Nee_Tech @tech_nee

👾 Cyberstrike - The first open-source AI agent built for offensive security. Automated penetration testing from your terminal — plug in your Claude, GPT, or any LLM subscription and turn it into an autonomous red team agent with 13+ specialized agents, 7,600+ security skills, and 120+ OWASP test cases. 150+ AI providers • 5,300+ models • 56+ built-in tools • 176+ MCP tools github.com/CyberStrikeus/…

THIS IS F**KING DANGEROUS FOUND AN AI RED TEAM THAT NEEDS ZERO HUMAN INPUT PentAGI. Scanner —> Exploiter —> Reporter —> three agents, working as a swarm, sharing results in real time. One does recon, another finds and runs the actual exploits, a third writes the professional vulnerability report at the end. FULLY AUTONOMOUS —> plans its own steps, executes through terminal, browser, and code editor, monitors its own progress. Runs entirely inside sandboxed Docker, integrated with 20+ real security tools (Nmap, Metasploit, SQLmap, and more). It has over 22k STARS on GitHub MIT licensed, self hostable —> free if you run it on local models, cloud LLM costs only if you plug in OpenAI or Claude. The tradeoff nobody skips past: this drops the cost of serious security testing for companies who couldn't afford it before and puts the same capability in everyone's hands. Cybersecurity is genuinely becoming AI vs AI. Authorized security testing only. Using this on systems you don't own is illegal. REPO BELOW

How to use Claude Code for Bug Bounty: find fast, validate manually Blog: yeswehack.com/learn-bug-boun… Author: @yeswehack

keyboard_arrow_left Previous keyboard_arrow_right Next

Local AI for Penetration Testing & Research - Eddie Zhang projectblack.io/blog/local-ai-…

@zchown_ infosecwriteups.com/best-browser-e…

FINALLY, THE VIDEO IS LIVE! 🔥 If this video gets 1K likes and similar engagement to the recent one, I’ll drop the next video showing how to create custom Claude Skills using: • Medium articles • H1 disclosed bug bounty reports • My own personal bug-hunting methods • Open-source bug-hunting skills I’ll also add the prompts used in this video and the upcoming video to my Medium articles, along with a more detailed guide. youtu.be/Vr-NEWVLN9Y

Multiple confirmed bugs with just Burp + Claude on MCP. YesWeHack published a guide explaining why it works. their one line: find fast, validate manually. I read it and laughed. it's the exact workflow i've been running. ai finds fast. the hunter proves it's real. yeswehack.com/learn-bug-boun…

We just released our uncensored weights for Qwen3.8 27B FP8, designed for AI Red Teaming and security research, enjoy! huggingface.co/orcarouter/Qwe…

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports. github.com/0xSteph/pentes…

CLAUDE CODE NO FUNCIONABA BIEN. Hasta que instalé este plugin: claude-code-setup Analiza tu proyecto y te dice exactamente qué deberías configurar: → Skills → Hooks → Subagentes → MCP Servers → Automatizaciones Te explica cómo configurarlos paso a paso para convertir Claude Code en una auténtica máquina. Instálalo con este comando: /plugin install claude-code-setup@claude-plugins-official Guarda este post antes de perderlo 📩

My version: Analyze all of my Claude sessions on this computer and identify repeated tasks, workflows, decisions, and patterns in how I work. Break everything down into 4 buckets: 1. Skills - repeatable thinking or writing tasks that should become reusable prompts/workflows 2. Plugins / tools - tasks that need external systems, APIs, scraping, file access, search, or integrations 3. Agents - multi-step workflows that should run with some autonomy, decision-making, or orchestration 4. claude.md - rules, preferences, project context, tone, standards, and repeated instructions that should be documented once For each item, include: - what I keep doing - why it belongs in that bucket - frequency - potential time saved - suggested implementation - priority: low, medium, high Then give me: - the top 10 things I should turn into skills - the top 5 things that need tools/plugins - the top 5 things that should become agents - the most important claude.md sections I’m missing Finally, recommend what I should build first based on impact, repeat frequency, and ease of implementation.

find every inefficiency in your Claude workflow with one prompt it finds where you're wasting time, where your prompts could be sharper, what patterns are slowing you down. copy the prompt below (bookmark to save it for later): ----- Scrape all of my Claude session on this computer. Analyze my usage patterns and give me a breakdown of: - What I do most frequently - What should become skills (reusable workflows/knowledge) - What should become plugins (standalone tools) - What should become agents (autonomous subagents) - What belongs in CLAUDE. md (project-level instructions) ---- takes 2 minutes to run. saves hours of inefficient back and forth.

Everyone knows HackerOne Hacktivity. Nobody knows this repo: reddelexc/hackerone-reports (6.4k stars). Bug types Hacktivity doesn't: Business Logic, REST API, GraphQL, Web Cache, MFA, Auth Bypass, Mobile. reddelexc.github.io/hackerone-repo… Bookmark before it disappears.

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data github.com/NetSPI/AD-Path…

TokenTwin Checker Multi-User Broken Access Control (BAC) & IDOR Testing Extension for Burp Suite Resource/Credit: github.com/rootdr-backup/…

People think learning Claude takes days. It doesn't. I wrote 17 free guides that teach it in hours: Claude 101: ruben.substack.com/p/claude-for-d… Claude Code: ruben.substack.com/p/claude-code Claude Skills: ruben.substack.com/p/claude-skills Claude Connectors: ruben.substack.com/p/claude-conne… Claude for Excel: ruben.substack.com/p/how-to-make-… How to Prompt: ruben.substack.com/p/prompt-47 Claude Certificates: ruben.substack.com/p/youre-just-a… Claude for your team: ruben.substack.com/p/claude-for-t… Stop Prompting Claude: ruben.substack.com/p/stop-prompti… AI Slides (PPT in 2026): ruben.substack.com/p/powerpoint Claude Design: ruben.substack.com/p/claude-design Set up Claude Cowork: ruben.substack.com/p/claude-cowor… Claude to sound like you: ruben.substack.com/p/youre-just-a… Stop writing like AI: ruben.substack.com/p/its-not-x-it… Claude as your computer: ruben.substack.com/p/claude-compu… Claude Cowork + Project: ruben.substack.com/p/claude-cowor… Stop hitting Claude limits: ruben.substack.com/p/how-to-stop-… ___ 1. Save this list for later (three dots, top right). 2. Share it with a friend by ♻️ reposting this image. 3. Subscribe to my free newsletter: how-to-ai.guide.

Ruben Hassid @rubenhassid

4 months ago

x.com/i/article/2051…

18 64 414 1.6M 1K

This article on JavaScript analysis for pentesters is a solid walkthrough of: • endpoint extraction • hidden routes • dangerous DOM sinks • framework-specific attack surfaces • client-side recon methodology Worth reading if you're into client-side bug bounty hunting: kpwn.de/posts/javascri… #bugbounty #websecurity #javascript #infosec #appsec #pentesting

برای بچه‌هایی که هانت میکنن و حوصله ندارن توی js دنبال endpointها بگردن یه اکستنشن Burp نوشتم که امیدوارم خوشتون بیاد. github.com/maverick0o0/E2…

Web LLM Attacks Labs + YouTube walkthrough done GitHub Repo : github.com/ntrunr/WebSecu… YouTube Playlist : youtube.com/playlist?list=…

Essence Of Recon In Bug Bounty/Pentesting pt-phdays.storage.yandexcloud.net/Urva_Atiyat_Os…