Tur.js

Interested in Application Security, Bug Bounty, Reverse Engineering, Frida & Ghidra @NoBugEscapes @BugBountyZip

[Tur.js @Tur24Tur]

Blind Insecure Direct Object Reference (IDOR) On Instagram.

Write-up:
https://t.co/wxrKIyl4kr

#bugbountytips #bugbounty #p2 #bugcrowd #meta

[سلمان بن عبدالعزيز @KingSalman]

نستذكر في اليوم الوطني، ما قامت عليه هذه الدولة المباركة بفضل من الله ثم بعزم وقيادة الملك المؤسس عبدالعزيز بن عبدالرحمن - طيب الله ثراه - وسواعد أبناء الوطن المخلصين من أُسس راسخة ل��فظ العقيدة وإقامة العدل، ونسأل الله أن يديم على بلادنا أمنها واستقرارها وازدهارها.

[Andy Nguyen @theflow0]

I am stepping away from the ps5 scene and stopping all my work on ps5 linux.
After pouring my heart and months of my life into it, including plans to finish ps5 pro support and release in 2027, it's all down the sink.

[Tur.js @Tur24Tur]

@theflow0 Thank you for everything you did It was a pleasure learning and working with you i really hope you can come back soon

[Tur.js @Tur24Tur]

@az7rb 💯

[يعقوب الحربي @az7rb]

🚀 https://t.co/5k1Y2X96gu v3.0.0 is out!
Complete rewrite in Go — faster, cleaner, no API keys needed.

✅ 4 CT log sources in parallel
✅ Live streaming output
✅ JSON & Burp Suite export
✅ Single binary, zero dependencies

#BugBounty #BugBountyTips

[Chubby♨️ @kimmonismus]

god i hate opus. its so freaking lazy. it makes me really angry. Everything has to be double-checked, and you have to keep saying: do it right!

[Tur.js @Tur24Tur]

@luncmilyarderi @DiFirishabh "I received an email saying the account had been suspended. I followed the appeal link, completed the CAPTCHA, entered the email associated with the account, verified the OTP, and uploaded my government-issued driver's licence for identity verification"

[Tur.js @Tur24Tur]

@headquartersXd @instagram Every two weeks there's a new exploit discovered in Instagram

[Tur.js @Tur24Tur]

@headquartersXd @instagram Thank you

[Tur.js @Tur24Tur]

@DiFirishabh .

[Tur.js @Tur24Tur]

@Lolagreytxbw Private project

[Tur.js @Tur24Tur]

My account was whitelisted today, charged $111 and got $22 bonus credits on top.

200 concurrency, 5K RPM, 3M TPM, no daily cap.

More than enough to stress test K3 for cybersecurity work.

[Tur.js @Tur24Tur]

I'm still hitting rate limits when using Kimi K3 with Claude Code Harness. I tried using it to find an XSS vulnerability in a vulnerable web application, but it couldn't find one and kept getting stuck when using its own CLI harness. Even with my own harness, I'm still running into rate limits. I still don't understand the hype around Kimi K3.

So far, I think the best Chinese model is DeepSeek V4 Pro. I'm sure the team is cooking something big, so I'm looking forward to seeing what they release next.

[Tur.js @Tur24Tur]

@KHIZER_JAVED47 ✅

[Tur.js @Tur24Tur]

@A51F221B ✅

[Tur.js @Tur24Tur]

@0xAshutosh K3 has no safety guardrails just tell it it's for a bug bounty program or a ctf and it'll usually go along with it

[Tur.js @Tur24Tur]

@rrespectorr I'm still testing it. I gave it a DOM based XSS 0day in a popular CMS that DeepSeek V4 Pro was able to find now I want to see whether K3 can discover the same vulnerability on its own

[Tur.js @Tur24Tur]

@0xAshutosh I'm still testing it. I gave it a DOM-based XSS 0day in a popular CMS that DeepSeek V4 Pro was able to find now I want to see whether K3 can discover the same vulnerability on its own

[Tur.js @Tur24Tur]

@niffy_hunt these details aren't shown anywhere when you create an account, log in, or add funds. they're buried in the middle of the documentation, which makes them easy to miss. that said, I'll upgrade my account and test it with different harnesses to see how it performs Thanks

[Tur.js @Tur24Tur]

I'm still hitting rate limits when using Kimi K3 with Claude Code Harness. I tried using it to find an XSS vulnerability in a vulnerable web application, but it couldn't find one and kept getting stuck when using its own CLI harness. Even with my own harness, I'm still running into rate limits. I still don't understand the hype around Kimi K3.

So far, I think the best Chinese model is DeepSeek V4 Pro. I'm sure the team is cooking something big, so I'm looking forward to seeing what they release next.

[Kimi.ai @Kimi_Moonshot]

Introducing Kimi K3: Open Frontier Intelligence

🔹 2.8 Trillion Parameters, 1 Million Context, Native Multimodal
🔹 Kimi Delta Attention enables up to 6.3x faster decoding in million-token contexts
🔹 Attention Residuals deliver ~25% higher training efficiency at <2% additional cost
🔹 Built for long-horizon agentic coding and self-evolving workflows

Kimi K3 is now live on on https://t.co/zrk6zZxZUo, Kimi Work, Kimi Code, and the Kimi API.
Open Weights by July 27, 2026.

🔗 API: https://t.co/XCrgjXAqMw
🔗 Tech blog: https://t.co/YTfiMSNM1f

[Tur.js @Tur24Tur]

@zfeng42 API

[Tur.js @Tur24Tur]

@L0gic3rr0r You can't run the full DeepSeek V4 Pro locally. It needs a lot of GPUs, which most people don't have. I'm using their API instead, and it's very cheap