Security | Web & Mobile Pentesting | Infrastructure & AI | Bug Bounty Hunter | 2× Microsoft MVR @msftsecurity | Cricket 🏏 github.com/ifconfig-me
- Tweets 3,399
- Following 267
- Followers 29,435
- Likes 8,967
Despite all the free marketing I do for @AnthropicAI and @claudeai, my CVP application still got rejected. 😅
5
36
3,102
After a week of testing MiMo-V2.6-Pro for bug bounty hunting, I'm honestly not impressed with its performance so far. Despite using the same target, testing methodology, and instructions for both models, MiMo failed to identify any major vulnerabilities, while Claude Code successfully discovered a high-impact security issue.
Interestingly, MiMo didn't refuse any security-related tasks, so model refusals weren't the problem. The bigger issues were workflow reliability, inconsistent tool execution, frequent interruptions, and the model occasionally stalling or stopping before completing its assigned tasks.
In autonomous security testing, it's not just about token pricing or whether a model can generate payloads. What really matters is its ability to reason through attack paths, correlate findings, adapt when an approach fails, maintain context, and execute multi-step testing workflows reliably.
Of course, this is based on my limited testing over one week, not a controlled benchmark. I'll continue evaluating MiMo before drawing any final conclusions.
At $0.29 for nearly 600K tokens, MiMo is incredibly affordable, but cheap tokens mean little if the model struggles to turn them into actionable findings. 😅
#MiMo #ClaudeCode #BugBounty #AI #CyberSecurity
I've been testing MiMo-V2.6-Pro since earlier today, and the cost is surprisingly low! 🤯 592.7K tokens for just $0.29! That's insane value for an AI coding model. #AI #MiMo #OpenCode #BugBounty
9
77
6,681
Nailed it.. Harsh bhai.. 👌👌👌 @hvgoenka
Let us get inspired by Japan for its culture, America for its innovation, Germany for its engineering, Singapore for its discipline and Switzerland for its precision. Let us learn from the best in the world.
Yet, the irony is that some choose to be inspired by Bangladesh.
1
10
1,769
These same "young and smart" Krantikaaris were mocking 76-year-old Modiji for using a teleprompter... Oh, the irony! 😂
1
7
1,771
😂😂😂😂😂
This is how you counter disinformation
Well done @DelhiPolice
All propaganda of CJP and Dipke busted.
8
1,332
This dialogue from the Hindi movie Wanted was originally directed at #PrakashRaj , but today it suits #DhruvRathee even better:
"Tu aaya nahi, tujhe yahan laaya gaya hai!" 🤣🤣🤣
11
1,308
🤟
Mr. Elon, I want to tell you one more thing. My village is so remote that there isn’t a petrol pump within 10 km, and there isn’t a hospital within 10–15 km. I also live near the Nepal border, and even reaching my village is difficult because you have to drive on some of the worst roads. Yet, despite being in such a remote area, I still get unlimited 5G internet.
4
1,493
Was running reckon with Claude on a wildcard scope - *.target.com. While analyzing JavaScript files on a subdomain, Claude caught something buried in the code - a notification app leaking multiple internal IP addresses that had no business being exposed.
Followed the thread. That internal IP led to a SCADA/ICS panel. It had authentication. But Claude dug into the API, found a flaw in the auth logic, and bypassed it completely. What came next was alarming - a full building management dashboard. Remotely, from my laptop, I could disable building alarms, trigger false alerts, control HVAC, override physical security systems. An entire building's safety, accessed through a leaked IP in a JS file and a single API auth bypass.
Submitted the report. The subdomain was clearly under the wildcard scope. Response: "Out of scope - infrastructure assets not covered." The domain matched. The finding was critical. But the asset type wasn't in the program. Technicality. #bugbounty #infosec #SCADA #ClaudeAI
5
2
144
7,364
N$🌟 retweeted
A "sabotage attack" damaged an oil pipeline in northeastern Syria, the state petroleum company announced Wednesday.
4
27
258
48,996
