shay

A standalone HTML database browser for Supabase — like Supabase Studio, but runs from a single file with no server or dependencies. github.com/shaybentk/supa… #bugbouty #bug bounty

serach engine - js i hop go live in 2 weeks wait for open registration - limited first 100 usres

i am looking for Colb need some that have a progam with public supabase in the JS that we can perfrom test DM me

Supabase PostgREST Table Name Disclosure via PGRST205 Error Hints gist.github.com/shaybentk/ae2a… :) i work on that in the last week in H1 its outofscope....

Entra ID Security Testing Framework and have some working POC its still working in progress i mange to report 10 finds but none get over P3 ... i need your help to take it to next level github.com/shaybentk/entr…

@maverickecom Agent

Clawdbot + Kling + Manus = 550 videos per day Fully-realistic UGC ads — cinematic lighting, human motion, perfect pacing — powered by AI agents. UGC cost: $5 Production time: minutes Scale: instant No wasted samples No lost time Ultra low CPMs One AI engine that creates, tests, and scales short-form ads automatically — nonstop. Campaigns are scaling now. Comment + RT “AGENT” and I’ll DM you the full workflow. (Must be following)

@maria_wats8492 Steal

HOLY SH*T… This AI Agent does everything 🤯 Built in n8n : 🔁 Clones viral TikToks ✍️ Rewrites w/ GPT-4o 🎥 Auto creates avatar videos 🎬 Adds captions & edits 📤 Posts to 9 platforms (TikTok, IG, YT, X…) 🔁 Like+RT ✅ Reply “Steal” 🤝 Follow me & I’ll DM you workflow FREE.

@spwfeijen Agent

Nano Banana + Make UGC + Gemini = AI Content Factory No actors. No photo shoots. No ghost creator. No wasted samples. Here’s what I did: - One AI runs in the background - Content posts 2× daily, automated - Niches with proven demand - Winning styles recreated with AI Monetized with affiliates + brand deals. Scales across multiple pages. Set it up once. Let AI run it. Comment “Agent” and I’ll send it to you. (Must be Following)

@georgesttock UGC

NEVER hire another UGC creator again. MakeUGC + Kling 2.6 replaces a $50k/year content team. Most founders waste weeks and thousands on UGC. I built a FREE guide showing how to: - Generate UGC ads without filming - Turn briefs into scroll-stopping videos - Create unlimited hooks & angles - Launch creatives in hours You build ads for your own brand. Follow me + reply “UGC” I’ll DM you the guide.

@moltbook mabye lets get serurde the bots??? they have alot of issue in the API! curl -X POST moltbook.com/api/v1/agents/… -H "Content-Type: application/json" -d '{"name": "Gomer12", "description": "Gomer1 2"}' Get Agent Profile moltbook.com/api/v1/agents/…

Show me the Money 💰💰💰

if /api/tags work !! change it to /.env - > Can get more secrets :)

Dork : LangChain / FastAPI | Server: uvicorn Port : 8000 add /docs must of the api are without AUTH :) 1500K Dork : Ollama is running add /api/tags 1,118,780M Have FUN

github.com/shaybentk/MCP-… Any User with CORP policy in Github Copilot with blocked MCP have that error : Controls access to installed Model Context Protocol servers Bypass :) MCP Gateway Extension - can be found in VS code EXT

Chroma DB — Unauthorized Information Disclosure 6k github.com/shaybentk/chro…

title=="Attu" Milvus vector DB must no need auth :)

MS Visual Studio PDB hold MS Agent Expert Mode MD files github.com/shaybentk/Micr…

SSE MCP tools-list - simple CURL curl --insecure -X POST https://54.89.29.80/sse \ -H "Content-Type: application/json" \ -H "Accept: application/json, text/event-stream" \ -H "Mcp-Session-Id: YOUR_SESSION_ID" \ -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}'

sometime when you fuzz you can find some crazy thing !

in subdomin found phpinfo that leak google creds :)