mario mancini

IT Systems engineer #cloud #databases #linux #dynamics #microsoft - news #cybersecurity #cybercrime

[X @TheMsterDoctor1]

🚨 This Python library just destroyed the entire CAPTCHA-solving industry.

And almost nobody is talking about it.

It’s called Scrapling — and it bypasses Cloudflare automatically.

While most developers are still duct-taping:

• Selenium
• BeautifulSoup
• Proxy rotators
• $500/month CAPTCHA APIs

This does all of it with one pip install.

No joke.

Here’s what it does out of the box:

⚡ Bypasses Cloudflare Turnstile & Interstitial challenges
⚡ Adaptive element tracking (scrapers survive website redesigns)
⚡ HTTP/3 + TLS fingerprint spoofing + stealth browser
⚡ Full Playwright automation through one API
⚡ Built-in spider framework with pause/resume checkpoints
⚡ Streams extracted data directly to Claude / Cursor via MCP
⚡ 784× faster parsing than BeautifulSoup

Let that sink in.

An entire $200M CAPTCHA-solving industry exists because scraping tools couldn’t do this.

This repo just made it obsolete.

And it’s 100% open source.

If you build scrapers, automation tools, AI agents, or recon pipelines…

You need to see this.

(Link in comments)

[ʞʞıdɐɔoɥƆ @Chocapikk_]

900+ WordPress plugins just casually leak their presence.
No bruteforce, no guessing, just a simple request. Wild.
Haven't seen anyone using this for recon yet. 🤔
Soon.

cc: @leak_ix

[Pierluigi Paganini - Security Affairs @securityaffairs]

#KeePass 2.X Master #Password Dumper allows retrieving the KeePass master password
https://t.co/v6XdwkaflK
#securityaffairs #hacking

[mario mancini @Marioperator]

A Long-Awaited Defense Against Data Leaks May Have Just Arrived https://t.co/fgk9gubQWB

[mario mancini @Marioperator]

A New Attack Surface on Microsoft Exchange - ProxyShell https://t.co/kXjBCTZ1x7

[Matteo Carli @mcarli]

Oltre alla truffa sta funzionando anche l’estorsione in Bitcoin. È tutto bellissimo https://t.co/ni3pJIBS7x

[mario mancini @Marioperator]

https://t.co/GLrSXbt2Hx

[mario mancini @Marioperator]

FBI arrest man over alleged Amazon centre bomb plot https://t.co/6U5jQhT2mh

[Tom's Hardware @tomshardware]

Raspberry Pi 4 Gets Official Edge Impulse Machine Learning Support https://t.co/uTud6QOxqu

[mario mancini @Marioperator]

#facebook #leak #search
https://t.co/2jzT7vrnlZ

[mario mancini @Marioperator]

#GitHub has removed the #ProxyLogon exploit and has been criticized

https://t.co/pTshjr5N2Z

[elhacker.NET @elhackernet]

Mapa Servidores Microsoft Exchange potencialmente vulnerables - 64.088 IP 's vulnerables y 8.911 IP comprometidas - CVE-2021-26855 - Fuente @Shadowserver https://t.co/sKvSxZAyfM

[DirectoryRanger @DirectoryRanger]

Office 365 Extractor #PowerShell #DFIR

https://t.co/oYBy66ab7B

[Nuclei by ProjectDiscovery @pdnuclei]

Scanning for VMware vCenter Unauthorized RCE (CVE-2021-21972) using nuclei templates.

#hackwithautomation #appsec

[The Hans India @TheHansIndiaWeb]

Lead, nickel cause of 'Eluru disease' #Elurudisease #Eluru https://t.co/nRVQWJtE21

[mario mancini @Marioperator]

Remote Desktop Services Shadowing – Beyond the Shadowed Session – PT SWARM https://t.co/nl4KlTxlD9

[PT SWARM @ptswarm]

We found an Unauthenticated Arbitrary File Read vulnerability in VMware vCenter. VMware revealed that this vulnerability was patched in 6.5u1, but no CVE was assigned.

The PoC ⬇️

[mario mancini @Marioperator]

TorPi - Raspberry Pi Tor AP - 3os https://t.co/w2mgFGdpe3

[mario mancini @Marioperator]

Geo-Recon - An OSINT CLI Tool Desgined To Fast Track IP Reputation And Geo-locaton Look Up For Security Analysts https://t.co/G56zmyNCfB

[mario mancini @Marioperator]

Kerberoasting attack principle, based on the TGS request and the SPN attributes of Active Directory accounts https://t.co/iy7zO2UCDo