Tuan Tran (thebl4ckturtle)

[Jessie Ho @j3ssie]

People of Pi, want a truly thorough security audit before launch?

give piolium a try https://t.co/qfB6TXl4Xq

Multi-phase thoroughly audits • specialist sub-agents • resumable state • controlled concurrency • PoC generation • final reporting

[Vivek | Cybersecurity @VivekIntel]

Vigolium — AI-Powered Vulnerability Scanner 🤖

Vigolium combines high-speed vulnerability scanning with AI-driven security testing.

Features: • 250+ vulnerability detection modules
• Active & passive scanning
• OAST support (Blind XSS, SSRF, Command Injection)
• OpenAPI, Postman & Burp support
• Authenticated testing for IDOR/BOLA
• AI-powered code auditing and finding triage
• Autonomous agentic security testing

A useful open-source project for pentesters, bug bounty hunters, and application security professionals.

📌 Credit:@Vigolium @j3ssie
🔗 https://t.co/YgajuEg69E

#CyberSecurity #Pentesting #BugBounty #AppSec #SecurityResearch

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Shipped Vigolium with @j3ssie — a scanner that doesn't waste your time 🚀

⚡ 250+ native modules, signal over noise
🤖 AI agents auditing code + traffic like a real engineer
🔓 100% open source, one-line install

And we're just getting started 👀

[Jessie Ho @j3ssie]

We just launched @Vigolium a high-fidelity vuln scanner in Go, fully open source

Built it to stop drowning in false positives:
⚡ 250+ native scan modules, low-noise by design
🔍 AI agents that thoroughly audit traffic + source code
🛠️ CLI · Beautiful UI · traffic ingestor

Want your app to have proper security audit? Give it a try at https://t.co/9ttDoWz4ow

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

We’re applying AI directly to pentesting workflows — not just for assistance, but to actively navigate attack paths and adapt in real time.

This is how we’re starting to apply AI in real-world offensive security.

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

AI is moving into the exploitation loop ⚙️

Watch this demo: an agent that analyzes, reasons, and chains exploits across complex scenarios — with minimal guidance 🤖

#AI #CyberSecurity #Pentest #Infosec #bugbountytips #burp

[Caido @CaidoIO]

🚀New plugin in the Caido Store!

Introducing "JQ" by Quan Le (Unit 515, OPSWAT)

Run jq filters against captured JSON to quickly view specific keys, values, or nested data in requests and responses.

Check out more details: https://t.co/jBTxLCZmb9

[Osmedeus @OsmedeusEngine]

🚀 Osmedeus v5.0.1: Agent & LLM Integration

Added ACP support to orchestrate AI agents like Claude Code, Codex.

Other features in this release: SARIF, Nmap, tmux integration, workflow routing, webhooks.

You can now also use Osmedeus via your AI agent:
https://t.co/erw4v9I0mg

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

A pleasure being a core contributor to Osmedeus and doing my fair share of bug hunting along the 🐛

#security #bugbountytips

[Jessie Ho @j3ssie]

🚀 I’m thrilled to released a new complete re-architecture from the ground up @OsmedeusEngine v5.0 – A Modern Engine for Security Automation!

If you care about security automation, you don’t want to miss this

✨ Key Upgrades:
- 🔧 New Core: Works with plugins and simple config files, supports step-by-step workflows with conditions and custom settings
- ⚡ Runs Anywhere: Works on your machine, in containers, or on remote servers; spread work across multiple systems, schedule tasks, or trigger them automatically
- 🔗 Easy Connections: Built-in API, database support, cloud storage, chat notifications, and AI-powered steps
- 🎨 User-Friendly: Clean dashboard to view results and manage workflows visually

#bugbounty #infosec #bugbountytips #infosec #security #pentesting #recon

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

🚀 MutaFuzz v1.0.1 Released!

🔧 Bug fixes:
- Calibration delay & request persistence

✨ Improvements:
- Cleaner WildcardFilter API
- Major code cleanup

📖 Docs: https://t.co/YQIqS3YHf8
⬇️ Download: https://t.co/lfAqL1qjw2
#BurpSuite #WebSecurity #bugbountytips

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

@albinowax 🚀 I just published this extension! 🚀

You can learn more about it here:

Github: https://t.co/I3xGa3CQCL
Doc: https://t.co/ApReXFLpVj

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Just finished work on my custom Burp Extension for advanced HTTP Fuzzing! 🚀

Design inspiration for this extension from @albinowax's Turbo Intruder!

#bugbountytips #burp #extension #bugbounty

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Advanced parameter fuzzing in action 🎬 😎

MutaFuzz automatically injects payloads into every param from your Proxy requests, then filters
results to show only interesting responses

Github: https://t.co/I3xGa3CQCL
Doc: https://t.co/YQIqS3YHf8

#BurpSuite #bugbountytips

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Got a list of URLs from different hosts? MutaFuzz fetches them all at once 🚀

View responses side-by-side in the request table with powerful filtering like a database ->

Github: https://t.co/I3xGa3CQCL
Doc: https://t.co/2Cw0jd14Zi

#burp #BugBounty #bugbountytips #bugbountytip

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Fuzz anywhere in HTTP requests with just 3 clicks.

MutaFuzz cuts fuzz-to-results time by 90%. Right-click anywhere, Python when needed, Learn Mode filters noise.

Watch the demo 👇

Github: https://t.co/I3xGa3CQCL
Doc: https://t.co/2Cw0jd14Zi

#bugbounty #infosec #burpsuite

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

#infosec #pentesting #BurpSuite #BugBounty #Security

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

🚀 MutaFuzz v1.0 is here!

The HTTP fuzzer that doesn't limit you. Python scripting, custom logic, intelligent filtering—your fuzzing, your way.

https://t.co/I3xGa3CiNd

Inspired by @albinowax's Turbo Intruder
Shoutout to @j3ssie for feature ideas & the name! 💡

Thread 🧵

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

Get started now:

📚 https://t.co/ApReXFKS5L
⬇️ https://t.co/I3xGa3CiNd

MIT License. Free forever.

Built for bug bounty hunters, pentesters, and security researchers.

Feedback welcome! 🙏

[Tuan Tran (thebl4ckturtle) @thebl4ckturtle]

@zseano Sorry for your loss