Sari Bukhari

BSc Digital Forensics, ITIL, Security+, CySA+, CSAP, CEH, GCIH, GCFA, CISM, CISA, CRISC, CDPSE, CCISO, OSCP, CISSP

[Tom Dörr @tom_doerr]

Discovers real IPs behind Cloudflare

https://t.co/Ix3kVM6Tmt

[How To Prompt @HowToPrompt__]

Someone just open-sourced an autonomous AI red team that runs the full kill chain.

It's called Decepticon. A multi-agent system where one agent does recon, another exploits, another handles privilege escalation and lateral movement.. all inside a hardened Kali sandbox.

100% Open Source.

[Khairallah AL-Awady @eng_khairallah1]

🚨 BREAKING: Someone just open-sourced your own personal intelligence terminal.

It's called Crucix.

Bookmark it for later.

It watches 27 live data feeds across the entire planet and alerts you when something changes.

Governments and intelligence firms pay six figures for this kind of setup. This runs on your laptop for free.

No cloud. No subscriptions. No telemetry. Just a single Node.js server and a Jarvis-style dashboard.

What it watches every 15 minutes:

→ ACLED for armed conflict events worldwide
→ Federal Reserve economic indicators via FRED
→ OFAC + OpenSanctions for sanctions screening
→ 17 curated Telegram intelligence channels for social sentiment
→ Maritime AIS for vessel tracking and sanctions evasion detection
→ GDELT for global event tracking across 100+ languages
→ WHO for disease outbreak alerts
→ ReliefWeb for UN humanitarian data
→ CelesTrak for satellite constellation tracking: ISS, Starlink, OneWeb
→ VIX and credit spread risk gauges

Every sweep computes what changed, what escalated, and what de-escalated since the last cycle.

Hook up an LLM (Claude, GPT, Gemini), and it generates trade ideas based on cross-domain signal correlation. Without an LLM, a deterministic rule engine still evaluates everything.

18+ sources work with zero API keys. No setup friction.

100% Open Source. MIT License.

(Link in the comments)

[Tib3rius @0xTib3rius]

I just disrupted the entire Cybersecurity industry AGAIN.

[UCYBERS @UCybersX]

🚨 هل تظن ان حسابك الـ Private على إنستغرام خاص ولا يمكن الوصول اليه الحقيقة انه متاح للجميع في الواقع...💀

قام مختص في الأمن السيبراني مؤخرًا بنشر أداة تسمى "yesitsme" وهي اداة تعثر على ملفك الشخصي على Instagram باستخدام اسمك وبريدك الإلكتروني أو رقم هاتفك فقط

- تتجاوز قيود حسابات إنستقرام الخاصة
- تطابق هويتك الحقيقية مع حساباتك الوهمية
- تقوم تلقائيًا بتقييم مستوى الثقة في الحساب

اداة مفتوحة المصدر بنسبة 100%

[NaZaniin @n0aziXss]

Hacker Search Engines
Tags: #BugBounty #WebSecurity #EthicalHacking

[Di @DI0256]

CloudRip is a simple and effective tool that helps you find real origin servers hidden behind Cloudflare protection.

Test it out—it may become another tool in your toolbox!

Free video guide https://t.co/sN1gxMMIzo
@three_cube @_aircorridor @IamSmouk

[Dark Web Informer @DarkWebInformer]

Raccoon: A high performance offensive security tool for reconnaissance and vulnerability scanning

GitHub: https://t.co/ZChtOx7RYo

"Raccoon is a tool made for reconnaissance and information gathering with an emphasis on simplicity.
It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and subdomain enumeration. Every scan outputs to a corresponding file."

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Run a Linux virtual machine in your browser,
no server needed🔥

- https://t.co/8xktuoJ5k9

#infosec #cybersec #bugbountytip

[The Hacker's Choice (@[email protected]) @hackerschoice]

THC Release 💥: The world’s largest IP<>Domain database: https://t.co/o4F8M1Pqi1

All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free.

Updated monthly.

Try: curl https://t.co/5V2xLadmx5

Raw data (187GB): https://t.co/cBZOSAE89K

(The fine work of messede 👌)

[Sari Bukhari @s8t8s]

@_0b1d1 Pdf

[0b1d1 @_0b1d1]

Introducing a comprehensive SOC Incident Response Playbook a fully structured, 100+ page collection of real world runbooks built for modern security operations teams.

[Aurélien Chalot @Defte_]

Dumping LSASS is old school. If an admin is connected on a server you are local admin on, just create a scheduled task asking for a certificate on his behalf, get the cert, get its privs. All automatized in the schtask_as module for NetExec 🥳🥳🥳

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfigured DNS. ⚔️

- https://t.co/cGWegtzlRT

#infosec #bugbountytips #Cybersecurity

[Md Ismail Šojal 🕷️ @0x0SojalSec]

AI-powered pentesting framework ⚔️

with autonomous agents and 150+ automated pentesting, vulnerability discovery, bug bounty automation, and security research , tools.

- https://t.co/iGpYYciA11

#infosec #cybersec #bugbountytips

[Two Seven One Three @TwoSevenOneT]

#redteam
Hey, look! Windows with two "System32" folders.😲
Hey, keep looking at this! A process loads the same DLL twice and keeps both instances in memory.😲
#malware #blueteam

[Help Net Security @helpnetsecurity]

GUI frontends for GnuPG, the free implementation of the OpenPGP standard - https://t.co/K7NKsz9ZSp - #encryption #cryptography #OpenSource @Github #GitHub #CyberSecurity #netsec #security #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews

[Het Mehta @hetmehtaa]

Enumeration Cheat-sheet for OSCP
@hackinarticles

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚀 Subdomain enumeration tools

[Maniesh.Neupane @pwn4arn]

Tips on bypassing 403 and 401