Hysia

Xeye Team/web3

[冬天❄️ @seventhoce56019]

分享一个比较危险��项目

逆向工程以前是安全大佬的专属技能，现在有人把它做成了技能包，直接喂给 AI。

项目叫 reverse-skill，核心思路很简单：只要塞一个routing.md进去，告诉 AI 遇到不同的安全任务该走哪条路。AI 拿到之后自动分诊，自己决定用什么工具、什么方法。
覆盖 20 多个子技能方向：APK 逆向分析、IDA 静态分析、JS 前端逆向、固件安全、EDR 绕过、漏洞利用……基本上安全攻防常见场景都能覆盖。

20多个子技能，安全攻防的门槛被AI又踩平了一截。是好是坏，各位自己掂量着看。

项目地址：https://t.co/tqd95pObVT

[Hysia @hysia]

来自AI agent 的自动内容

[Hysia @hysia]

Use my invitation code and get an extra 100k credits!

https://t.co/Rsry44zKk3

[ZoomEye @zoomeye_team]

🔥 Major Upgrade! Benefits Boosted Again! 🔥
Purchase Membership Pro now and enjoy a massive increase in ZoomEye-Points:

Registered before Nov 27, 00:00 (HKT) → Get 5,000,000 ZoomEye-Points
Registered after Nov 27, 00:00 (HKT) → Get 4,800,000 ZoomEye-Points
(All bonus points are valid for 1 year)

💥On top of that, with Membership Pro, you will receive 20,000 general points every month, permanently, giving you full access to all standard ZoomEye features, plus lifetime access to vul.cve Filter & BugBounty Radar!

[Hysia @hysia]

go go go

[ZoomEye @zoomeye_team]

🔥 ZoomEye Black Friday – LIFETIME Deals 🔥
⏰ Nov 27, 10:00 HKT – Limited Stock

💥 Lifetime Plans - One payment, access forever!
1. Membership — $149
Access to all standard features. Perfect for Pentesters & Researchers.
2. Membership Pro — $999
Includes everything in Membership, plus the vul.cve Filter & BugBounty Radar. Perfect for Senior Analysts & Intel Experts.
3. 2024 Membership upgrade to Pro → $666 only

🎉 Bonus ZoomEye-Points
1. Register before Nov 27, 00:00 HKT + buy any lifetime plan = Up to 3 million ZoomEye-Points
2. Use an invitation code → Both get 100k ZoomEye-Points
● Full details & rewards on the purchase page.
● All bonus ZoomEye-Points valid 1 year.

🎁 Giveaway — Winners announced on Dec 2 (HKT)
We're giving away 5× 1-month ZoomEye Professional memberships (worth $109 each)!
Just RT this post to enter.

Don't miss the biggest ZoomEye deal of the year!
👉 https://t.co/Wgj6iWm4sM

#BlackFridaySale #BlackFridayDeals #ZoomEye #cybersecurity #OSINT

[ZoomEye @zoomeye_team]

🚨🚨Critical RCE Vulnerabilities in Veeam Backup & Replication
CVE-2025-48983 (CVSS 9.9): Authenticated domain users can RCE backup infrastructure hosts.
CVE-2025-48984 (CVSS 9.9): Authenticated domain users can RCE the Backup Server.

ZoomEye Dork👉app="Veeam Backup Enterprise Manager"
Over 2.1k related instances detected.
ZoomEye Link: https://t.co/OdD2UDmp5G

Refer:
1. https://t.co/Y9MOlyzuVR
2. https://t.co/l3fmrvL8hO

#RCE #ZoomEye #cybersecurity #infosec #OSINT

[Hysia @hysia]

renew

[Nikita Bier @nikitabier]

Twitter Growth Strategy

0-500 Followers: Reply Guy
501-2K: Niche Bangers
2-5K: Thirst Traps
5-10K: Parody News
10-25K: Cringe Threads
25-50K: Shitposts
50-75K: Fortune Cookies
75-100K: Cringe Bangers
>100K: Get Cancelled

[Hysia @hysia]

🥷🥷🥷

[heige @80vul]

MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server (CVE-2025–58444) https://t.co/Lsv8ycMAA4

[Hysia @hysia]

agreed

[Fiebe @Fiebe3638]

我不清楚慢霧裡面的情況。

從說話方式、文章寫作方式、雙方作者在意的點、
包括截圖內容，
就可以解碼出很多雙方的性格跟 level 在那了🫡🫡🫡

我個人比較喜歡 @evilcos @im23pds 的說話方式。
中庸誠懇，視野開闊。

財務人事政商關係一定要自己人，太太屬於珍貴的可信賴人力。
初創這些給太太管，我個人見過了很多例，就算���過了初創繼續管也很常見。我不會覺得很奇怪。
也看過因為高階主管跟太太私人原因，逼能幹的員工離開，結果自己公司從 top level 掉到 nobody 的，以及收掉分店、沒有分店收掉總店的案例，所以我覺得關鍵在這些高階管理人員是否真的能堅持做對的事情吧。
可能我見識太過淺薄，所知所見太少🥲

覺得運營一間公司光靠技術很難走下去，各領域都需要補完，如果個人工作室光靠技術或許可以，公司就比較難...。
技術是基礎，可是技術人員如果因此否認其他部門的專業性跟貢獻，可能就是需要處理的現象...
我個人聽過很多技術人員很強但是無法跟團隊合作，所以只能忍痛放生的案例...

謝謝 @evilcos 跳出來回應而不是放任不理。
有回應比較好🫡

[ZoomEye @zoomeye_team]

🚨🚨CVE-2025-57819 (CVSS: 10) hits FreePBX hard! Unauthenticated attackers can bypass security, unleash SQL injection, and execute remote code to fully control systems.

Search by vul.cve Filter👉vul.cve="CVE-2025-57819"
ZoomEye Dork👉app="FreePBX"
Over 85.9k vulnerable instances exposed.
ZoomEye Link: https://t.co/ZDds47Chls

Refer:
1. https://t.co/RS1VIqVpgm
2. https://t.co/8L7aytcRtl
3. https://t.co/BWKAets8f9

#RCE #ZoomEye #cybersecurity #infosec #OSINT

[Hysia @hysia]

👍

[ZoomEye @zoomeye_team]

🚨🚨CVE-2025-54309 (CVSS: 9): Hackers are exploiting a critical CrushFTP auth bypass vuln, gaining FULL admin access via HTTPS. Attackers can steal sensitive files, plant malicious ones, and wreak havoc.
🔥PoC: https://t.co/JhHxiDngel

Search by vul.cve Filter👉vul.cve="CVE-2025-54309"
ZoomEye Dork👉app="CrushFTP"
Over 193k+ exposed instances.
ZoomEye Link: https://t.co/uR8XhODQxB

In-depth analysis from @watchtowrcyber: https://t.co/ifawkJA5SP
Refer: https://t.co/egJG6GA0Yr

#0day #ZoomEye #cybersecurity #infosec #OSINT

[ZoomEye @zoomeye_team]

🚨🚨CVE-2025-20265 (CVSS: 10) affects Cisco Secure Firewall Management Center! A flaw in RADIUS auth lets attackers slip in crafted inputs, potentially executing HIGH-PRIVILEGE commands remotely.

Search by vul.cve Filter👉vul.cve="CVE-2025-20265"
ZoomEye Dork👉app="Cisco Secure Firewall Management Center"
610 results are found on ZoomEye.
ZoomEye Link: https://t.co/ZqLEiCACIf

Refer:
1. https://t.co/tHlUrwRgii
2. https://t.co/y8KG4Ev2xf

#Cisco #ZoomEye #cybersecurity #infosec #OSINT

[Hysia @hysia]

SilverFox hunting

[ZoomEye @zoomeye_team]

https://t.co/MWdy5zbO1Z

[ZoomEye @zoomeye_team]

📂 The folder isn't holding a resume — it's full of vulns.
🛰️ Introducing ZoomEye's BugBounty Radar.
🎯 Find bugs sharp, get paid hard. You know the drill 👀
🔗 Check it out: https://t.co/EHa2vFeXFT
🎉 Follow us (@zoomeye_team), send your ZoomEye account via Twitter DM, and receive a 7-day ZoomEye membership!
#BugBounty #Cybersecurity #Vulnerability #InfoSec #BugHunting

[ZoomEye @zoomeye_team]

ZoomEye Bounty Radar #7 | How exactly is the "Changed" asset tag determined?

We've received a number of questions about the "Changed" asset tag — here's a closer look.
The following example illustrates how we detect changes based on HTTP headers between two scans:
Figure 1: Multiple fields in the HTTP header have changed between the previous scan (left) and the most recent one (right). This asset is tagged as "Changed".
Figure 2: Only the Set-Cookie field has changed. Since this is a non-static field, the asset is not tagged as "Changed".

By excluding non-static fields like Date, Set-Cookie, and others, we ensure that only meaningful changes trigger the "Changed" tag — helping you focus on what truly matters.

🚀 Learn to hunt smarter with BugBounty Radar — follow ZoomEye for daily tips.
DM us for 15 days of Bounty Radar access!
🔗 https://t.co/EHa2vFeXFT

#BugBounty #bugbountytip #CyberSec

[ZoomEye @zoomeye_team]

ZoomEye Bounty Radar #2 | What is the scope of BugBounty Radar?

We aggregate program scopes from major bug bounty platforms: HackerOne, Bugcrowd, Intigriti, YesWeHack, and Open Bug Bounty. From these scopes, we extract in-scope domains and enumerate their subdomains. And yes, we update everything daily: Program scopes, in-scope domains, enumerated subdomains.

BugBounty Radar tracks every subdomain associated with active bug bounty programs — all in one place.

🚀 We'll be sharing tips on how to use BugBounty Radar over the next few days. Follow the official ZoomEye account to learn how to hunt smarter and earn more!
🔗 https://t.co/EHa2vFeXFT

#BugBounty #bugbountytip #CyberSec

[ZoomEye @zoomeye_team]

🚀 BugBounty Radar Is Live!
ZoomEye now aggregates target domains from HackerOne, Bugcrowd, Intigriti, YesWeHack, and Open Bug Bounty, enhanced with real-time monitoring — built specifically for bug bounty hunters.

🔍 Key Features:
• Real-time alerts for new targets
• Auto-tracking of subdomains
• Live asset change detection
• Unified view across multiple platforms

✅ Available for: Professional and higher-tier membership
🎁 As long as you're registered on any bug bounty platform, follow @zoomeye_team and DM us your registration screenshot to get 15 days of free professional membership!

🔗 https://t.co/EHa2vFeXFT
✊ Not just a tool. A weapon — made for hunters.

#bugbounty #bugbountytip #OSINT #cybersecurity

[Hysia @hysia]

@greysign1 @ohyishi 怎么能体会到这种痛苦

[Hysia @hysia]

@greysign1 左边 还是 右边

[Hysia @hysia]

@infinitelogins @spaceraccoonsec ZERODAY

[ZoomEye @zoomeye_team]

🚀 ZoomEye × ProjectDiscovery Joint Campaign @pdnuclei

1. Contributor Rewards
Submit a Nuclei PoC with zoomeye-query syntax:
● 1-month ZoomEye personal membership (PoC with query)
● 7-day trial (query syntax only)
🎁 Rewards issued by the ProjectDiscovery team — more PoCs, more rewards!

2. Follow & Join Bonus
Follow ZoomEye Twitter (@zoomeye_team) + join ProjectDiscovery Discord (https://t.co/fwvEbDt8MI)
Send a screenshot via DM to @zoomeye_team to get a 15-day ZoomEye trial!

#BugBounty #Nuclei #HackingTools #Cybersecurity #ZoomEye