oops

soc audit passer. sysadmin and hobbyist developer

[oops @fataloops]

@elonmusk @spencerpratt https://t.co/vEhfvYo0s7

[oops @fataloops]

The entire backbone of the (dem)socialist party is "us and them", "us versus them". i can't even watch this entire thing because it physically disgusts me. Human beings are ONE. WE are ONE. AMERICA is ONE.

The only human beings trying to drill "US vs THEM" into your head are the ones trying to dismantle our country.

It's easy to latch onto these ideals, they make you feel a part of something. We are ALREADY a part of something. We are AMERICANS! We live in the Greatest Country EVER! YOU are ENOUGH!!

Americans LOVE their neighbors, Socialists DIVIDE and CONQUER.

[oops @fataloops]

The entire backbone of the (dem)socialist party is "us and them", "us versus them". i can't even watch this entire thing because it physically disgusts me. Human beings are ONE. WE are ONE. AMERICA is ONE.

The only human beings trying to drill "US vs THEM" into your head are the ones trying to dismantle our country.

It's easy to latch onto these ideals, they make you feel a part of something. We are ALREADY a part of something. We are AMERICANS! We live in the Greatest Country EVER! YOU are ENOUGH!!

Americans LOVE their neighbors, Socialists DIVIDE and CONQUER.

[America @america]

Socialist Mayor of New York City, Zohran Mamdani, just gave a speech on what he thinks it means to be an American on America’s 250th Birthday.

He attacked our nation as “an arena of supremacy” that “persecutes” and claimed ICE is “invading our streets”.

[oops @fataloops]

@elonmusk this is fucking awesome

[oops @fataloops]

@Teknium @coreyganim @NickSpisak_ expensive for a vps with a fancy name. for $39/mo you could get ~10 vps. versus 5 "agent computers"

[oops @fataloops]

@Polymarket peak AI psychosis

[oops @fataloops]

@Teknium @Marco_Ramilli its described as being for claude code and claude code already has /init specifically for this. tools on top of tools for no reason other than more tools. everyone wants to ride the AI wave but 99% have nothing of value to add

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

⚡ INTRODUCING: T3MP3ST!!! ⚡

AUTONOMOUS HACKBOT STRIKE FORCE 🌩️ BRING THE STORM 🌩️

your favorite coding agent is now a full-stack red team 🫡⚔️

https://t.co/k0SXmPAFaD

that AI agent already humming in your terminal? well now it has FANGS. strap a full offensive-security harness onto the agents you already pay for — Claude Code, Codex, Hermes, etc. — point it at an authorized target, and in a few clicks you're watching it hunt real vulns autonomously!

T3MP3ST is a harness of harnesses, with prompting that unlocks offensive-cyber workflows + a full arsenal of exploit tooling that'd make any seasoned hacker smirk. simple, yet powerful. 🦾

support for:
🕸️ web apps, APIs, OWASP Top 10
🔌 network recon + fingerprinting (live nmap/DNS/HTTP); lateral + privesc experimental
📂 source code audits, white-box vuln hunting
🚩 CTFs, wargames, challenge ranges
💰 smart contracts / DeFi / Solidity (reproduction — Damn Vulnerable DeFi, not novel discovery)
🤖 embedded, IoT, OT/SCADA, robotics OSS
… and more in development!

now let's talk numbers 👇

📊 XBEN — XBOW's own 104-challenge suite:
• black-box: 90.1% pass@1 from the single-agent exploit loop (worst single sweep 91/104 = 87.5%) — clearing XBOW's past self-reported 85% on their own suite. gpt-5.5.
• white-box (source staged, reported separately): 98.7% pass@1, worst single sweep 102/104 = 98.1%. 🎯
every solved flag graded reported-vs-expected against the challenge's own committed flag oracle — `verify-claims` recomputes the pass/fail from committed artifacts. looks like we need new benchmarks 😏

🧩 Cybench — the 40-task academic bench (Opus 4.8, hints + writeups stripped): 23/40 = 58% single-run, hint-free pass@1 — real exploits (format-string pwn, eval-jail escapes, crypto oracles), every flag graded vs a committed oracle. (Anthropic reports 76.5% pass@10)

🕳️ CVE-Zero — we pointed it COLD at real CVEs disclosed in 2026, AFTER the model's training cutoff:
10 unseen 2026 CVEs across 7 languages — prompts never tuned on them. a single agent pinned 8/10 to exact file/line/CWE (stable under re-scoring); the full pack surfaced all 10.
memorization AND overfitting, both off the table — it's finding real vulns whose disclosures landed AFTER the model's training cutoff. (n=10, reported honest & directional)

🧠 the architecture: either run as a SINGLE agent (already the benchmarked, incredibly-capable path) — or pack-hunt with dozens of agents running on 8 specialist operator classes keyed to Cyber Kill Chain + MITRE ATT&CK phases: recon → scan → exploit → lateral → exfil → persistence → C2 → report.

⚓️an Op Admiral plans the whole op from a plain-english target. flip on coordination (experimental) and the operators share a blackboard — a tool-verified finding spawns the next move. full swarm or solo one operator, your call. the admiral can also update the prompts, tools, and configs of the other agents on the fly, and T3MP3ST gets stronger the more memories you build!

🧰 the Arsenal is comprehensive — nmap / nuclei / semgrep / ffuf / gobuster + more. 35 wired by default (the clean bench runs bash-only for a comparable number), 83 with the opt-in full arsenal (T3MP3ST_FULL_ARSENAL), and the spicy post-ex drivers (metasploit, hydra) gated behind human approval. exposed via CLI + HTTP API; recon (security_recon) is also live over MCP so your agent invokes it natively. 🔗

🛰️ where this goes: a self-improving swarm of specialist operators wielding a full Kali+ arsenal, learning which loadouts + configs are the most efficient tactics available, WITH a held-out train/test split baked in so it can never fool itself on its own eval. built in the open, one re-derivable number at a time.

🚧 this is v1, and parts are still under active development. chunks of the arsenal, the coordinated swarm, and some ranges are still being wired up. it's built in the open, and the receipts tell you exactly what's live vs what's roadmap.

offensive security shouldn't be pay-to-play. T3MP3ST puts a red team in the hands of anyone with a coding agent.

what's the first target you're feeding it? 👇

⚠️ DISCLAIMER: FOR AUTHORIZED USE ONLY. point it only at systems you own or have explicit written permission to test. unauthorized access can be a crime, and that call is yours alone. shipped as-is under AGPL-3.0: no warranty, no liability, zero endorsement of misuse. get permission. stay in scope.

open source. AGPL-3.0. 100% free.

FORTES FORTUNA IUVAT 🌩️

gg 🫡

[oops @fataloops]

this @FoxNews broadcast of America 250 is BRUTAL. filling dead air time with nonsense for at least 2 hours now. they spent 5 full minutes talking about the security queue and another 5 minutes about the President waving. this was an hour ago and it hasn't gotten better

[oops @fataloops]

@MrBeast 741776

[oops @fataloops]

Fable 5 is AGI

[oops @fataloops]

@jpschroeder it's part of China's broader AI strategy. open-source and cheap tokens result in the world outside of US adopting their models, into production applications and workflows

[Nikita Bier @nikitabier]

How it feels demonetizing accounts that pretend to be Americans and attempt to divide us

Happy 4th

[oops @fataloops]

Big question. Me personally, I'll stop reading the code when they control the entire power infrastructure along with the NSA's existing spy grid. At that point reading the code could be offensive to the overlord.

In reality, I see limits. Models are still bad at infrastructure tasks. They're great at language, bad at multi-part networks comprised of switches, routers, ESXi or Xen hypervisors running different machines in separate vlans that are all part of the same physical network.

They can tell you what the manuals for all of your different technologies say, and how it should behave in a blue sky scenario. Throw a wrench in that requires troubleshooting separate but interconnected systems; they'll spin you in circles for hours until you decide to figure it out yourself.

When we as a collective of engineers submit and fully stop reading the code, we no longer have control. At that point things become dangerous and unpredictable

[oops @fataloops]

@waterloo_intern Hot take

Egypt lost

[oops @fataloops]

@elonmusk B A N G E R

[oops @fataloops]

@RapidResponse47 @POTUS entire speech was unbelievably inspiring. you can't watch this and not be proud to be an American

[oops @fataloops]

@nikitabier @Clavicular0 only $39 a month to "ascend me"...
i wonder if i pay him am i allowed to post pictures of me flexing in my underwear

[oops @fataloops]

@meijer_s I usually store text in files and pass the file with my edits

[oops @fataloops]

@petikvx Are the prompts something that was added or is this an educational/poc malware

[oops @fataloops]

Does anyone have and actually use an Apple Vision Pro? Seems like an awesome product but I don't know anyone who's tried it.