sellvamanoj

Founder | CISO | SRT member | Yogosha member | OSCP | OSWP | ejPT | eWPT | eWPTx | CEH

[AISecHub @AISecHub]

How do AI agents like Claude, Gemini, and Copilot compare from a privacy and security perspective when asked to complete tasks on behalf of a user - https://t.co/x2eOd3NT6C

[Nicolas Krassas @Dinosn]

Claude Code / Codex Skill for Reverse Engineering https://t.co/WskCwPu2zF

[Het Mehta @hetmehtaa]

Local AI for Penetration Testing & Research

https://t.co/w3ArdlYlcs

[Nicolas Krassas @Dinosn]

AI-powered offensive security agent with 7,300+ actionable security skills. Autonomous pentesting powered by MITRE ATT&CK (2,000+ Atomic tests), CIS Benchmarks (1,500+ controls), OWASP, NIST. https://t.co/IMTnJF3pht

[Shadcn Studio @ShadcnStudio]

🚀 AdminCN - Shadcn Admin Dashboard Template is now available!!

A versatile dashboard designed for SaaS products, internal tools, and modern web applications.

✨ Includes:

• Analytics & reporting
• Data tables
• Charts & metrics
• Forms & settings

Everything you need to get an admin panel up and running faster.

Check it out 👇

[Clandestine @akaclandestine]

https://t.co/IqcbNAwSMN

[Nav Toor @heynavtoor]

Burp Suite Professional costs 475 dollars a year per seat.

A senior software engineer in Amsterdam built the open source replacement as a side project. He put it on GitHub for free. It has 10,569 stars.

His name is David Stotijn. The software is Hetty.

Here is what Hetty is.

An HTTP toolkit for security research. A machine-in-the-middle proxy that sits between your browser and the target. Every request and every response flows through Hetty. You can read them, search them, intercept them, edit them, replay them, and send them again.

This is the core loop of every web application security test ever performed. Burp Suite charges 475 dollars a year for it. Hetty does the same job for zero.

Here is the feature set.

A machine-in-the-middle HTTP proxy with full logs and advanced search. An HTTP client for manually creating and editing requests, and replaying any request you already proxied. Request and response interception for manual review, with full edit, send, receive, and cancel control. Scope support to keep your work organized to a single target. A web-based admin interface that runs in your browser. Project-based database storage so multiple engagements stay separate. A GraphQL service for programmatic access.

The installer is a single Go binary. Works on macOS, Linux, and Windows. No Java runtime, no enterprise license server, no machine fingerprinting, no telemetry.

Here is the price ladder.

Burp Suite Professional: 475 dollars a year per seat.
Burp Suite Enterprise: thousands per year, contact sales for a quote.
Burp Suite Community Edition: free, but throttled, no scanner, no project save, no intruder rate.
OWASP ZAP: free and open source, now owned by Checkmarx after a 2024 acquisition.
Hetty: zero. Forever. One binary. No account.

A pentester working full time pays Burp 475 dollars a year. A team of 10 pentesters pays 4,750 dollars a year. A bug bounty hunter who finds one vulnerability has already paid for Burp twice over.

Or they download a 30 MB Go binary written by a freelancer in Amsterdam and keep every dollar they earn.

David has not pushed a new commit in 16 months. The last commit was January 13, 2025. That is normal for a tool that is feature-complete. HTTP has not changed. The proxy still proxies. The intercept still intercepts. MIT licensed code does not expire when the maintainer takes a break.

Buy a domain. Find a bug. Cash a bounty.

PortSwigger took a free industry tool and put it behind a 475 dollar paywall. A freelancer in Amsterdam gave it back. On every platform. For zero dollars.

Your proxy. Your binary. Your bounties.

(Link in the comments)

[solst/ICE of Astarte @IceSolst]

Claude code’s /security-review is just a Skill, and the whole prompt is in this repo

It’s p generic and imo you can tailor it to each repo to language you’re scanning to get better results

https://t.co/1a4puZSASL

[Spencer Baggins @bigaiguy]

10 WEBSITES EVERY INTERNET USER SHOULD CHECK TONIGHT.

Bookmark all of them. Most people don't know half of these exist.

1. https://t.co/zwR28T6wZa
Shows every data breach your email is in and what got leaked.

2. https://t.co/3c9sMcOYLH
Shows every social profile, photo, and login tied to an email address.

3. https://t.co/MOsvtupjHn
Free disposable email for any signup you don't trust.

4. https://t.co/t6W6t9kzvQ
Burner inbox that self-destructs in 10 minutes.

5. https://t.co/lHWq4ZeJXH
A directory of direct links to delete your account from any major service.

6. https://t.co/vpVXkaS6Uc
Check if your face was used to train AI image models without consent.

7. https://t.co/cC7q3S3Uui
Tells you if your VPN is actually hiding your real location or leaking it.

8. https://t.co/1Q31VRhSQ6
Shows how trackable your browser fingerprint is, even in incognito mode.

9. https://t.co/TVtBWcv6Sw
Tells you which programs on your PC are useless bloatware or spyware.

10. https://t.co/yvtYh3ade9
Drop any file or link. It scans against 70+ antivirus engines instantly.

The internet is hostile by default. These websites are your free defense.

[sellvamanoj @Tink2hack]

Please be cautious if you encounter this individual in Coimbatore, especially around Saibaba Colony. We experienced an incident today involving aggressive behavior and an attempt to demand money after a vehicle-related confrontation. Sharing this for awareness so others can stay alert and handle such situations carefully.

[Alex Xu @alexxubyte]

How does SSH work?

[Indu Tripathi @InduTripat82427]

Best GitHub repos for Claude Code that will 10x your next project in 2026

1. Claude Mem
https://t.co/bVq2E9j48K
Persistent memory across sessions — stop re-teaching Claude your codebase

2. UI UX Pro Max
https://t.co/vc8VeEJWgl
50+ styles, 161 color palettes, 99 UX guidelines — Claude stops building ugly UIs

3. n8n-MCP
https://t.co/jCEvyT3jEp
Connect Claude Code to 400+ n8n integrations via MCP

4. LightRAG
https://t.co/d6ow6HSadt
Graph + vector RAG — lets Claude understand large codebases structurally

5. Everything Claude Code
https://t.co/7qLwhN18N0
Skills, instincts, security scanning, multi-language coverage — full agent harness

6. Awesome Claude Code
https://t.co/QPxBMYtHLu
Community bible — curated skills, hooks, slash commands, orchestrators

7. Superpowers
https://t.co/248MDMad0Z
Forces structured thinking before writing a single line of code

8. Claude Code Ultimate Guide
https://t.co/cL6JWd5jj3
23K+ lines of docs, 219 templates, 271 quizzes — beginner to power user

9. Antigravity Awesome Skills
https://t.co/nFAffkUMMs
1,200+ ready-to-use skills — one of the largest collections

10. Claude Agent Blueprints
https://t.co/M2iNMZdPDZ
75+ agent workspace templates beyond coding

11. VoiceMode MCP
https://t.co/kOI5M6P7ac
Natural voice conversations with Claude Code via Whisper + Kokoro

12. Awesome Claude Plugins
https://t.co/QW2aHNnHdx
9,000+ repos indexed with adoption metrics — find what people actually install

Bookmark this before your next build.

[Meng To @MengTo]

Introducing Neuform

Generate next-level designs with a living DESIGN.md. Turn design systems into skills and remix into any format with unique animations, webgl and threejs.

It's available on https://t.co/S9VMMcYnqo

[DirectoryRanger @DirectoryRanger]

Active Directory Pentesting: Part 01
https://t.co/WhK2K1UOwu

[Ozmen @nozmen]

DESIGN. md concept introduced by @stitchbygoogle .
Our repo awesome-design-md brought it to the community, 35K+ stars in one week, hundreds of organic shares.

Now it has a website: https://t.co/em7WkLpuhc

Browse design systems as DESIGN. md inspired by real websites.

Preview instantly. Install with one command.

One markdown file tells your AI agent exactly how to build matching UI.

[mthcht @mthcht2]

🎉 Hundreds of new malicious browser extensions added to https://t.co/kYGDIyKGGY !

[Tom Dörr @tom_doerr]

Customizable SVG tech icons for developers

https://t.co/GMR4RVwDFn

[Nav Toor @heynavtoor]

🚨 Someone reverse-engineered the design systems of Apple, Spotify, Airbnb, and 30+ billion-dollar companies.

Packed each one into a single file. Free.

It's called Awesome Design MD.

Drop one file into your project. Your AI agent builds UI that looks like Spotify. Or Apple. Or Airbnb. Instantly.

Not screenshots. Not Figma links. A single DESIGN .md file that captures every color, font, spacing value, button style, and layout pattern from a real website. In a format AI agents read and reproduce.

Here's the difference:

Tell Claude Code "build me a landing page" and it gives you generic UI.

Tell Claude Code "build me a landing page" with Spotify's DESIGN .md in your project and it gives you Spotify.

Here's what's inside:

→ Apple. Premium white space, SF Pro typography, cinematic imagery.
→ Spotify. Vibrant green on dark, bold type, album-art-driven layout.
→ Airbnb. Warm coral accent, photography-driven, rounded UI.
→ Linear. Ultra-minimal, precise spacing, purple accent.
→ SpaceX. Stark black and white, full-bleed imagery, futuristic.
→ BMW. Dark premium surfaces, precise German engineering aesthetic.
→ NVIDIA. Green-black energy, technical power aesthetic.
→ Uber. Bold black and white, tight type, urban energy.
→ Sentry, PostHog, Raycast, Cursor, ElevenLabs, and 20+ more.

Here's how to use it:

→ Pick a design system from the collection
→ Copy the DESIGN .md file into your project root
→ Tell your AI agent to use it
→ Get UI that matches the design language of a billion-dollar company

That's it. One file. Your AI agent now has the design taste of a $200/hour design consultant.

Designers charge $5,000+ for a custom design system. Companies spend $50,000+ building one from scratch.

This is free. 31 design systems. Copy. Paste. Ship beautiful UI.

Works with Claude Code, Cursor, Codex, and any AI coding agent that reads project files.

100% Open Source. MIT License.

[AWS Developers @awsdevelopers]

Did you know AWS has a find my IP service?

Read the blog here: https://t.co/8CEPb4vMXh