Okwudiri Ifeanyi

[Alex Veremeyenko @alex_verem]

If you use AI to test apps for security holes, you should check out this reverse-skill.

It's sitting at more than 30k stars and 4,600 forks on GitHub.

Hand an AI agent an Android app, a compiled binary, or a page of obfuscated JavaScript and it starts guessing commands. It doesn't know whether the job needs jadx, Frida, Ghidra, or a packet capture, so it stumbles through tools like a first-year intern.

reverse-skill fixes that with a routing layer.

The agent reads the task, matches it against 43 routing rules, and lands on the right playbook out of 44 skill modules.

Android reversing, iOS, malware analysis, firmware, API security, and even CTF puzzles each get their own entry point.

The part I like most is the scope gate. Before the agent touches any target, it has to confirm authorization and set up a case file. No permission on record means no action. Whoever built this understood that an AI that can run a pentest also needs a leash.

Each case leaves behind a timeline and an evidence chain, and the whole thing is client-neutral, so it works the same on Claude Code, Cursor, Codex, or OpenCode.

A 173-case regression suite runs on every push, so a bad routing rule fails in CI instead of failing on your machine.

It's meant strictly for systems you own or have written permission to test.

The link is in the replies.

[Okwudiri Ifeanyi @s5treak]

@LoganOpSec Congrats bro!

[Okwudiri Ifeanyi @s5treak]

@uMdaliWethu Congrats bro!

[Hamma Bappah @Baffa_Umar]

Day 5 of Calling Out @chippercashapp

I would like to call the attention of the relevant Nigerian authorities @cenbank @NDICNigeria @fccpcnigeria @officialEFCC @icpcnigeria @OfficialDSSNG to the activities of Chipper Cash. For over a month now, many users have reportedly been unable to withdraw their funds or carry out transactions through the platform.

The authorities responsible for addressing issues of this nature should urgently look into the matter and take appropriate action to ensure that affected users can access their funds and resume their normal daily activities.

People should not be left without access to their money for such an extended period.

Thank you.

[Okwudiri Ifeanyi @s5treak]

@DatEdoBBoi @ONLY1EMIZO @chippercashapp Did it work ? I tried and it reversed

[Hamma Bappah @Baffa_Umar]

Day 1 of Calling Out @chippercashapp

I would like to call the attention of the relevant Nigerian authorities @cenbank @NDICNigeria @fccpcnigeria @officialEFCC @icpcnigeria @OfficialDSSNG to the activities of Chipper Cash. For over a month now, many users have reportedly been unable to withdraw their funds or carry out transactions through the platform.

The authorities responsible for addressing issues of this nature should urgently look into the matter and take appropriate action to ensure that affected users can access their funds and resume their normal daily activities.

People should not be left without access to their money for such an extended period.

Thank you.

[Okwudiri Ifeanyi @s5treak]

@EjioguSunray @chippercashapp Any luck at your side?

[Okwudiri Ifeanyi @s5treak]

@Baffa_Umar @chippercashapp @cenbank @NDICNigeria @fccpcnigeria @officialEFCC @icpcnigeria @OfficialDSSNG Omooo I didn’t know they were having issues… haven’t used the app for months.. just randomly deposited money and now it’s stuck

[Okwudiri Ifeanyi @s5treak]

@yusufkbashir3 @chippercashapp Guyyyy it’s crazy

[Okwudiri Ifeanyi @s5treak]

@DatEdoBBoi @ONLY1EMIZO @chippercashapp Okkk mine is now pending… thank youuu… I’m watching it

[Okwudiri Ifeanyi @s5treak]

@ONLY1EMIZO @chippercashapp @DatEdoBBoi Omooo have you gotten any update from there

[Okwudiri Ifeanyi @s5treak]

@chippercashapp What’s happening @chippercashapp I’m unable to withdraw

[Okwudiri Ifeanyi @s5treak]

@blindma1den Interested… can I dm ?

[Okwudiri Ifeanyi @s5treak]

@chippercashapp @EjioguSunray I’m also unable to withdraw

[Okwudiri Ifeanyi @s5treak]

@sudosu01 Can I dm you

[Okwudiri Ifeanyi @s5treak]

@sudosu01 Great Job!

[Aseem Shrey @AseemShrey]

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end.

Nested /batch/v1 "double confusion"
· (CVE-2026-63030) → WP_Query SQLi
· (CVE-2026-60137) → anonymous shell on a stock install.

A couple of prompts later:
· Opus 4.8 orchestrating, Sonnet agents executing.

Exploit dev has gotten scary easy.

Patched in 6.9.5 / 7.0.2 - update now. 👇

[Co11ateral @co11ateral]

We covered various software that can be used for data exfiltration. Many of these tools are legitimate and signed

[Frey @Fr6ey]

Web LLM Attacks Labs + YouTube walkthrough done
GitHub Repo : https://t.co/aE01SJ4JeM
YouTube Playlist : https://t.co/tWFqXlKBls

[Okwudiri Ifeanyi @s5treak]

@topherdzgns @Owners_Corner @TrendingEx @Allibendo I’ve been following one of their senior roles since last year… it has been filled since last year ? How is that even possible?