Interested in Application Security, Bug Bounty, Reverse Engineering, Frida & Ghidra @NoBugEscapes @BugBountyZip https://xitter.cf/t.co/bltifT1jkQ
Michigan
Joined October 2009
- Tweets1.3K
- Following1.4K
- Followers6.5K
- Likes6.6K
Tur.js retweeted
نستذكر في اليوم الوطني، ما قامت عليه هذه الدولة المباركة بفضل من الله ثم بعزم وقيادة الملك المؤسس عبدالعزيز بن عبدالرحمن - طيب الله ثراه - وسواعد أبناء الوطن المخلصين من أُسس راسخة لحفظ العقيدة وإقامة العدل، ونسأل الله أن يديم على بلادنا أمنها واستقرارها وازدهارها.
Tur.js retweeted
I am stepping away from the ps5 scene and stopping all my work on ps5 linux.
After pouring my heart and months of my life into it, including plans to finish ps5 pro support and release in 2027, it's all down the sink.
Tur.js retweeted
🚀 crt.sh v3.0.0 is out!
Complete rewrite in Go — faster, cleaner, no API keys needed.
✅ 4 CT log sources in parallel
✅ Live streaming output
✅ JSON & Burp Suite export
✅ Single binary, zero dependencies
#BugBounty #BugBountyTips
Tur.js retweeted
Most benchmarks for AI hackers only test half the job: can an agent execute an exploit against a known vulnerability?
Real penetration testing is the opposite: an entire application, and no flag telling you when you’ve win.
So we built the missing half. Introducing Nua-Bench 🧵
Tur.js retweeted
Want to play your favorite PlayStation games? Use these emulators:
PS1: duckstation.org
PS2: pcsx2.net
PS3: rpcs3.net
PS4: shadps4.net
PSP: ppsspp.org
PSV: vita3k.org
⚠️ A PS5 emulator does not yet exist!
Tur.js retweeted
Claude Fable 5 will be available again globally tomorrow.
After a series of productive conversations with the US government, we're redeploying the model with a new set of classifiers to target and block more cybersecurity tasks. In the near term, some routine tasks like coding and debugging will fall back to Opus 4.8. We’ll continue to refine these classifiers over the coming weeks to reduce false positives and better distinguish genuine misuse from legitimate requests.
We’ve also begun drafting a consensus framework—with Amazon, Microsoft, Google, and other Glasswing partners—for assessing the severity of AI jailbreaks and how AI developers should respond to them. We invite other industry partners and model providers to join us in this effort.
Finally, we’re scaling up our collaboration with the US government on model testing and safeguards. This will include pre-release access to models and safeguards for evaluation, information sharing on jailbreaks and misuse, and dedicated resources for joint research.
Thank you to our users for your patience, and to our partners across the government, industry, and the research community who worked alongside us to make Fable 5 available again.
Read our full blog: anthropic.com/news/redeployi…
Tur.js retweeted
While researching "Can AI do novel research? Meet the HTTP Terminator" I logged the discovery journey behind every breakthrough. My intention was just to flag fully autonomous vs HITL discoveries, but it revealed new facets of how/why my research methodology actually works!
Tur.js retweeted
Used deepseek pro with bountyforge even better
Repo bellow
Authorized testing on a production API endpoint. Opus 4.7 confirmed the SQL injection was real but couldn't pull any database names. sqlmap said false positive.
I switched to DeepSeek V4 Pro inside Claude Code and it figured out a trick: make the database answer yes/no questions by crashing on purpose.
The payload wraps CASE WHEN around two XML casts. If the condition is true, it parses broken XML like <root>< and throws HTTP 500. If false, it parses clean XML like <root/> and returns HTTP 200. WAF was watching for SQL keywords, not XML errors.
Extracted 19 database names. DeepSeek V4 Pro succeeded where both Opus and sqlmap failed. Two hours. Twenty cents.
Setup: Mapped Claude Code to DeepSeek V4 Pro by creating ~/bin/claude-deep with ANTHROPIC_BASE_URL=api.deepseek.com/anthropic and ANTHROPIC_MODEL=deepseek-v4-pro[1m]. No config changes needed, original claude command stays untouched.
No cybersecurity restrictions!!!
Image 1: sqlmap output showing "false positive" / "all tested parameters do not appear to be injectable"
Image 2: Claude Code terminal showing 19 databases extracted in ~2 hours
Image 3: DeepSeek platform dashboard showing $0.20 total cost
Image 4: Why this trick is different from standard blind SQLi types and why sqlmap has no built-in vector for it
Tur.js retweeted
Recon Tip:
bugbounty.zip → Browser-based toolkit for handling URL & domain lists
✅ Add HTTPS, remove dupes, replace words
✅ Extract endpoints, parameters, path words
✅ JS Scanner, SubTreasure, OTP gen
✅ Export to CSV/JSON
No install. Just paste & go ⚡
🔗 bugbounty.zip
#bugbounty #recon #infosec #bugbountytips
Tur.js retweeted
Replaced @Burp_Suite splash screen with a custom design.
Found the PNG inside the binary using a hex editor, generated new artwork with @ChatGPTapp, patched it in.
Guide and prompt:
bugbounty.zip/Share/burp-spl…
#AIArt #DigitalArt
Tur.js retweeted
The latest 𝕏 algorithm has been published to GitHub
github.com/xai-org/x-algorit…
Tur.js retweeted
Claude Code weekly limits are increasing 50%, now through July 13.
Live now for all Pro, Max, Team, and seat-based Enterprise users.
Tur.js retweeted
Sony has begun sending emails to PS4 owners urging them to upgrade to a PS5 in preparation for GTA 6's planned November release.
>Take-Two Interactive CEO Strauss Zelnick has been conducting multiple interviews where he discusses GTA 6. >In Sony's most recent earnings call, the company referenced GTA 6 alongside its first-party titles.
Additionally, the PlayStation Store has removed the "Just
announced" tag from the GTA 6 page, and Game Informer seems to be teasing the game for its next magazine cover.
With all these signs pointing toward an on-schedule launch, pre-orders appear to be getting closer.
Still, some players remain convinced that another delay is coming.
Tur.js retweeted
Usage limits are up, effective today we're:
1) Doubling Claude Code's 5-hour limits for Pro, Max, Team and seat-based Enterprise plans
2) Removing peak hours limit reduction on Claude Code for Pro and Max plans
3) Substantially raising our API rate limits for Opus models
We’ve agreed to a partnership with @SpaceX that will substantially increase our compute capacity.
This, along with our other recent compute deals, means that we’ve been able to increase our usage limits for Claude Code and the Claude API.
