Tox1c

🌍 Redroom — Real-Time OSINT Intelligence Platform An open-source platform for geopolitical intelligence, news aggregation, and AI-assisted OSINT analysis. ✨ Features: • Real-time global OSINT news aggregation • AI-powered threat and narrative analysis • Interactive globe with intelligence overlays • RSS crawlers, SIGINT & satellite tracking • Role-based analyst dashboard and CMS 🔗 github.com/Owlinkai/redro… #OSINT #ThreatIntelligence #CyberSecurity #GeoPolitics #OpenSource #InfoSec

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management github.com/OWASP/Nettacker

SearchPhone OSINT tool for looking up linked phone number information, using multiple APIs to gather information from various sources. Developed for use with Python from the terminal. Source/Credit: github.com/HackUnderway/S…

🦈 Bruce Firmware — Offensive Security Toolkit for ESP32 An open-source ESP32 firmware designed for Red Team operations and hardware security research. ✨ Features: • Wi-Fi auditing & network analysis • BLE, RFID, IR & RF capabilities • BadUSB and JavaScript scripting • Supports M5Stack, LilyGO, Cardputer & more • Web-based interface with modular hardware support 🔗 github.com/BruceDevices/f… #CyberSecurity #RedTeam #ESP32 #InfoSec #OpenSource

Found this old certificate in my Google Drive today. August 2023. 100 hours of coding and 15 projects. This is where it all started for me. ude.my/UC-0e3b71cc-83…

🚨 Two actively exploited zero-days affecting SonicWall SMA1000 appliances: CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 (CVSS 7.2) I’ve created vulnerability detection templates here (with confidence levels): CVE-2026-15409: github.com/rxerium/rxeriu… CVE-2026-15410: github.com/rxerium/rxeriu… CVE-2026-15409 is remotely exploitable without authentication, while CVE-2026-15410 requires an authenticated administrator. Platform hotfixes are available through SonicWall’s security advisory: psirt.global.sonicwall.com/vuln-detail/SN…

Want to know what API hacking looks like? 👀  Here: 👇

PatchaPalooza – Analyze CVEs, Exploited Vulnerabilities & Patch Trends in Minutes 💥💀 PatchaPalooza is an open-source tool for exploring Microsoft Patch Tuesday vulnerabilities using data from the Microsoft Security Response Center (MSRC). It helps security professionals quickly identify high-risk CVEs, actively exploited vulnerabilities, CVSS scores, and patch trends—all from a simple interface. While the original CLI is no longer actively maintained, the project now lives on as an interactive web platform with even more capabilities. ✨ Key Features: • 📥 Fetch the latest Microsoft Patch Tuesday data from MSRC • 💾 Store vulnerability data for offline analysis • 🔍 Search and analyze specific months or full-year patch releases • 🚨 Identify actively exploited vulnerabilities • 📊 Filter CVEs by CVSS score to prioritize remediation • 📄 View detailed information for individual CVEs • 📈 Generate statistics and vulnerability category breakdowns • 🌐 Interactive web version available with enhanced analysis features 🔗 github.com/xaitax/PatchaP… #CyberSecurity #PatchTuesday #VulnerabilityManagement #CVE #ThreatIntelligence #BlueTeam #Microsoft #OpenSource

APKXHunter is an Android Static Analysis Framework written entirely in C, purpose built for Android security assessments, reverse engineering, bug bounty hunting, malware analysis, and penetration testing. Resource/Credit: github.com/SyscallX-18113…

BloodHound MCP: Automating Active Directory Analysis with AI Read: hackingarticles.in/bloodhound-mcp…

FortiGate 7.6 Operator just focusing on the fundamentals and building practical skills step by step. #Cybersecurity #Fortinet #NetworkSecurity

worth it frrr learn.eccouncil.org/certificate/b8…

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

First-Ever 1- Click Android 17 Exploit Allows Attackers to Gain Full Control Over Your Android Phone Source: cybersecuritynews.com/android-17-roo… A full-chain exploit dubbed "IonStack" demonstrates how a single malicious URL click can hand attackers complete control over an Android device. The proof-of-concept, described as the world's first public Android 17 root demo, chains two zero-day vulnerabilities spanning Firefox and the Linux kernel to achieve remote code execution and privilege escalation without further user interaction. The exploit chain works by first compromising the Firefox renderer process through the browser flaw, then pivoting to the underlying Linux kernel (which powers Android) to break out of sandbox restrictions entirely. #cybersecuritynews #android

My blue tick is here 😍

I'm new to X. Hey @X algorithm, connect me with more tech people and security researchers. I want my timeline full of people focused on Security Researching, CTFs and Bug Hunting. If you’re into Tech, Cybersecurity, Bug Bounty or CTFs say hi.👋🏻 #CONNECT #BuildInPublic

Congratulations to me for my 1 follower😭

Just wrapped up the Cisco Ethical Hacker course. Its free and actually a pretty decent refresher for intermediate concepts. Good to check the fundamentals off the list @LearningatCisco

View my verified achievement from @learningatcisco. credly.com/badges/287da32… via @credly

Which is more difficult: 5 million impressions or 500 premium followers?