TryHackMe retweeted

NoScope@trynoscopeOct 12
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
We’re hosting a live webinar next Thursday, 22nd Oct at 9:00 AM EDT / 2:00 PM BST, on Hacking & Securing Apps Where Devs Ship AI Written Code.
@springjben and @KevalJagani1 will cover the vulnerabilities AI tends to introduce, why it happens, and how to secure them.
Register now, link in comment 👇
TryHackMe retweeted
From solving TryHackMe rooms to meeting the community in person.
Attended the first-ever TryHackMe Community Gathering in Delhi!
Great conversations, new connections, and knowledge shared with fellow cybersecurity enthusiasts.
Thanks to everyone who made it happen!
@tryhackme
TryHackMe retweeted

NoScope@trynoscopeOct 5
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
Jira integration is now live on NoScope.
Every finding now syncs directly to the Jira dashboard, with severity, evidence and remediation steps attached to each ticket.
TryHackMe retweeted
With @trynoscope, you’ll soon be able to watch our AI pentester work in real time.
See how the agent explores your web app, builds an attack graph, investigates potential vulnerabilities, and validates what it finds.
You’ll have visibility into:
• The agent’s reasoning and investigation
• Every request it sends
• The attack path it takes
• Vulnerabilities it discovers and how it validates them
• Attack classes including Recon, XSS, SSRF, IDOR, access control, and more
AI pentesting shouldn’t be a black box. You should be able to see exactly what the agent did and how it found the vulnerability.
Replying to @tryhackme
@tryhackme awesome seeing you at defcon 34
TryHackMe retweeted

NoScope@trynoscopeJul 29
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
We asked a Gitea server for a token we had no business getting.
It said 200 OK.
Here's how NoScope's AI agent found a 4-year-old flaw that exposed private container images on ~30,000 servers 🧵
TryHackMe retweeted
Prompt engineering is a really interesting topic ngl
#AISecurity @tryhackme
TryHackMe retweeted

NoScope@trynoscopeJul 7
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
We're adding a badge for solving the NoScopeRCE room on TryHackMe.
2500+ people have solved it already, if you haven't, now's the time.
Craft a sandbox escape payload using the returnClass binding, trigger it through the Extensions API, and chain it into a full reverse shell. No setup needed.
Also see how NoScope autonomously found and validated CVE-2026-35482, and how to run it against a live target.
Solve it, grab the badge, link in comments
TryHackMe retweeted

NoScope@trynoscopeJul 2
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
We recently found a critical RCE, and turned it into a free @tryhackme room.
1500+ people have already solved it. If you haven't tried it yet, it's worth a go.
You'll craft a sandbox-escape payload using the returnClass binding, trigger it through the Extensions API, and upgrade to a full reverse shell, hands-on with no setup required.
You'll also see how NoScope autonomously identified and validated CVE-2026-35482, and how to configure it to run a full automated pentest against a live target.
Give it a try and let us know what you think.
Link in the comments
TryHackMe retweeted
Last week we hosted webinar on, "AI is Accelerating Attacks: How to Evolve Your Pentest Methodology" with 1,400 people signed up. Thank you to everyone who joined!
If you missed it (or want to rewatch), the full recording is up now: noscope.com/webinars/pentest…
We covered how attackers are using AI to move faster than traditional security teams can respond, and why you should be evolving your pentest methodology in 2026.
TryHackMe retweeted

NoScope@trynoscopeJun 4
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
Replying to @CVEnew
This vulnerability was discovered by our AI pentesting agent.
Technical details on how it was discovered here -
noscope.com/blog/cve-2026-35…
TryHackMe retweeted
A quick update on the Gitea vulnerability.
Over 30,000 instances may still be exposed. The flaw (CVE-2026-27771) lets anyone pull private container images without authentication.
Many organizations have not patched yet. If you run Gitea, check your version immediately and update to 1.26.2 or later.
Temporary workaround: Enable REQUIRE_SIGNIN_VIEW.
🚨 Gitea flaw exposes private container images without authentication.
thehackernews.com/2026/05/gi…
CVE-2026-27771 affects all Gitea versions before 1.26.2 and likely impacts 30,000+ deployments worldwide. Attackers can pull private images without an account or password.
Update now or enable REQUIRE_SIGNIN_VIEW as a temporary workaround.
TryHackMe retweeted

NoScope@trynoscopeMay 26
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
For 4 years, any person on the internet could pull private container images from 30,000+ Gitea deployments.
No account. No password. No credentials of any kind.
NoScope discovered it. CVE-2026-27771. Here's the full story. 🧵
TryHackMe retweeted
Replying to @securestep9
@securestep9 will be joining the panel discussion at @tryhackme CTF event tomorrow in London! 🎉
Be sure to ask Sam more about OWASP and how you can get involved.
#AI #CTF #community #opensource #appsec
Meet the speakers 🤝 Builders, creators & cyber leaders all joining us live in London 🇬🇧
Can’t make it in person? We’re streaming everything until 12PM:
🎤 Talks, 🛰️ panel & the ⚔️ live challenge. Livestream link will drop on the landing page👇
▶️ tryhackme.com/ai-odyssey?utm…
TryHackMe retweeted

NoScope@trynoscopeApr 19
Canada
CanadaConnected via Canada App StoreAccount-level information, not a live location or per-post device.
For anyone using Vercel, a few important steps to take after today’s incident:
1. Rotate your secrets
2. Move away from long-lived credentials
3. Review audit logs for any unusual access
We’re offering a free pentest for Vercel users. Reach out to get started.
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin:
vercel.com/kb/bulletin/verce…
TryHackMe retweeted
❣️ 🐱 New room Swiper (Mobile, API Hacking) part o fLove at First Breach 2026 - Advanced Track From @tryhackme
🥞 Swiper is the app that really said "who needs a match when you can just bombard someone's profile with poetry?
tryhackme.com/room/lafbctf20…
#tryhackme #api
TryHackMe retweeted
Got another debrief from @tryhackme
This makes me appreciate my efforts even my sleepless nights.
It reminds me that I’m actually doing something right.
Seeing what I did well and where I should improve gives me clarity and motivation.
Yes… my skills are truly skyrocketing
TryHackMe retweeted
My first intro to pentesting started with the Jr Penetration Tester learning path on @TryHackMe
It built my interest, got me curious, and ever since then I’ve been stuck on this journey.
I’m documenting my progress more now and pursuing pentesting with full dedication!
TryHackMe retweeted
🎄 AoC 2025 @tryhackme – Day 21: Command & Carol 🎄
Wareville was too quiet… so Sir Elfo unleashed RITA 🔍
PCAP ➡️ Zeek ➡️ RITA ➡️ 💥
Beaconing ✔️
DNS tunneling ✔️
Long shady connections ✔️
Turns out silence = C2 👀
Let analytics do the heavy lifting.






























