Djidakon

Red Teamer | Pentester | Malware Analysis

[Isa @isssa0x]

A dead MIT professor accidentally destroyed the $20 billion executive coaching industry with one hour of lecture, and ten million people have already watched him do it.

He filmed it once in January 2018 and died eighteen months later.

Executive coaches charge fifteen thousand dollars a session to teach a third of what he covered in that one hour for free.

His name was Patrick Winston. He ran the MIT Artificial Intelligence Laboratory from 1972 to 1997 and wrote the AI textbook every computer science major in the world read for thirty years.

Every January for four decades, he gave a lecture called "How to Speak."

His entire framework fits on a napkin.

Do not read. Be in the image. Keep images simple. Eliminate clutter. Start with an empathetic connection. End with a punch line the audience can repeat over dinner. Never open with a joke. Never end with "thank you."

That last rule alone has probably cost the executive coaching industry a hundred million dollars.

"Your success in life will be determined largely by your ability to speak, your ability to write, and the quality of your ideas. In that order."

That is the actual opening line of the lecture. Winston believed it strongly enough to spend fifty years teaching computer scientists how to talk.

Founders spend $80,000 on an MBA and then hire a communications coach to teach them the same material Winston filmed once for free. Engineers write brilliant code and lose promotions to teammates who watched this lecture on the train.

The lecture is free on MIT OpenCourseWare. The textbook is free on his page.

Winston died in 2019. Almost none of the ten million viewers have actually implemented the four rules on the napkin.

The napkin is free. The willingness to actually use it in your next meeting is the entire edge.

[Nitin Gavhane @NitinGavhane_]

@opencode 2/10

Setup:

# Install OpenCode
curl -fsSL https://t.co/tVUWVEWobc | bash

# Clone the bug-bounty skills
git clone https://t.co/ph984ZXzV4
cd claude-bug-bounty
./install_tools.sh
./install.sh --opencode

Now run opencode and ask: “do you have bug bounty skills?”

#BugBountyTools

[arc. @arceyul]

🚨 ADIÓS A LA EDICIÓN DE VIDEO

Alguien acaba de crear una herramienta de edición de video gratuita para Claude Code... y es una locura.

Literalmente solo tienes que soltar tu material sin procesar + archivos en una carpeta.

Eso es todo.

Se encarga de TODO:

•Corta los clips
•Elimina las palabras de relleno
•Añade subtítulos
•Aplica corrección de color y filtros
•Maneja animaciones
•Renderiza el video final

Sin línea de tiempo. Sin edición manual. Sin rodeos.

Honestamente, esto va más allá de herramientas como Remotion.

No solo te ayuda a crear videos… hace la edición por ti.

El proyecto es open source en GitHub.

Se llama Video Use.

link debajo ⬇️

[Nicolas Krassas @Dinosn]

0rangec3t/black-cat: Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill https://t.co/DnkHqtCsEY

[Trackmind @0xTrackmind]

this quant paper is f*cking insane

a former Morgan Stanley quant who went on to found his own hedge fund just gave the whole thing away.

224 pages, and it's not theory, it's the exact winning algorithmic strategies with every single line of code included.

the crazy part is this level of detail almost never leaves the walls of a fund, let alone gets released for free.

if you've been wanting to start quant trading but didn't know where to begin, this is the starting point.

bookmark now before it disappears.

[sudo @rootsud0]

Last month, after burning through 61B DeepSeek tokens hunting bugs, here's where I've landed on CLI agents:

@cline - reasoning and tool use are on another level.
codex - solid tool use, decent reasoning.
@claude_code - great overall, but API calls randomly die in the middle of a hunt.
@opencode - good reasoning, but memory management needs work.
CodeWhale - good reasoning and tool use, but API reliability is hit or miss.
@Wrong_Stack - excellent orchestration, though API calls can be flaky sometimes.

[kvro @0xkvro]

this paper completely changes how quant trading looks

elite quant firms are not trying to call the next market move

they search for tiny repeatable distortions, control the risk, and let scale do the heavy lifting

the result: a strategy can win barely more than half the time and still become highly profitable across thousands of trades

the wild part is the signal may look almost meaningless

a temporary pricing gap
a residual pushed too far
a few basis points of expected value
one trade proves nothing

but repeated with discipline, proper sizing, and enough frequency, that tiny edge becomes the whole machine

bookmark this before it gets buried

[QCXINT @QCXINT_]

🚨 Google accidentally gave everyone a free AI API... and almost nobody is using it.

Most people think you need an API key to use Gemini in your own apps.

Turns out...

You don't.

This open-source project turns the free Gemini web interface into an OpenAI-compatible API that works with almost any AI client.

Even better?

It runs entirely on your own computer.

No paid API.

No billing.

No API key signup.

Just one Python file.

What you get:

✅ OpenAI-compatible API

🤖 Free access to Gemini 3.6 Flash

💬 Works with Cherry Studio, ChatBox, and any app supporting the OpenAI API format

🖥️ Self-hosted on your local machine

Setup takes only a few minutes:

1️⃣ Install Python

pip install httpx

2️⃣ Download gemini_web2api.py from the GitHub repository.

3️⃣ Start your local API server:

python gemini_web2api.py

Your server will be running at:

http://localhost:8081

4️⃣ Connect your favorite AI client:

Base URL

http://localhost:8081/v1

API Key

Anything

That's it.

You can start chatting with Gemini 3.6 Flash using any OpenAI-compatible application.

Open-source projects like this are quietly changing how people build AI apps.

Instead of paying for every token...

They're finding creative ways to leverage services that are already available.

📌 Bookmark this before it disappears from your timeline.

🐙 GitHub:

https://t.co/Ynsu9Px0cN

[DbgMan ^_^ @0XDbgMan]

New blog
Spent way too much time reverse engineering CrowdStrike Falcon.
Somewhere along the way, I found a bug. It's low and not practically exploitable... but a bug is a bug :)
Publishing soon
https://t.co/VNo4gpNVED

[Swissky @pentest_swissky]

GAP - Ghost Anchor Persistence: Fileless Extension Persistence in Chromium Browsers - fir3n0x
https://t.co/aOioz9wj92

[Kevin2600 @Kevin2600]

https://t.co/eBKb9KO04J

[0x12 Dark Development @Salsa12__]

Active Call Stack Spoofing: Hiding Syscalls Behind Legitimate Frames

New Medium post! This post covers the next step: active call stack spoofing during a syscall. Instead of truncating the stack, we build a completely fake one from scratch

https://t.co/aUExHQyYEO

[Nicolas Krassas @Dinosn]

The SID that wasn’t there: bypassing KB5014754 to Domain Admin on a fully patched AD CS https://t.co/3xEzd1hYaa

[0x12 Dark Development @Salsa12__]

Thread Call Stack Spoofing (Fake Traces)

- Create suspended thread
- Get thread context
- Build fake call stack
- Set syscall arguments and redirect
- Apply modified context
- Register VEH handler
- Resume thread
- Execute with spoofed call stack
- Handle exception & restore

[Simplifying AI @simplifyinAI]

Vercel and Netlify charge $20/seat a month. Heroku killed its free tier. Go over your bandwidth and you get surprise bills, sometimes thousands.

There's an open-source alternative to all three. For $0.

It's called Coolify.

You install it on any server you own, a $5 VPS, a Raspberry Pi, an old laptop, anything with SSH. Then you deploy everything from one dashboard.

> Static sites, full-stack apps, databases, and APIs
> 280+ one-click services (WordPress, Ghost, n8n, Supabase, and more)
> Free auto-renewing SSL and automatic S3 backups
> Pull request preview deployments
> Push-to-deploy from GitHub, GitLab, and Bitbucket

No vendor lock-in. Your configs live on your server, so if you stop using Coolify, everything still runs.

A 5-person team on Vercel pays $100-500/month. The same team on a $5 VPS with Coolify pays $5. Total.

100% Free. Open Source.

[Trackmind @0xTrackmind]

this trading paper is f*cking insane

most people have no clue you can build hedge fund level strategies with AI, completely from scratch, using nothing but this.

this paper lays out exactly how top quants fuse AI with real market data to engineer strategies that actually print.

the crazy part is this isn't theory, it's the same combination running on live desks right now.

most guides teach you to backtest an idea.

this one teaches you how the idea gets built in the first place.

bookmark this before someone takes it down.

[Raman_MG @Raman_Mohurle]

Hey Hunters,

just released: Burp Unrestricted MCP

Free and open source, for hunters running AI agents against Burp on
long engagements.

A fork of @PortSwigger's Burp MCP Server that adds the 8 tools an agent
actually needs to work a target end to end.

https://t.co/4CbKF3rIJB

#Bugbounty

[LainKusanagi @unknownseeker99]

Offensive x64 Windows Assembly

Collection of programs I made while learning assembly.

https://t.co/WuOk8VgAj9

#penetrationtesting #redteaming

[Clandestine @akaclandestine]

GitHub - SlugRegister/offensive-maldev: Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading · GitHub https://t.co/23eX1BKtfG

[Panos Gkatziroulis 🦄 @ipurple]

Nocturne - A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injection, and inverted function table collapse https://t.co/KVK6XBcW1N