ᗡ⅁

Technology Enthusiast
Red Teamer - Under Construction

[Nix0n @UnTalNixon_exe]

Si haces Threat Intelligence o ciberseguridad defensiva, tienes que guardar esto ahora mismo.

Crearon CLOAK, un framework al estilo MITRE ATT&CK pero enfocado 100% en las tácticas de ocultación y evasión de los cibercriminales.

🔍 ¿Qué incluye? • 1,387 TTPs documentados. • Capas técnicas, comportamentales y físicas. • 100% Open source y actualizado este 2026.

Entender cómo se esconden los atacantes es la única forma de encontrarlos antes de que sea tarde.

Te dejo la plataforma interactiva y los detalles abajo en los comentarios 🛡️👇

[Nitin Gavhane @NitinGavhane_]

100 CYBERSECURITY X ACCOUNTS WORTH FOLLOWING

[01] BUG BOUNTY & WEB SECURITY

@NahamSec → Bug bounty
@hakluke → Bug bounty tools
@EdOverflow → Security research
@filedescriptor → Web security
@orange_8361 → Exploit research
@zseano → Bug bounty
@Jhaddix → Recon
@pentest_swissky → Pentesting
@InsiderPhD → Security education
@PortSwigger → Web security

[02] RED TEAM & OFFENSIVE SECURITY

@harmj0y → Active Directory
@_wald0 → BloodHound
@enigma0x3 → Windows security
@gentilkiwi → Mimikatz
@_RastaMouse → Red teaming
@SpecterOps → AD security
@TrustedSec → Offensive security
@BishopFox → Red team research
@Horizon3Attack → Exploit research
@Synacktiv → Offensive research

[03] DFIR & BLUE TEAM

@TheDFIRReport → Intrusion reports
@EricRZimmerman → DFIR tools
@13CubedDFIR → DFIR education
@HuntressLabs → Threat research
@Velocidex → Digital forensics
@cyb3rward0g → Detection engineering
@SigmaHQ → Detection rules
@SBousseaden → Detection engineering
@mattifestation → PowerShell security
@sans_isc → Security monitoring

[04] THREAT INTELLIGENCE

@Unit42_Intel → Threat intelligence
@Mandiant → Threat research
@RecordedFuture → Threat intelligence
@TheCyberWire → Cyber news
@TeamCymru → Threat intelligence
@GreyNoiseIO → Internet intelligence
@TalosSecurity → Threat research
@Malwarebytes → Threat research
@ESETresearch → Malware research
@threatinsight → Threat research

[05] MALWARE & VULNERABILITY RESEARCH

@vxunderground → Malware research
@malwrhunterteam → Malware hunting
@hasherezade → Malware analysis
@taviso → Vulnerability research
@ProjectZero → Zero-day research
@GossiTheDog → Vulnerability analysis
@Mikko → Malware research
@_JohnHammond → Malware & CTFs
@LiveOverflow → Technical hacking
@TheRealHoanSolo → Security research

#CyberSecurity #BugBounty #EthicalHacking #InfoSec
#Pentesting #DFIR #ThreatIntel #OSINT #RedTeam

[Nicolas Krassas @Dinosn]

s1n6h/pentest-harness: Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local. https://t.co/EvYNl2wvqc

[Jordy Zomer @pwningsystems]

I accidentally turned LLM memory into program analysis

https://t.co/M06cXc3wuG

[Nitin Gavhane @NitinGavhane_]

https://t.co/exPDzS2mPK

[Poria @p__oria]

Just finished building a Burp Suite extension that automates IDOR vulnerability testing 🔍

You can now use it directly in Burp Suite to make your IDOR hunting a little less painful 😄

Give it a try and let me know what you think! 🚀
https://t.co/5alWQe6JaX

[Perly 🦈 @_Shark_byte]

I compiled over 11k bug bounty reports into one library

a little bit ago, I wanted to run some analysis on bounty reports, but had a hard time finding and compiling everything especially across platforms

so I decided to just make a library + api for anyone who wants to run any sort of tests/analysis etc

lemme know what yall think + anything to add to make it as useful as possible :)

link in replies

[HackingHub @hackinghub_io]

This is how @NahamSec uses ChatGPT/Claude for pentesting.

Simple and very effective. Check it out. 👇

[YesWeHack ⠵ @yeswehack]

AI can be a fantastic teammate for Bug Bounty hunters! 🤖

Claude Code mapped attack surfaces, spotted suspicious behaviour and uncovered real vulnerability paths.

But it still needed a human to validate the findings, prove the impact and guide it in the right direction 👀

See the full test 👇
https://t.co/iUxiojhRmB

[Lunar @LunarResearcher]

Andrew Ng just released a 75-minute Stanford lecture on full AI Engineering.

How to go from chasing perfect prompts to building systems that improve themselves:

00:05 - See why some AI teams move 10X faster
07:12 - Choose an architecture and ship fast
30:12 - Avoid the 97% accuracy trap
48:12 - Run the build → error analysis → retrain loop
57:55 - Build deep-research agents
1:06:30 - Find bottlenecks inside agent pipelines

Most people are still trying to write the perfect prompt.

Andrew Ng is teaching the full stack:

Architecture → Evals → Loops → Agents → Graphs

Prompt engineering is the old workflow.

Building systems that find and fix their own bottlenecks is the new one.

This 75-minute Stanford lecture is worth more than most paid AI engineering courses.

Bookmark and watch it today.

Then read the full agent engineering roadmap below ↓

[Bug Bounty Insights 🪄 @bbr_bug]

Recon pipeline for a new target:

1. subfinder -all -recursive
2. dnsx -resp-only
3. httpx -title -tech-detect
3. katana -jc
4. nuclei -t cves/
5. ffuf -w dirs.txt

Run in order. Each step feeds the next.

[Coffin @lostsec_]

Finally, the wait is over! 🔥

I know a lot of beginners have been waiting for this because there hasn’t been a single complete guide showing how to set up Claude Code for bug bounty hunting and using the DeepSeek API at a very affordable cost.

In this video, I’ll walk you through the entire setup step by step, and you’ll also see how powerful DeepSeek V4 Flash is for real-world bug hunting tasks.

Trust me, the results will surprise you.

🎥 Watch now and level up your bug hunting workflow.
https://t.co/tOnpkzGKq0

[Nitin Gavhane @NitinGavhane_]

Bug Bounty Methodology with OpenCode CLI

1/10
Turn your terminal into an AI-powered bug bounty machine.

Recon → Hunt → Validate → Report — all inside OpenCode.

No more context-switching. Just pure hunting flow.

#BugBounty #OpenCode #CyberSecurity #WebAppSec

[Amit Sharma @AmitSha77280075]

INSTEAD OF WATCHING NETFLIX TONIGHT.

Spend 2 hour with this. Claude AI FULL COURSE that teaches you how to BUILD and AUTOMATE anything. The people who watch this tonight will wake up tomorrow with a new skill. Watch it and bookmark it now.

[Vaidehi @Ai_Vaidehi]

🚨 BREAKING: I asked Claude to improve my LinkedIn profile.

It didn’t just improve it. It made it a recruiter magnet.

Here are the 7 exact prompts I used:

[Amit Sharma @AmitSha77280075]

🚨 Anthropic just showed a 27-minute workshop on how to actually do prompts for Claude.

Taught by the people who built it.

Free. No registration. No paywall.

I've seen $300 courses that don't cover what they teach in the first 8 minutes.

Watch it and Bookmark it now

[Swissky @pentest_swissky]

Finding Zero-Days with Any Model - @NielsProvos
https://t.co/yr0b2Adxhr

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Clone any voice in 20 seconds locally 🥹

Runs real-time on a CPU in your phone or a Raspberry Pi, a low-end laptop with no GPU😗

- Beats ElevenLabs Flash in size & cost, open-source
- 3× smaller model than ElevenLabs equivalents
- 221 tokens/sec on mid-range CPU, Real-time inference on CPU only
- Instant voice clone from JUST 3 seconds
- a foundation model, real-time on CPU laptop phone, Raspberry Pi, no API keys

- https://t.co/NLPueYPxqR

[ᗡ⅁ @gd_daredevil]

@TVSApacheSeries @tvsmotorcompany I've ordered my Apache RTX BTO edition on Feb 1, 2026. The initial slot for delivery i.e., May 15-30 is over. The 135 days time period is also over. I've gotten a call from TVS Head Office that bike will be delivered before July 1. No update yet.