva.

No solo resume el código:

• Genera diagramas automáticamente
• Explica cómo funciona cada parte
• Crea tutoriales paso a paso
• Detecta arquitectura y dependencias
• Y hasta monta un chatbot que entiende tu código completo

Básicamente:
convierte proyectos imposibles de entender en algo que cualquier desarrollador puede navegar en minutos.

[cr3ghost @cr3ghost]

Adding to this list. All free. No paywall. No signup.

https://t.co/x516DQRcB8 - 700+ pages of malware analysis and exploit research

https://t.co/cgxRDKvx2g - full university malware analysis course

https://t.co/7uSbDhTq6s - RE101, RE102, macOS RE, PE injection

https://t.co/mRHslgjr4f - ARM assembly, shellcode, heap exploitation

https://t.co/SLm7Vlyd93 - applied RE series and hypervisor development

https://t.co/3SLFBf6xSp - buffer overflows to kernel exploitation

https://t.co/gDWRH5YpIx - 30+ courses, WinDbg, IDA, Ghidra, UEFI, kernel exploitation

https://t.co/rA4x1Hv2iE - 41 tutorials spanning 17 years of exploit dev

https://t.co/DIqWzR1Xp3 - 19-part series, usermode to kernel

https://t.co/BJpRHdbTHu - Windows internals, secure kernel, VBS, KDP, dynamic analysis

YouTube:
https://t.co/KLUDZ9us2g
https://t.co/yxJUVqTzvK
https://t.co/IvelLJIQhH
https://t.co/C8aErWJ5RJ
https://t.co/NDG3swCvB1

Thousands of dollars worth of knowledge. All free.

#ReverseEngineering #MalwareAnalysis #InfoSec

[Jorian @J0R1AN]

It's friday so you know what that means, time for a critical vulnerability!
Okay... we announced it 4 weeks ago already to be fair, but now we can talk about the technical parts 🙌

Read how authentication could be bypassed on every online phpBB instance:
https://t.co/QQM8CDBRDE

[Anatoli Kopadze @AnatoliKopadze]

A Google Cloud engineer just showed how to build a full app with Claude from scratch

he spent 26 minutes live on stage doing what most teams take weeks to do

worth more than any $500 vibe-coding course

here's what he covers:
> zero to deployed app in a single session
> handling five engineering roles alone with Claude
> the exact workflow Google uses internally
> no team, no setup, just Claude and a goal

the people who figure out what Claude can actually do are building things everyone else thinks requires a team

that's exactly why I wrote a step by step guide on how to build your first AI agent

the guide is in the article below

[Darth Revan @darkhunt3r]

@CapitalOne what does a brotha gotta do to get an upgrade (product change) to the venture x? I've been a customer for over 6-7 years & my work horse card is the venture rewards card. I've been trying to get the upgrade especially since I have travel plans this summer!

[striga @striga_ai]

PoCs for Apache Tomcat Unauth RCE (CVE-2026-34486) and Apache httpd Pre-auth RCE (CVE-2026-23918) are now public on our Github.

Tomcat exploit is fully reliable. httpd chain works in a controlled lab setup with a known info leak.

https://t.co/D3dg5iTuwP
https://t.co/2zyr1ds4Mo

[CyrilXBT @cyrilXBT]

ANTHROPIC JUST PROVED MOST PEOPLE HAVE NO IDEA HOW TO PROMPT CLAUDE.

Their applied AI team dropped a 24 minute free workshop.

Not a creator who reverse engineered it.

Not a Reddit thread.

ANTHROPIC.

The people who wrote the weights.

And what they showed is uncomfortable.

There are 6 elements to a properly structured Claude prompt.

Most people are using 1.

Maybe 2.

That is not a skill issue.

That is an information issue.

And it has been quietly costing you every single day.

The outputs that felt slightly off.

The responses you had to rewrite 4 times.

The prompts that worked once and never again.

All of it traces back to the same 6 missing elements.

The people who watch this 24 minute workshop tonight will understand something about Claude that most daily users still do not know exists.

The people who skip it will keep getting 30% of what the tool is actually capable of and wonder why the results never quite land.

I watched it twice.

Then I built a Claude Skill that applies all 6 elements to every prompt automatically.

No more thinking about structure.

No more guessing what Claude needs.

The framework runs in the background every single time.

Full breakdown and skill setup is below.

Bookmark this now.

Watch the workshop first.

Then read the guide.

This is the one that compounds.

Follow @cyrilXBT for the exact prompt architecture, Claude skills, and systems I use to get outputs most people do not believe came from one person working alone.

[The Hacker News @TheHackersNews]

⚠️ ALERT - A threat group exploited a Next.js flaw to compromise 766+ hosts and steal cloud credentials at scale.

Using automated scripts, attackers extracted AWS secrets, SSH keys, and API tokens, all managed through a central dashboard for reuse.

🔗 Read → https://t.co/groIUewDmu

[The Hacker News @TheHackersNews]

🛑 Meta will shut down Instagram’s end-to-end encrypted chats on May 8, 2026.

Users with affected conversations will get instructions to download messages or media before the change.

🔗 Read → https://t.co/qHKNzvELIU

[Darth Revan @darkhunt3r]

📢 Introducing Terminus!🚀
A command-line tool to test URL accessibility & identify unprotected paths for better security 🔒.

✅ Custom HTTP methods
✅ File + stdin support
✅ AI-powered analysis

Try it out: https://t.co/eg2NVrisQQ
#OpenSource #Cybersecurity #Rust

[Darth Revan @darkhunt3r]

@netflix @NetflixTudum is it possible to have the regular search back? Or allow users to switch between regular and AI search? Because I hate this AI search you added. It gives me everything but what I'm looking for. The old search was better/faster to some extent IMHO.

[Darth Revan @darkhunt3r]

@theyrenotaliens @Auggystyle1 @yxngplutooonio @mcuban We understand architecturally & theoretically what an LLM is doing. But we don't know what causes it to give the responses it gives. Unlike a human who can recite the same response regardless of whose asking, these models tend to deviate at times.

[Darth Revan @darkhunt3r]

@Auggystyle1 @yxngplutooonio @mcuban So couple things
1. What exactly was your prompt (the text you put in the chat box)?
2. Checking the source doesn't mean it's accurate. We still don't know what the models are doing under the covers
3. I'm pretty sure studies have been made on this. US has a net gain not loss.

[Darth Revan @darkhunt3r]

@Auggystyle1 @yxngplutooonio @mcuban @Auggystyle1 keep this in mind as you use that tool - https://t.co/qeAjFt9uJd

[Darth Revan @darkhunt3r]

@AmazonHelp @amazon I need live support from an agent regarding a return I did. I can't find anyway to initiate a conversation with anyone. It is all self service and none of it is helpful. Idk why y'all took off the live chat.

[Darth Revan @darkhunt3r]

@JezCorden @XboxP3 @Xbox @XboxSupport @XboxGamePass so when will y'all just close up shop for good? Because there is been nothing but cancellations, layoffs and disappointment. Either @Microsoft needs to sell off the brand or at least give the canceled titles to @Sony @PlayStation 🤷🏿‍♂️.

[Darth Revan @darkhunt3r]

@gabsmashh Wtf are they smoking?

[Hunter @HunterMapping]

🚨Alert🚨 CVE-2025-31324(CVSS v3 score: 10.0):Critical SAP NetWeaver Zero-Day Vulnerability
🔥EXP : https://t.co/ZwAAJRtR5v
📊23K+ Services are found on the https://t.co/g3tSyh1Boc yearly.
🔗Hunter Link:https://t.co/rBDHImxRay
👇Query
HUNTER : https://t.co/yFFcJwegJK="SAP NetWeaver"
📰Refer:https://t.co/RsR1A6Mi4O
#SAP #hunterhow #infosec #infosecurity #OSINT #Vulnerability