dphylez

Security and malware are 2 things I like. Blue teamer who wishes he was red.

[Ruuj @RuujSs]

As someone who builds institutional level quant systems, this Stanford paper on HFT Mean Reversion is the closest thing to a live trading playbook I have ever seen publicly shared.

19 pages. Window size tuning that flips PnL on the exact same stock, same day, same code. Hurst exponent universe selection.

Bookmark & If this helps you, pass it on.

[Trackmind @0xTrackmind]

this trading paper is f*cking insane

most people have no clue you can build hedge fund level strategies with AI, completely from scratch, using nothing but this.

this paper lays out exactly how top quants fuse AI with real market data to engineer strategies that actually print.

the crazy part is this isn't theory, it's the same combination running on live desks right now.

most guides teach you to backtest an idea.

this one teaches you how the idea gets built in the first place.

bookmark this before someone takes it down.

[Raytar @Raytar]

I deleted 80% of my CLAUDE.md last night.

My CLAUDE.md was 400 lines. It's now 60. Claude works better.

It's all because of this video.

Two Anthropic engineers. 50 minutes. The Claude team's best practices.

Anthropic deleted 80% of the Claude Code system prompt. The output got better.

Most people will keep adding rules and wondering why it keeps getting worse.

Watch it today, then read the guide below.

[Movez @0xMovez]

Anthropic engineer:

“70% of our engineers are using self‑improving loops. Now everyone is building agentic Graphs"

in 3-6 months, we’ll all be building graphs to orchestrate self‑improving agents. No more prompting.”

in 30-minute lecture, Anthropic engineer shows how to build a self-improving agentic workflow from scratch.

Worth more than a $500 agentic course.

Watch this video, then read the article below on how to become a graph architect.

[QCXINT @QCXINT_]

🚨 The winner of Anthropic's Hackathon just open-sourced his entire Claude Code setup. 🤯

It's called Everything Claude Code (ECC), created by Affan Mustafa.

This isn't a weekend project.

According to the author, the setup was refined over 10 months while building real products.

✨ What's inside

🛠️ 183 skills

🤖 48 sub-agents

⚡ 79 ready-to-use commands

The goal isn't just to make Claude a better coding assistant.

It's to turn Claude into an entire AI development team, where different agents specialize in different tasks.

Examples include:

🛡️ A dedicated agent for scanning your code for security issues.

🧠 An agent focused on optimizing memory and context.

📚 Agents that learn from previous sessions, gradually adapting to your coding style and prompting habits over time.

The most impressive part?

According to Affan, this setup was used to build a startup prototype in just 8 hours, helping secure the Grand Prize at the Anthropic Hackathon.

If you're serious about getting more out of Claude Code, this is one of the most comprehensive open-source setups currently available.

🔗 GitHub https://t.co/pg5mDwt4lD

[LainKusanagi @unknownseeker99]

Offensive x64 Windows Assembly

Collection of programs I made while learning assembly.

https://t.co/WuOk8VgAj9

#penetrationtesting #redteaming

[Sprytix @Sprytixl]

ANTHROPIC'S LEAD ENGINEER WON A $1.2M BONUS FOR A SYSTEM THAT TURNS ANY DATA CHAOS INTO A GRAPH IN 8 STEPS

raw chaos in - self-updating graph out - and the agent gets +42% productivity from day one

Load → Extract → Graph → Index → Query → Memory → Swarm → Update

eight steps, one pipeline, graph grows while you sleep

documents, code, Slack - everything into one stream through Claude Code - nothing gets lost

Fable 5 + Opus 5 extracts entity relationships - Neo4j builds a live structure - zero duplicates

three types of search in one answer - vectors, keywords and graph - merged ranking gives accuracy no RAG delivers alone

a nightly agent pulls new data and updates the graph automatically - the system gets smarter while you sleep

bookmark and paste into Claude Code - a $1.2M system now free

[Clandestine @akaclandestine]

GitHub - SlugRegister/offensive-maldev: Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading · GitHub https://t.co/23eX1BKtfG

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

Fresh drop: the 2026 Practical Bug Bounty Guide — a full field manual from mindset → recon → Burp deep dive → every vuln class (XSS, SSTI, SQLi, IDOR, SSRF, XXE, business logic) → chaining → reporting. Opinionated, PoC-or-GTFO, built on real hunts.

Read it: https://t.co/FokfrqlYvK

Ready to make it official? My certifications: https://t.co/PCHEUoUTZ0

#infosec #bugbounty

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

in the meantime: https://t.co/6iCzVbej7K

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

FREE @offsectraining training modules over at https://t.co/DZOYPd9BLw

Interactive HTML pages free for everyone to get to - with command per command, module per module

TOTALLY FREE FOR ANYONE AND EVERYONE

Sometimes standing for what you believe, means standing alone.

[Md Ismail Šojal 🕷️ @0x0SojalSec]

A scanner that checks GitHub repos for AI supply chain attacks using 40,000+ detection 200+ CVEs patterns.

Scans any GitHub repo instantly for supply chain attacks, weaponized configs, and hidden compromises, Repo poisoning, prompt injection, MCP tool abuse, leaked keys in Claude/Cursor history catches it all in seconds.

- https://t.co/7OD6oGHgBA

[gus @igus_ai]

ESTA TRADER CHINA USÓ CLAUDE FABLE 5 PARA MONTAR UN BOT DE TRADING

Y grabó este tutorial completo donde muestra cómo replicarlo desde 0

31 minutos. Paso a paso. Gratis.

Subtitulado al español e inglés.

Guárdalo, ya me lo agradecerás 🔖

[International Cyber Digest @IntCyberDigest]

❗️ Over 30 official Red Hat npm packages were compromised. How they got in:

- A Red Hat employee's GitHub account was compromised.
- Attackers pushed "orphan commits" (detached from branch history) straight in, bypassing code review with no pull request.
- Payload "Miasma" (Mini Shai-Hulud variant) steals GitHub/cloud/Vault/SSH/npm secrets. Rotate everything since June 1.
- The commits added a workflow (ci.yaml) + script (_index.js) that abused npm trusted publishing, requesting a real OIDC token to publish backdoored versions.

[cr3ghost @cr3ghost]

Alexandre Borges has published over 700 pages of free security, malware and vulnerability research.

A complete Malware Analysis Series covering Windows, macOS, iOS, Linux and shellcode. An Exploiting Reversing Series covering Windows kernel exploitation, Hyper-V, Chrome, and a three-part deep dive on CVE-2024-30085.

No paywall. No course. Just research. Free as in beer.

https://t.co/x516DQRcB8

Author: @ale_sp_brazil

#ReverseEngineering #MalwareAnalysis #InfoSec

[vx-underground @vxunderground]

Hello

I have collected more malware. It's like, ... 200,000 malware, I think. I don't know. I've stopped counting.

It is enough malware for your friends, family, extended family, neighbors, and co-workers.

Please download it. The malware is lonely.

https://t.co/HDTpR7UxxK

[曾哥 @AabyssZG]

HashDump-BypassEDR：https://t.co/oa8qQcuUd1
通过系统白程序 Reg.exe 的拓展应用，巧妙绕过EDR的拦截点，实现绕过EDR从而DumpHash😈
该方法针对Windows系列均有效，操作难度不大，具有实战价值🥳
本项目实战文章：https://t.co/IcjVWYtjBY
源代码和Release已发布，师傅们麻烦点个Star，万分感谢！😍

[Co11ateral @co11ateral]

ReverseShell_2026_05.ps1

ReverseShell with AI behaviour analysis bypass (prompt injection targeting sandbox analysis).

As of May 4, 2026, undetected by all antivirus engines (0/61). These files typically remain usable for about 2-3 weeks before antivirus vendors begin flagging them. Better start monitroing it early.

https://t.co/EwU2lFpjYZ

#dfir #forensics #redteam

[Di @DI0256]

What to read this weekend

1 Building a Low- Cost, Private 4G LTE Network https://t.co/m82J0eZkUk
2 Privilege Escalation https://t.co/4K3uInCveK
3 OSINT in TikTok https://t.co/yzN3BZGMm1
@three_cube @_aircorridor @co11ateral