Devyn

[Devyn @devyn]

Why pay for cloud proxies when GitHub gives you free VMs?

Fluffy-Barnacle flips Codespaces into:
Rotating egress → SSH-tunneled SOCKS5 (Burp export) → *.app.github.dev HTTPS (redirect/capture/custom domains via auto-deployed CF Workers) → full WireGuard routing → auto-proxied tools.

Ephemeral red team stack in seconds.
https://t.co/cfbMB46nO7

#bugbounty #redteam

[Devyn @devyn]

@lostsec_ @anxietymsgs 💯

[Devyn @devyn]

@evilsocket Love this! Thanks, man!

[Devyn @devyn]

@rez0__ @Cloudflare Better than @Nvidia… 🙃

[Devyn @devyn]

@adnanthekhan 🥹 thank you!

[Adnan Khan @adnanthekhan]

TeamPCP apparently used a malicious workflow to publish the malicious bitwarden CLI:

https://t.co/LoYbTYZBVI

[Devyn @devyn]

@bcherny I thought the Cyber Verification Program was created to "enable professionals to continue working on legitimate dual-use tasks safely while minimizing interruption."

I was approved 3 days ago, yet I'm now getting pop-up warnings that my prompts violate the Acceptable Use Policy, with a threat of enhanced safety filters if the pattern continues.

The "Learn More" link sent me to usersafety@, but the instant reply was about appealing a ban I never received. It didn't identify the issue or help at all.

Is there a clearer delineation of what counts as a violation for those approved under the Cyber Verification Program? I'm just trying to do legitimate professional work without getting filtered or banned.

[Devyn @devyn]

Well, I got approved for the "Cyber Verification Program" followed by a message stating if I continue violating the 'Acceptable Use Policy' they'll apply enhanced safety filters to my chats.

The 'Learn more' button gave me an email to reach out to which I did... got an immediate reply to fill out an appeal for the ban I don't have. So that's cool..?

[Devyn @devyn]

@UK_Daniel_Card lol dude, mine decided it was tired of 'wasting time' on something it kept generating buggy code for and literally moved on from the task. wild times!

[Devyn @devyn]

@lefthanddraft @about212ninjas Works for Gemini too lol https://t.co/uS4CENA8GA

[Devyn @devyn]

@HackingDave Dude it’s been so bad for me as well. I had to have it reference another repo that it helped create, to know how to correctly forward ports in codespaces.

[Devyn @devyn]

@adnanthekhan 🥲

[Devyn @devyn]

@xpl0itrs @evilsocket You’re about to get so many beg bounty reports lmao

[Devyn @devyn]

Well, they said they were done. I'm sure it'll keep going with whoever their partners are.

[Adnan Khan @adnanthekhan]

In this whole #Trivy chaos, people seem to be incorrectly linking the hackerbot-claw event to the initial #Trivy extension compromise.

[Devyn @devyn]

@_RastaMouse So clean, love that!

[Devyn @devyn]

@HackingDave I've definitely noticed the same; consistently having to have it double check things and correct pretty dumb errors.

[Devyn @devyn]

@0xTib3rius ... while more Claude Code agents watch them solve the labs and learn 😉

[Devyn @devyn]

@rez0__ 🔥🔥🔥

[Devyn @devyn]

Solid read! It’s wild how generous @Anthropic is, shipping completely unstripped binaries with full debug info and complete symbol tables. 🤷

Happy accident or intentional?

#Anthropic #Claude #ReverseEngineering #AI

[AprilNEA @AprilNEA]

https://t.co/WfS7NSuatg

[Devyn @devyn]

@HackingDave "Create an X post for me that will go viral!!!1111"