_kf_

outdoors, music, fitness, hacking... in no particular order

[Massimo @Rainmaker1973]

Whatever he's training for, he’s winning.

[Gabriel Santos | IA @DehumanoaDeus]

🚨 ÚLTIMAS NOTÍCIAS! O engenheiro que criou o Claude Code do zero acabou de publicar um vídeo de 28 minutos que é ouro puro :

como escrever prompts que realmente entregam resultados absurdamente bons.

Já vi cursos de US$ 300 que nem chegam perto do que ele explica nos primeiros 10 minutos.

Arquivos CLAUDE. md, atalhos de memória, sessões paralelas e padrões de prompting que quase ninguém usa…

Tudo em um único vídeo. Totalmente gratuito. Sem enrolação.

Não importa se você é desenvolvedor, está começando agora ou já usa o Claude há meses : isso muda o jogo para você a partir de hoje.

Salve. Assista. Compartilhe.

[G @G__Chain]

Cooking in the Gym ✨🥊

[Bober_smart @Bober_smart]

https://t.co/WRvaPXgqIa

[obscaries ❘ AppSec @obscaries]

An absolute goldmine for bug bounty hunters 👀💥

A massive collection of real, disclosed HackerOne reports — organized by vulnerability type, impact, and target 🎯

If you want to go beyond theory and actually understand how real-world exploits work… this is it.

Study patterns. Learn impact. Hack smarter. 🚀

🔗 Source: https://t.co/yMey4fzDbn

#BugBounty #InfoSec #CyberSecurity #EthicalHackin

[Tim Blazytko @mr_phrazer]

New blog post: Building a Pipeline for Agentic Malware Analysis

Agentic RE + malware analysis with custom skills, MCP tooling, and persistent case state to automate intial triage

Link: https://t.co/Itj9S3rA9q

Github: https://t.co/kfvjN7ot4d

[Sine @sinusoidalsnail]

...a million miles away from here 🖤🪐

[Velvet 🌿✨ @VelvetLux22]

Hey you.

Go to the gym today.

AHHHHHH

[Shyam Sankar @ssankar]

Applications for the American Tech Fellowship for Veterans run through February. The fellowship begins March 2, 2026. Learn more, share with veterans you know, and APPLY today:

https://t.co/Nb2sPsSnFN

[Wall Street Apes @WallStreetApes]

This is the United States Navy

Get ready for one of the most epic videos you’ll ever see. Yes, that’s a tank diving into the ocean

This video got 3.8 Million likes

[Secorizon @secorizon]

Let's start 2026 with a major Responder update!
It now supports:
- CLDAP ping pong to SMB auth.
- SNMPv3 authentication and hashes.
- New rogue Kerberos server forcing AS-REQ when receiving TGS-REQ + support for Kerberos type 17/18 hashes.
- IMAP support for NTLM authentication.
- SMTP support for AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM authentication.
- DCE-RPC server now supports SAMR, SRVSVC, WKSSVC, WINREG, SVCCTL, ATSVC, DNSSERVER
- DNS server now supports SOA, MX, SRV, ANY, etc
-> SOA -> Appear as the authoritative DNS server
-> MX poisoning → Email client connects to rogue SMTP/IMAP → capture credentials
-> SRV poisoning → Domain services connect to rogue SMB/LDAP/Kerberos → capture NTLM/AS-REQ
- LDAP GSSAPI, GSS-SPNEGO, NTLM, DIGEST-MD5

git pull
or
git clone https://t.co/6tT4wd0lrX

Happy new year to everyone!

[Jenish Sojitra @_jensec]

Sharing my Burp Extension that earned me $200k in 2025 while API testing heavy JS-rich targets.

https://t.co/2ttRurgoPh

The tool helps find endpoints, files, internal emails, and some secrets from minified JS.

Its goal is to achieve maximum efficiency with reduced noise in results. Contributions and feedbacks are welcome.

[Collin Rugg @CollinRugg]

JUST IN: General "Raizin" Caine gives a detailed breakdown of the U.S. attack on Venezuela, says they were so detailed that they knew what Maduro ate and where his pets were.

- 150 aircraft involved.

- U.S. forces arrived at Maduro's compound at 1;01 a.m.

- Helicopters came under fire, but "replied with that fire with overwhelming force and self-defense."

- Maduro and his wife gave up and were taken into custody.

- The youngest crew member was 20, and the oldest crew member was 49.

- Preparation took several months.

- "Those in the air over Caracas last night were willing to give their lives for those on the ground and in the helicopters."

- "After months of work by our intelligence teammates to find Maduro and understand how he moved, where he lived, where he traveled, what he ate, what he wore, what were his pets..."

- The weather was just clear enough for the mission so aviators could operate.

- All U.S. soldiers are safe.

[André Baptista @0xacb]

ATO via OAuth unsanitized schema

This is such a sneaky finding. Bugs like this just continue to prove that thinking away from the norm will go a long way. Get weird.

Blog link👇
https://t.co/4HmygB2FAh

[SpecterOps @SpecterOps]

Credential Guard was meant to end credential dumping. Nearly a decade later, @bytewreck tested what’s actually possible.

Check out his blog post detailing new credential dumping techniques that work on fully patched Windows 11 & Server 2025 systems.

➡️ https://t.co/IecFNrPSIC

[0xor0ne @0xor0ne]

Valve Anti-Cheat (VAC) reverse engineering
Writeup by @codeneverdies

https://t.co/91BDzimWW6

#cybersecurity

[vx-underground @vxunderground]

The same day the United States Department of Justice partially released details on the Jeffrey Epstein case, the Department of Justice released a few other interesting press releases.

Three of the press releases fall into our domain of cybersecurity, the remainder are related to narcotics or illegal immigration.

There is some speculation however that the large volume of press releases unveiled at the same time were intended to be a distraction from the Epstein file disclosure. However, this is just speculative.

What is not speculative however is the modifications made to the United States Department of Justice Epstein file releases.

Since the release of the files, several files have been removed from the release. People reviewing the files noted that the files redacted contained images of the current United States President.

Some individuals online asserted these statements are false and the United States Department of Justice has made no changes to the Epstein file release. However, what people seem to forget is that the internet does not forget.

After the release of the Epstein files the Department of Justice website implemented a queueing feature to prevent accidental DoS. During this time I archived the Epstein file releases so people interested did not have to wait in line.

Guess who has the original releases which contains data which is now removed? It's on vx-underground under /tmp/, it's listed as DataSet1, DataSet2, DataSet3, and DataSet4. Feel free to compare these raw datasets to the new ones.

[DirectoryRanger @DirectoryRanger]

From Veeam to Domain Admin: Real-World Red Team Compromise Path
https://t.co/RbI1bup3bD

[Karun Pal @karunpal]

Introverts live a very private life. Away. Alone. Observing. Thinking. Learning. They’re never bored alone. But people bore them. Drain them. The small talk, the drama, the masks. It's just too much noise. Too many expectations. Too much blabber with no meaning. That’s why they step away. To breathe. To feel. To reset. To reconnect with themselves. All alone.