Nithin 🦹‍♂️

Heckr | Former Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)

[Nithin 🦹‍♂️ @thebinarybot]

THEBINARYBOT'S GUIDE TO API HACKING IS AVAILABLE NOW FOR SALE !!!

Learn and find different API-related vulnerabilities such as:

-BOLA
-BOFA
-SSRF

and more...

Use code "thebotswarm" to get the product for just $5. Valid till 6 Mar.

#bugbounty

https://t.co/GJRo5XXYzM

[Trail of Bits @trailofbits]

We built four malicious skills to test whether skill scanners actually work. Three took less than an hour to conceive and implement. ClawHub, Cisco, and Vercel's https://t.co/nUlnRcQWyG marked them as safe. 🧵

[Nithin 🦹‍♂️ @thebinarybot]

@InsiderPhD Wohooo! Congratulations 🙌

[Satyam @sattyyouneed]

Imagine being this early

[Nithin 🦹‍♂️ @thebinarybot]

SO FRIGGIN COOL!

[Avi @_naaash_]

Found a 1-click account takeover via postMessage. No phishing, no fake login page, just one click and a full-access token.

Wrote up the full breakdown and also gave the whole site a little revamp while I was at it.

https://t.co/piH3rZg9LN

[Nithin 🦹‍♂️ @thebinarybot]

This is a harness issue I believe.

When I use deepseek v4 pro on deepseek TUI it says I'm Claude for some reason but returns Deepseek when used on Claude Code, OpenCode etc.

[Gregor Zunic @gregpr07]

I think I know why deepseek is so good

[Be5Lmt @Be5Lmt]

No quotes
No spaces
No Parentheses
No Semicolons

Still SQLi....

Collab with @or4nge16hehe

https://t.co/3sImxZUAzs

#bugbounty

[Nithin 🦹‍♂️ @thebinarybot]

🏆

[Yassine Aboukir 🐐 @Yassineaboukir]

If you’re a good bug bounty researcher, AI amplifies your skills. If you lack the foundations, you just become a victim of slop, and so do the programs you hack.

Applies to all other fields.

[Cloudflare @Cloudflare]

Cloudflare has integrated with Anthropic's Claude Managed Agents to provide a fast, isolated execution environment for autonomous code delivery. This means builders can scale agent workflows globally while strictly controlling access to private backends and easily customizing their agent’s tools and runtimes. https://t.co/HZ1kD0qVmO

[0xSabir @0xSabir]

Hidden subdomains appear more in TLS certificates than subdomain brute force.

[Nithin 🦹‍♂️ @thebinarybot]

@Kle0z I'm still experimenting but love pi
It's simple, minimal and does the work with YOLO mode and doesn't ask for any perms.

[Nithin 🦹‍♂️ @thebinarybot]

Deepseek V4 Pro for Bug Bounty 🔥

[Nithin 🦹‍♂️ @thebinarybot]

This.

[Joseph Thacker @rez0__]

@OriginalSicksec No one needs more tokens than what you can get from pro and max. Each one will find tons of bugs per month and a single paying bug pays for the subscription. You should only use them until they remove the subsidization of the tokens

[Nithin 🦹‍♂️ @thebinarybot]

I started hacking relentlessly on APIs after watching @InsiderPhD 's videos and next week I'll be on stage with them.

Trust the process and you'll get to see your heroes one day (and perhaps share a stage with them)

Thank you @BSidesDublin - if you're around please say Hi 😄

[Joseph Thacker @rez0__]

Here’s the sauce:
- agent md file with lots of disclaimers about how it’s approved testing
- a bunch of hacking skills
- /goal find a crit on target . com

That’s literally 90% of the way there and enough to blow anyone’s mind who hasn’t been convinced yet.

[JS0N Haddix @Jhaddix]

SO many hackers are so AI-pilled that they are not critically building in logging and verification to their hackbots. They are missing whole parts of their methodology due to models giving up on hard tasks. Build in gates in your prompt engineering. We'll go over this in the course.

[Intigriti @intigriti]

Our first official Burp Suite extension is live! 🤠

Intigriti Quick Scope (IQS) fetches all your public & private programs directly from the Researcher API and auto-configures your Burp scope, and mandatory request headers with a single click! 😎

Get it now in the BApp Store! 👇
https://t.co/JBpmei2boq

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

This is really cool thinking from @trq212 here, but I think I disagree with the solution.

He makes a great point about Markdown being more difficult to share and communicate ideas with, because formatting and visuals can make things super easy to understand.

My problem with the approach is that, by trading editabilty for readability, we’re separating we humans even further from the creation process.

I value Markdown because I value text. And I value text because I see it as one step away from thought.

I believe thinking is the one thing we should be careful not to outsource, and I worry what this idea smuggles in is a major step toward making our creations opaque to humans. Not just AI's creations, but ours as well.

The reason I value Paul Graham so much is because of the idea compression work that goes into writing super clean prose. It's difficult to write clearly because it requires thinking clearly.

Text makes your ideas naked, and I like that.

- What is the problem, exactly?
- What should we do to solve it?
- Why is our solution better than alternatives?

I love the challenge of crystalizing this kind of critical stuff in pure text before any technology is involved.

If we're not writing that text ourselves, and then editing it, it starts to feel a lot like bringing a strong robot to the gym.

I worry that if we vibe-think to AI and have it spit out amazing HTML, we're instantly disconnected from the idea. Like where did the idea go? It started as vibes and got put through a woodchipper and turned into someone else's HTML.

Can I see it in 4 simple bullets? Can I stare at it? Can I grapple with it. Can I tweak it? It's an idea. I need to be able to wrestle with it.

Of course we can ask the AI to summarize its brilliant HTML document into four bullets, but we'll have lost through compression and expansion some percentage of the original.

Maybe I'm being overly emotional here.

I just feel like if you didn't put the hard thinking and writing work into the original idea, and then maintain it in a format that's easy for humans to read and edit, then you have somehow surrendered something Holy to the machines. I say this as a total AI maximalist.

But I get the point he's making, and I think it's super valid.

It's hard to explain or convince people of things with a giant text file. Formatting massively helps. Images massively help. Even an interface or a video or something.

So we're synched on that. I just think it might be better to come at the output we both want in a different way.

- MARKDOWN: Easy for humans to write, hard for humans to read.

- HTML: Hard for humans to write, easy for humans to read.

Maybe the solution isn't moving the first step to HTML where it becomes more opaque to both agents and humans (plus the versioning issues Thariq talked about).

Maybe the solution is something crazy like document pairing: like you have the thought file and you have the presentation file(s).

The proposal is to ask AI to just write HTML, right? Well why not just have a separate but linked file for that? One is for crystal-clear human creation and sync between human and AI. Simplicity, clarity, precision, and human editability.

And then AI can produce whatever from that. Images, diagrams, videos, or whatever. And if you want, yes, a full HTML file that contains all of them. And that can be what you use to present or share the idea with audiences.

(Plus there's the fact that some file formats are literally directories, which could be shared with lots of related content, and then there's also things like .mdx that allow for richer content in Markdown, etc.)

I hate the idea of multiple files, but I think it's far preferable to losing the transparent, editable connection to the idea that you get with text.

Plus, the better and cheaper AI gets, the more trivial it will be to have the core thought file plus n-number of associated versions or formats that are useful for different audiences.

Basically I think it's much easier for AI to make a rich and shareable version of clean, editable thought, in the form of text, than it is for humans to stay connected with ideas as opaque HTML.

And I think the human thought-to-text connection is the most important thing to preserve.

Still thinking it through, however, and massive thanks to @trq212 for the push for all of us to evolve on this.

[Nithin 🦹‍♂️ @thebinarybot]

game theory 👎
life theory 👍

[MrBeast @MrBeast]

Everyone on earth takes a private vote by pressing a red or blue button. If more than 50% of people press the blue button, everyone survives. If less than 50% of people press the blue button, only people who pressed the red button survive. Which button would you press? BE HONEST.

[Nithin 🦹‍♂️ @thebinarybot]

@pxmme1337 @thedawgyg @AnthropicAI Wait what? Despite filling the form and telling what you do exactly?

[dawgyg - WoH @thedawgyg]

tried to tell people this would happen, and i was told i didnt know anything.. lol.. more of this will follow... people that dont run programs just dont get how bad the problem is right now..