Primehack

Penetration Testing, Web and Mobile Application Security Testing

[Sharbel @sharbel]

The 10 fastest growing GitHub repos this week:

1. CloakBrowser (+9.1K stars)
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 30/30 tests passed.
https://t.co/smRQh0wY3u

2. AiToEarn (+4.8K stars)
Let's use AI to Earn!
https://t.co/osmE88KhcF

3. agentmemory (+6.9K stars)
#1 Persistent memory for AI coding agents based on real-world benchmarks
https://t.co/KttGKncznV

4. UI-TARS-desktop (+3.5K stars)
The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra
https://t.co/996X92yGkM

5. 9router (+5.4K stars)
Unlimited FREE AI coding. Connect Claude Code, Codex, Cursor, Cline, Copilot, Antigravity to FREE Claude/GPT/Gemini via 40+ providers. Auto-fallback, RTK -40% tokens, never hit limits.
https://t.co/XZTRiFMThB

6. DeepSeek-TUI (+8.7K stars)
Coding agent for DeepSeek models that runs in your terminal
https://t.co/QqTT5Ak5RL

7. AI-Trader (+3.0K stars)
"AI-Trader: 100% Fully-Automated Agent-Native Trading"
https://t.co/yNpNPXf2hk

8. skills (+18.3K stars)
Skills for Real Engineers. Straight from my .claude directory.
https://t.co/PTYJ04IvSV

9. supersplat (+2.6K stars)
3D Gaussian Splat Editor
https://t.co/ajQnEqBv3Q

10. hysteria (+952 stars)
Hysteria is a powerful, lightning fast and censorship resistant proxy.
https://t.co/R83Ttz2SAP

The theme this week: free AI routing hacks and persistent agent memory are the real obsession right now.

Bookmark this. Next week's list will look completely different.

[Nav Toor @heynavtoor]

Here are 10 GitHub repos that quietly print money while you sleep.

1. Cal. com
Open-source Calendly. Fork it, white-label it, sell to dentists and lawyers for $200/month. The founders hit $5M ARR in 3 years doing exactly this.
Repo → https://t.co/haz8ihRsHm

2. Plausible Analytics
Privacy-first Google Analytics. Self-host it, resell to agencies for $50/month per client. Two founders bootstrapped this to 7 figures.
Repo → https://t.co/RFrcpqTBQ7

3. Ghost
Open-source Substack with 100% margin. 1,000 readers at $5/month equals $60,000 a year. Forever.
Repo → https://t.co/Z1MdZ5Zapg

4. n8n
Open-source Zapier. Sell automation services for $500-$2,000 per setup. n8n raised $14M because the agency model behind it works.
Repo → https://t.co/hdycABGGc1

5. Supabase
Free Firebase replacement. Build a SaaS in a weekend, charge $29-$99/month. They raised $116M for a reason.
Repo → https://t.co/dFB2QvafA7

6. Medusa
Open-source Shopify. Take 5% on every sale forever. Zero rev share to Shopify.
Repo → https://t.co/uEuCK6zuZO

7. AppFlowy
Open-source Notion. Sell self-hosted to enterprises worried about data privacy. They raised $30M because this market is massive.
Repo → https://t.co/IDMykTCkMU

8. Coolify
Open-source Vercel and Heroku. Charge developers $20/month to manage their deployments. Replace their $200 Vercel bill.
Repo → https://t.co/N5Fk22qraT

9. Listmonk
Open-source Mailchimp. Send unlimited emails for the cost of an AWS bill. Resell to agencies at 10x markup.
Repo → https://t.co/NS6Uukcklw

10. Penpot
Open-source Figma. Sell self-hosted design tools to agencies who refuse to upload client files to the cloud.
Repo → https://t.co/Lx1CYUP4p4

The difference between developers who build features and developers who build businesses is one decision.

Pick one of these. Fork it this weekend. Ship it next week.

The founders behind these repos already proved the model.

Save this. Share it with the developer in your life who deserves to break free.

100% free. 100% open source.

[Clash Report @clashreport]

Spanish PM Pedro Sánchez:

Starting next week, my government will implement the following actions:

First, we will change the law in Spain to hold platform executives legally accountable for many infringements taking place on their sites.

Second, we will turn algorithmic manipulation and amplification of illegal content into a new criminal offense.

Third, we will implement a hate and polarization footprint system to track, quantify, and expose how digital platforms fuel division and amplify hate.

Fourth, Spain will ban access to social media for minors under the age of 16. Platforms will be required to implement effective age verification systems — not just checkboxes, but real barriers that work.

Fifth and last, my government will work with our public prosecutor to investigate and pursue the infringement committed by Grok, TikTok, and Instagram.

[Primehack @prime_hack]

Listen to "Global Cyber Threat Review 2024" by Insightful Reports. https://t.co/aoRB2x0GIe

[Primehack @prime_hack]

Listen to "Advanced Cyber Threat Predictions - 2025" by Insightful Reports. https://t.co/FstPcQj6w4

[Primehack @prime_hack]

Listen to "Google Dorking: Advanced Search Techniques" by Insightful Reports. https://t.co/6iMzcfUIdA

[Primehack @prime_hack]

Listen to "Advanced Persistent Threat - Abusing Cloud Services and VPN Platforms" by Insightful Reports. https://t.co/3dG1p6zgg2

[Primehack @prime_hack]

Listen to "A Deep Dive into Cyber Threats surrounding U.S. Election 2024" by Insightful Reports. https://t.co/0Vs7ahoK0a

[Primehack @prime_hack]

Listen to "Cyber Threat Landscape 2024" by Insightful Reports. https://t.co/ARovH4LsiS

[Primehack @prime_hack]

Listen to "producing and consuming cyber threat intelligence" by Insightful Reports. https://t.co/61zbZLnVMH

[Kev @kevin_backhouse]

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.

[Tony Aubé @aubetony]

They stole my computer, so I found them and got them arrested in 24h 😤

[Orange Tsai 🍊 @orange_8361]

Me: Making slides takes time
Also Me: Spend all day making memes

[ghostlulz @ghostlulz1337]

If you want to learn more about Internal Pentesting & Red Teaming these are some really good resources

https://t.co/K6LgqmwTGJ

https://t.co/vzvlPPRDIP

https://t.co/sz8yIlmSsl

https://t.co/hEl4ZV7Syd

https://t.co/W6oaAOHpys

https://t.co/umeIdJTJno

https://t.co/gdfHpfnhuK

[Diego Jimenez @diegojimenez]

I made a quick Automation to protect my iPhone if someone steals it while unlocked: if they turn on Airplane Mode (Find My), it asks for a passcode. If wrong… it automatically locks the phone 🔒, turns ON all connectivity 📡 + Low Power Mode 🔋, and shares its current location📍

[Primehack @prime_hack]

https://t.co/HpVpqDRmJJ

[Primehack @prime_hack]

which can also raise ethical, legal, and social issues related to privacy, accountability, transparency, and trustworthiness of A.I.-based security solutions.

[Primehack @prime_hack]

5 ways #AI is going to change #cybersecurity

[Primehack @prime_hack]

A.I. can create new challenges and risks for cyber security by being used by hackers to develop more advanced and resilient malware, launch sophisticated attacks, or exploit vulnerabilities in A.I.-based systems.