CyberSafeLabs

Most WAF bypass tools guess. HumanoidProbe thinks. 🧵 #CyberSafeLabs #BugBounty #XSS #WAF #OffensiveSecurity #Cybersecurity #InfoSec

A user's experience with HumanoidProbe! This walkthrough shows how the tool probes a web app, interprets WAF responses, and classifies observations such as Blocked, Passed, and Reflected—providing insights to guide security testing. Thanks to @bub_seen for trying it out! #XSS

Fable 5 is back.

@cybermansec pip install humanoidprobe

HumanoidProbe v1 is live. The first step in exploring a different approach to web security testing: understanding defensive behaviour, adapting to responses, and learning from observations. A tool designed to think beyond simple payload execution. #CyberSecurity #AppSec #WAF

Before firing a single payload, it sends a canary string to understand exactly what the WAF allows. Then it mutates every blocked payload based on real behaviour — not a wordlist.

A single compromised vendor can trigger widespread #cybersecurity failures. Supply chain risk isn’t optional—it’s essential to resilience. Explore practical strategies to strengthen collaboration across your ecosystem in the free report from ISC2: ow.ly/lANo50Ze2Si

Interesting to see HumanoidProbe being recognized and described online. What started as a research project has already generated valuable feedback that's helping shape the next evolution of the platform. #HumanoidProbe #CyberSecurity #CyberSafeLabs

Most WAF bypass tools guess. HumanoidProbe thinks. 🧵 #CyberSafeLabs #BugBounty #XSS #WAF #OffensiveSecurity #Cybersecurity #InfoSec

@neerajjj6785 Humanoidprobe: Good for Cyber 😉 x.com/i/status/20670…

How accurate is this? 😭

pip install humanoidprobe github.com/hellocybersafe… Humanoid sees what others miss.

@minchoi The progress is impressive, but it all starts with someone building the first version. Ship, learn, improve and repeat. 🚀

3 years of AI progress Modelscope (left) Grok Imagine 1.5 (right)

@ravikiran_dev7 CLI side for us. 🖥️ Building security tools that give researchers direct control, visibility and automation from the terminal. x.com/i/status/20670…

AI is splitting into two camps: GUI users Vs CLI users Which side are you on?

v1.0.13 starts with XSS probing. SQLi, context detection, and more are coming. This is just the foundation.

CyberSafeLabs is a cybersecurity research initiative. We exist to protect digital assets from compromise through offensive security research, vulnerability discovery, and security testing. This is where real research happens. Follow to stay close to the work. #CyberSecurity

Security and access control are becoming increasingly complex challenges in the AI ecosystem. How organizations navigate these requirements will shape the future of global technology access.

Security research often starts with small observations. A client-side parameter led to deep analysis of JavaScript behavior, app functionality, and exposed integration points. CyberSafeLabs conducts practical security research to identify risks and help protect digital assets.