SteveSchofield

[SteveSchofield @SteveSchofield]

@Da7_Tech It did my laundry, dishes, prepared my dinner and wrote 14 books 📚 next month the next new shiny model named Star ⭐️ will launch 🚀

[SteveSchofield @SteveSchofield]

@deer_avenger @catalinmpit Speed is ok. Using clause cli inside vscode I run out of context (tokens). I am using ollama on backend. It grinds through some stuff then goes off in weeds on random things. And gets the message reached Claude token. I have tried 8192. 32768 same behavior

[Catalin @catalinmpit]

For those running local models, what’s your machine configuration?

I’m thinking of selling my MacBook Pro M4 Max 48GB RAM and building a PC. Then get a MacBook Air for interacting with the LLM from the PC.

[SteveSchofield @SteveSchofield]

my attempts to use Local LLM's for coding aren't working. 3090 24GB, gpt-oss:20b and claude code aren't happy. What is your trick? Waiting for zero replies.

[obscaries ❘ AppSec @obscaries]

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Source: https://t.co/Qe1lOneVi0

#BugBounty #AppSec #WebSecurity #XSS #CyberSecurity

[obscaries ❘ AppSec @obscaries]

🔍 Exploring Wapiti, an open-source web vulnerability scanner that crawls web applications and automatically tests for issues like XSS, SQLi, SSRF, LFI, and more.

Repo: https://t.co/CoigaQUqKs

#BugBounty #AppSec #CyberSecurity #WebSecurity #Pentesting #InfoSec #OpenSource

[Hacking Articles @hackinarticles]

PowerShell-Based Active Directory Lab Setup 🚨

🔥 Telegram: https://t.co/upuP8k7Ev3
✴ Twitter: https://t.co/Za7rYIL1h6

Automate your Active Directory lab using PowerShell and build a vulnerable environment for real-world penetration testing practice—fast, scalable, and efficient.

⚡ Lab Highlights
💻 Automate Domain Controller setup via PowerShell
🌐 Install & configure AD DS + DNS
🛠️ Promote server to Domain Controller
⚙️ Configure domain, users & OUs automatically

🚀 PowerShell Capabilities
📡 Install AD DS role using commands
🔐 Create domain (forest) via script
👤 Automate user & OU creation
🔥 Configure services & policies quickly

💡 PowerShell simplifies repetitive AD lab tasks and allows rapid deployment of test environments—ideal for red teamers and OSCP prep.

📖 Article: https://t.co/GRn6WbLgLm

#ActiveDirectory #PowerShell #CyberSecurity #Pentesting #RedTeam #EthicalHacking #Automation

[Claude BUG Bounty @trybughunter]

C̶l̶a̶u̶d̶e̶ ̶B̶u̶g̶ ̶H̶u̶n̶t̶e̶r̶ is now BUG HUNTER.

We changed the name because it is no longer limited to Claude Code.

Now it is a standalone open-source CLI that runs from any terminal.

Use Ollama, Groq, DeepSeek, Claude, OpenAI or Grok.

Built for the bug bounty community.

Run it locally with Ollama - no paid AI subscription required.

We are very close to 2.5K GitHub stars. Let’s make it happen, guys.

More updates coming soon.

#OpenSource #BugBounty #CyberSecurity #AI #EthicalHacking #Ollama #GitHub #SecurityTools #BugHunter

[Claude BUG Bounty @trybughunter]

Here’s a full YouTube tutorial on how to use Claude Bug Bounty.

Huge thanks to the community member who took the time to create this walkthrough and share it with others.

Watch here:
https://t.co/E703PrkBP4

Love seeing the community helping each other and creating content around the tool. ❤️

[Densel @luckyhacker43]

"From Default IIS Page to Critical SQL Injection" 🤯🔥

👨‍💻 Ahmad Mugh33ra
🔗 https://t.co/8tfq5xi81n
Join our channel for more, link on my bio

[SteveSchofield @SteveSchofield]

@AgainstAtheismX John, Proverbs and Psalms

[JFrog Security @JFrogSecurity]

The software supply chain has a new predator. 🐛

Meet Iron Worm, the "rustier cousin" of the infamous Shai-Hulud worm. Just like its predecessor, it burrows into dev environments, steals credentials, and self-propagates through trusted GitHub and npm workflows.
Except this one is built in heavy, async Rust, hides behind an eBPF kernel rootkit, and talks over Tor.

Full teardown of the beast:
https://t.co/9Tn4G8tluW

[Vivek | Cybersecurity @VivekIntel]

BURP SUITE EXTENSIONS EVERY BUG BOUNTY HUNTER SHOULD KNOW 🔥⚔️

1.🔑 Autorize
→ Automated authorization and privilege escalation testing

2.⛏️ Param Miner
→ Hidden parameter discovery and cache poisoning opportunities

3.📜 Logger++
→ Advanced request logging, filtering, and searching

4.🚀 Turbo Intruder
→ Race condition testing and high-speed request automation

5.🎯 Active Scan++
→ Additional vulnerability checks beyond Burp's default scanner

6.🪙 JSON Web Tokens (JWT)
→ Decode, modify, analyze, and test JWT implementations

7.🪞 Reflected Parameters
→ Automatically identifies reflected user input

8.🔍 Backslash Powered Scanner
→ Detects complex vulnerabilities and edge-case security flaws

9.🔄 Hackvertor
→ Encoding, decoding, and payload transformation toolkit

10.📡 Collaborator Everywhere
→ Automatically injects Burp Collaborator payloads for OAST testing

11.📦 HTTP Request Smuggler
→ Detects HTTP Request Smuggling vulnerabilities

12.📤 Upload Scanner
→ File upload vulnerability testing and validation

💡 Commonly Used For:
• Authorization Testing
• Race Conditions
• Request Smuggling
• File Upload Vulnerabilities
• JWT Security Testing
• Cache Poisoning
• SSRF Detection
• Hidden Parameter Discovery

The difference between an average hunter and an effective hunter is often knowing which Burp extensions to use and when to use them.

#bugbounty #BurpSuite #WebSecurity #CyberSecurity #InfoSec #AppSec

[SteveSchofield @SteveSchofield]

@techspence I said that once. Just give everyone DA and problems are solved. Then I became one and realized the problems created were greater than ones solved. Perspective and wisdom

[SteveSchofield @SteveSchofield]

01 Darknet Diaries ·
02 Risky Business ·
03 Critical Thinking ·
04 Malicious Life ·
05 CyberWire Daily
06 Security Now
07 Smashing Security

[SteveSchofield @SteveSchofield]

@yonann high respect for kevin. Stay in your lane sir. I did windows for 20+ years, last few with macbook / linux. Right tool for the job.

[SteveSchofield @SteveSchofield]

@JamesCarne49587 Only the father and him knew for certain. Heaven is for real taught me that “pop”

[SteveSchofield @SteveSchofield]

@boardyai Where is my PowerPoint

[⭕ Brock Pierson @brockpierson]

This is what Internet Explorer looks like with 16 toolbars in case you were wondering.