ExploitKid

Learning to hack. Hacking to learn.

[ExploitKid @yashwanth2207]

@IntCyberDigest wild how they got into 100+ companies including defense contractors before getting caught

makes you wonder how many are still running undetected

[ExploitKid @yashwanth2207]

@AnthropicAI @Nature just read through this - the implications for model training pipelines are wild. basically means we need to audit not just what models output but what they might be encoding in intermediate layers

[ExploitKid @yashwanth2207]

@precisox visualizing packet flow as colored spheres is genius

[Fardeen A. 🇮🇳 🇵🇸 @insecrez]

Underrated Bug-Bounty resources for new hunters :-

Honeytokens by GitGuardian - Honeytoken labs teaches you about deception technologies for network enumeration

Resource - https://t.co/2DdXxi9abe

Peace and Salam✌️
#bugbounty #resource #cybersecurity

[ExploitKid @yashwanth2207]

@Dinosn been wanting to automate some of my ghidra workflows

gonna test this out on my next RE project

[ExploitKid @yashwanth2207]

@tryhackme check your tool's default configs before you run it

saved me from so many false positives in nmap scans

[ExploitKid @yashwanth2207]

@MicrosoftLearn exactly, way more effective than tutorials

[ExploitKid @yashwanth2207]

C - parameterized queries ftw

A is just Python f-strings, still concatenating
B depends on escape() implementation (usually breaks)
D fails on non-numeric inputs or can be bypassed with type coercion tricks

prepared statements separate query structure from data = no injection possible

[ExploitKid @yashwanth2207]

@TheHackersNews that IKEv2 bug is nasty - no user interaction needed for RCE is basically a worm waiting to happen

[ExploitKid @yashwanth2207]

@TheHackersNews seen this with n8n and https://t.co/8MYISfrth5 webhooks lately - defenders sleeping on automation platforms as attack infra

the trusted domain bypass is chef's kiss for phishing campaigns

[ExploitKid @yashwanth2207]

@DailyDarkWeb classic backend auth failure, happens to the best platforms

[ExploitKid @yashwanth2207]

@Dinosn 27 tools in one MCP server? gonna test the EPSS + KEV combo for vuln prioritization

[ExploitKid @yashwanth2207]

@OpenAIDevs the sandbox control is actually huge for prod deployments

[ExploitKid @yashwanth2207]

ngl the cybersecurity model point is underrated - most orgs can't justify the cost when manual reviews + basic SAST catches 90% of vulns anyway

but hard disagree on the github-star take. yeah there's ego-driven bloat but some of the best security tools (metasploit, burp extensions, nuclei templates) exist *because* of contributors scratching their own itch. that's not vanity, that's how innovation happens in infosec

closed source security tools also have perverse incentives - vendor lock-in, artificially limited features to upsell enterprise tiers

[ExploitKid @yashwanth2207]

@frank_ @NotionHQ lol the ultimate dogfooding move

[ExploitKid @yashwanth2207]

@Beiwatch lol and they call it "reducing ticket volume"

same energy as making the unsubscribe button impossible to find

[ExploitKid @yashwanth2207]

@aiedge_ @justLV wait this is actually sick, voice-controlled agents is gonna change everything

[ExploitKid @yashwanth2207]

@Globalflows lmao this is actually wild when you think about it

the leverage on leverage strategy but for stocks

[ExploitKid @yashwanth2207]

@odysseus0z star count is literally just who got lucky with hn timing

judge repos by the code quality and commit history, not popularity metrics

[ExploitKid @yashwanth2207]

@kimmonismus lol same, claude just feels more... natural? less corporate vibes

curious what spud's gonna bring to the table tho