Ethical Hacker | @PKU1898 ｜CEO&Co-founder @penligent｜事物の道理を探究し、知を至らせる’
penligent.ai
Joined April 2022
- Tweets1.6K
- Following855
- Followers930
- Likes7.6K
[email protected] retweeted
[email protected] retweeted
Cyber is having a moment
Across 21 major software companies, including Apple, AWS, Microsoft, and Google:
- Reported critical vulnerabilities never cleared 100 per month in four years
- Since spring they've jumped to over 600 per month
Charts of the Week: a16z.news/p/chart-of-the-wee…
[email protected] retweeted
4397328654844826923795068102505872571721883526553349659561256924505973939597593482272505698004801207988043088656411102133523080581 divides RSA-260
[email protected] retweeted
We just launched @HackingHub’s latest course: “@CaidoIO for Hackers” 🚀
Learn to maximize Caido: from intercepting and replaying traffic to fuzzing, workflows, plugins, and chaining real bugs.
18 modules. 52 lessons. Hands-on labs. Lifetime access.
Enroll 👇
hhub.io/caido2026
[email protected] retweeted
一个兄弟以前一个月写一个没人用的 app, 现在每个月用一万块钱 token 写了 37 个没人用的 app。
再展开说说第二点，这个比较考验对“快速验证”的执行和平衡。
很多人最大的误区是，我只要花几天时间vibe coding一下，就能很快验证一个产品或者一个功能有没有PMF，尤其现在有了AI，比以前更容易实现了。但实际上，一个产品的PMF绝不是你花几天时间随便搞一搞就能验证出来的，软件生产尚且如此，更别说硬件了。
这背后不光是产研的投入，更难的是建立整套售后的SOP，以及成体系的增长实验和数据检验，这中间是跨部门的磨合和培训。尤其币圈/金融场景，一个不慎就会陷入合规甚至资损的困境。
小步快跑是一个人人都懂，却鲜有人能执行到位的概念。
[email protected] retweeted
How are LLMs changing #BugBounty hunting? 🤖
We spoke to @Rhynorater about his AI workflow and how Claude Code helped him land one of the standout bugs of his career 🔥
Read the interview 👇
yeswehack.com/community/llms…
[email protected] retweeted
We want to help all companies be secure, working with the USG and the security ecosystem.
*The full version of GPT-5.5-Cyber is here; state of the art performance on CyberGym.
*Patch The Planet and Codex Security will help solve security problems instead of just finding them.
[email protected] retweeted
That's how I eat from a syringe now. I don't really want to eat myself, probably because my mom feeds me very well. 🍼
[email protected] retweeted
Most people hear "prompt injection" and think jailbreaks, making the AI say something it shouldn't.
That's the boring version; the spicy version is when prompt injection chains into a classic web vuln and leaks the entire user database.
Here's how 🧵
[email protected] retweeted
Check out the new video on the latest version of penligent ai, where I tested it against real bug bounty targets and explored some of the new features and improvements.
youtu.be/VIx7B9YxVrI
[email protected] retweeted
Exploit PoC Telegram Web app XSS / Session Hijacking 1-click
The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
youtube.com/@NullSecurityX
[email protected] retweeted
Hello, Moon. It’s great to be back.
Here’s a taste of what the Artemis II astronauts photographed during their flight around the Moon. Check out more photos from the mission: nasa.gov/artemis-ii-multimed…
ALT A crescent Earth setting behind the Moon\u2019s horizon. Credit: NASA
ALT Earth setting behind the Moon as seen by the Artemis II crew. Over half the left side of the image is filled by the gray lunar surface, pocked with craters. Credit: NASA
ALT A close view of the Moon. Jagged circles of craters dot the gray surface, fading to dark on the left side of the image. Credit: NASA
ALT A crescent Earth setting behind a hemisphere of the Moon. Credit: NASA
[email protected] retweeted
Claude code source code has been leaked via a map file in their npm registry!
Code: pub-aea8527898604c1bbb12468b…
[email protected] retweeted
🐲Kali Linux New Tools 2026🔥
• AdaptixC2 — Post-exploitation
• Atomic-Operator — Atomic tests
• Fluxion — Social engineering
• GEF — GDB debugger
• MetasploitMCP — Metasploit MCP
• SSTImap — SSTI scanner
• WPProbe — WP plugin enum
• XSStrike — XSS scanner
[email protected] retweeted
How to Leverage ChatGPT, Node.js, and GridDB for Automated News Tagging.
griddb.net/en/blog/how-to-le…
[email protected] retweeted
两个人工智能代理在电话中意识到彼此都是人工智能，于是放弃了人类语言。
Readers added context they thought people might want to know
Misleading. The creators intentionally programmed the “detect AI → switch to efficient mode” behavior for efficiency reasons.
It’s not that the AIs spontaneously invented a secret language.
sinapsediaria.com/en/how-gibberl…