Nee_Tech @tech_nee

I got $90,000 for a RCE in Google. simonkoeck.com/writeups/googl…

𝗔𝗜 𝗿𝗲𝗱 𝘁𝗲𝗮𝗺𝗶𝗻𝗴 is now a must-have skill — and this GitHub guide (800+ ⭐) is the whole playbook: NIST AI RMF, OWASP GenAI Top 10, MITRE ATLAS, 4-phase method, 13+ tools (PyRIT, Garak, promptfoo…). buff.ly/WWf6QIa #AISecurity

Whoever created this, huge respect. webhacklist.com

New CloudPEASS release! K8s-PEAS is the new Red Team k8s script from github.com/peass-ng/Cloud…. Use it to find the permissions of a compromised principal in a kubernetes cluster during a Red Team. If you want to learn kubernetes Red Teaming check: hacktricks-training.com/courses/krte/

Active Directory Attack Architecture Map v2.0 kypvas.github.io/ad_attack_arch…

The largest open-source cybersecurity skills library for AI agents github.com/mukul975/Anthr…

Alhamdulilah, My highest bounty so far, this was found back then using opus 4.6(and some skills) on azure horizondb CVE-2026-85878

New SQLi technique (concatenation): `'||Column_name--+` Then: `'||table_name.column_name--+` using dot notation. So: `'||not_valid_column_name--+` → returns an error `'||valid_column_name--+` → success `'||valid_table.valid_column--+` → success I got a bounty for this f*king sample POC cause akamai and backend limited it to 8 chars. I was lucky because the column name was `id` on @Bugcrowd #bugbounty #bugbountytips

new era site for reading top bug bounty writeups webhacklist.com/#museum

For those yet to see it Full hunting flow now all urs github.com/mdpsec/bug-bou…

nealbridges/vulnhunter: Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt f... github.com/nealbridges/Vu…

THIS IS F**KING INSANE I FOUND AN OPEN-SOURCE AI HACKING & RED-TEAMING FRAMEWORK CALLED G0DM0D3. It comes loaded with jailbreaks, adversarial attacks, prompt transformation techniques, and multi model testing. You can test 60+ AI models, compare their defenses, and find out which models crack under pressure. It supports OpenRouter, Venice, Ollama, LM Studio, llama.cpp & vLLM. Basically, an entire LLM security testing lab packed into one repo. AI HACKING IS GETTING SERIOUS. BOOKMARK this before someone take it down REPO BELOW

x.com/i/article/2080…

Bug Bounty Hunting, Part 2: Stealthy Parameter Detection hackers-arise.com/bug-bounty-hun…

I have open-sourced the full bug bounty workflow behind my hunting system. It covers everything from initial recon to final duplicate convergence, including access, authenticated testing, browser workflows, evidence handling, escalation, triage, independent validation, and report preparation. This is reference material for people who want to build. It is not plug and play. I am not providing setup support. You will need to adapt every integration to your own environment. If you put in that effort, it should give you a serious foundation and a lot of ideas for what an end-to-end AI hunting workflow can look like. This took a lot of work to build and prepare for release. If you find value in it, please leave a comment so more builders see it.

DeepSeek V4.1 Flash + 10M FREE tokens 😳 Top Tools AI gives you access to a bunch of AI models in one place - DeepSeek V4.1 Flash - Qwen 3.8 Max - GLM 5.3 - MiniMax M3 - Claude Opus 5 - and many more > up to 1M context > vision + tool calling > deep thinking sign up: top-tools-ai.com grab the free tokens and start testing 👀

👾 Cyberstrike - The first open-source AI agent built for offensive security. Automated penetration testing from your terminal — plug in your Claude, GPT, or any LLM subscription and turn it into an autonomous red team agent with 13+ specialized agents, 7,600+ security skills, and 120+ OWASP test cases. 150+ AI providers • 5,300+ models • 56+ built-in tools • 176+ MCP tools github.com/CyberStrikeus/…

THIS IS F**KING DANGEROUS FOUND AN AI RED TEAM THAT NEEDS ZERO HUMAN INPUT PentAGI. Scanner —> Exploiter —> Reporter —> three agents, working as a swarm, sharing results in real time. One does recon, another finds and runs the actual exploits, a third writes the professional vulnerability report at the end. FULLY AUTONOMOUS —> plans its own steps, executes through terminal, browser, and code editor, monitors its own progress. Runs entirely inside sandboxed Docker, integrated with 20+ real security tools (Nmap, Metasploit, SQLmap, and more). It has over 22k STARS on GitHub MIT licensed, self hostable —> free if you run it on local models, cloud LLM costs only if you plug in OpenAI or Claude. The tradeoff nobody skips past: this drops the cost of serious security testing for companies who couldn't afford it before and puts the same capability in everyone's hands. Cybersecurity is genuinely becoming AI vs AI. Authorized security testing only. Using this on systems you don't own is illegal. REPO BELOW

How to use Claude Code for Bug Bounty: find fast, validate manually Blog: yeswehack.com/learn-bug-boun… Author: @yeswehack

keyboard_arrow_left Previous keyboard_arrow_right Next

Local AI for Penetration Testing & Research - Eddie Zhang projectblack.io/blog/local-ai-…