Nithin 🦹‍♂️

Heckr | Former Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)

[Nithin 🦹‍♂️ @thebinarybot]

THEBINARYBOT'S GUIDE TO API HACKING IS AVAILABLE NOW FOR SALE !!!

Learn and find different API-related vulnerabilities such as:

-BOLA
-BOFA
-SSRF

and more...

Use code "thebotswarm" to get the product for just $5. Valid till 6 Mar.

#bugbounty

https://t.co/GJRo5XXYzM

[Calif @calif_io]

php2shell - A tale of two PHP remote vulnerabilities:

https://t.co/KEUVez9Zdl

[payloadartist @payloadartist]

Just $5k #bugbounty for a vulnerability that exposed 17 Trillion Microsoft records :( 🤯

https://t.co/XihBa3XGJW

Great find by @efaav, a talented 15 y.o. researcher!

[Dave Kennedy @HackingDave]

Quick tweet. Cybersecurity on the offense side, even with what Anthropic released today will be still a heavily restricted models and never the best.

For offense, your only choice is open weight models. I would not rely on frontier models for offensive research.

Invest in hardware or solutions that allow you to use hardware infrastructure as a service.

It will pay dividends.

In stating that, if you can get access to special programs as an organization/company - this is also an incredible option if approved through.

[James Kettle @albinowax]

Have you ever felt like a model isn't actually trying to do what you asked? Did you just ask it wrong, or is there something else at play here? In "The model isn't cooperating", I take a little look. Link below 👇

[Swissky @pentest_swissky]

We burned 11.7bn tokens to find the best cyber AI model - @AikidoSecurity
https://t.co/3RoCjk9QLx

[Nithin 🦹‍♂️ @thebinarybot]

Cloudflare is high-key THE internet atp

[Brayden @BraydenWilmoth]

Introducing "cf", an agentic CLI for the entire Cloudflare API.

You can do nearly anything. Even buying a domain is incredibly simple from the CLI.

Don't know what command you need? Run `cf cli search "look at messages stuck in my queue"` and it will return a list of relevant commands.

https://t.co/22z5R5ArEW

[Nithin 🦹‍♂️ @thebinarybot]

need to weed out some ai noise in this app ffs I don't want your fuckall news

[Nithin 🦹‍♂️ @thebinarybot]

Sure? Sure.

[Medusa @medusa_0xf]

You can copy anything but you can’t copy “personality”.

[Nithin 🦹‍♂️ @thebinarybot]

@rootxharsh is sooo goated 🐐

[Nithin 🦹‍♂️ @thebinarybot]

@ArmanSameer95 @bot what happened to you?

[Nithin 🦹‍♂️ @thebinarybot]

@gabsmashh @thedawgyg YOOO 🤣😭🤣😭

[trial @mainteemoforfun]

Flirting: https://t.co/a0BxzczB9x
Harassment: https://t.co/JCiOUj1lwC

[MTS @MTSlive]

Hacktron founder @S1r1u5_ says Claude Code didn’t hack OpenAI on its own, it took a human who had already found a Discord zero-day to know where to look:

"Everyone has the same Claude Code. It doesn't mean that they'll be doing this. My mom can have Claude Code, that doesn't mean she will start hacking now."

"@rootxharsh has a pretty good understanding of OpenAI infrastructure, and he previously found a zero day on Discord, the bug we exploited in the third party. That kind of intuition and previous understanding pointed him at the target."

"It's not like go hack OpenAI would make Astra find this kind of vulnerability. Model capabilities are not there. You still need to organize them, hand hold them, point at the right things."

"Probably GPT-8 doesn't need that. But GPT-6 or GPT 5.6, they're not there. You can't just give a long-running task which runs for six months where your goal is to hack OpenAI."
@HacktronAI

[JS0N Haddix @Jhaddix]

Today we are releasing a 1 page version of “Hacking Your Career”

https://t.co/Ca8AUDayJ9

We get a bunch of students and early career-seekers looking for resources and advice of getting their 1st gig.

This resource gives all those and more; free trainings, free certificates for your résumé, advice on résumé design, information on career verticals, small sections on interviewing and the hiring process, and more! 🫶🫶

[Nithin 🦹‍♂️ @thebinarybot]

@ArmanSameer95 @thsottiaux Pretty much like Anthropic's. Fortunately my application to the verification program was accepted early on but still there's model level guardrails for the likes of fable (cough mythos) but same workflow works fine in Opus

[Nithin 🦹‍♂️ @thebinarybot]

🔥🔥🔥

[Google VRP (Google Bug Hunters) @GoogleVRP]

📢📢📢 Attention bug hunters!

Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage?

If yes, check out his blog post 👇

https://t.co/ehwrnqHJlX

[Nasreddine Bencherchali @nas_bench]

What I'm learning on Twitter is that most people in cyber never did any actual cyber. 🤡

[Nithin 🦹‍♂️ @thebinarybot]

MAD SHIT WTAF? ARE Y'ALL SEEING JUST COUNTER CLOCKWISE?

[Ramin Nasibov @RaminNasibov]

Which way is the arrow spinning?

[Nithin 🦹‍♂️ @thebinarybot]

👀👀👀👀👀👀👀

[OpenAI @OpenAI]

We have conducted a thorough investigation into the Hugging Face incident.

We are releasing a technical report and accompanying blog post that reconstruct the agents’ activity, explain why existing safeguards failed, and detail how we’re preventing recurrence.

https://t.co/hfxlbiXXiP