this is absurdly f*cking dangerous...
REA Founder just dropped a prompt that turns any AI agent into a reverse-engineering lab with REA
one paste and your agent will:
- take apart Windows .exe files, Android APKs and iPhone apps
- trace any feature from a button on screen to the function behind it
- map an app's hidden API from a single network capture
- unpack firmware and follow it straight into native code
- and that's only the beginning...
130+ tools in one free MCP. Send it to Claude Code and thank me later.
Before you run it, read the article below:
REA hit #1 on GitHub trending, and most people still run it inside a single chat
Split it into 4 subagents and one command takes a program you own from sealed binary to a tested rebuild with a match rate
Set it up once, aim it at the next one:
THIS IS F**KING DANGEROUS
I FOUND A TOOL THAT PACKS A TON OF OSINT AND SECURITY UTILITIES INTO ONE TOOLKIT.
HORUS lets you:
→ Look up IPs, phone numbers and MAC addresses
→ Search Shodan for exposed services
→ Check files and URLs with VirusTotal
→ Extract or remove file metadata
→ Investigate crypto transactions
→ Explore Wi-Fi intelligence and flight data
→ Analyze packet captures and run VPN tools
if you’re exploring security tools, this repo deserves a spot in your collection.
SAVE it for your next investigation.
REPO BELOW
CyberSaasquatch retweeted
redteamfortress/killerland: Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you. github.com/redteamfortress/K…
If you're learning malware analysis or reverse engineering, bookmark this.
RPISEC released the full materials from its Malware Analysis university course for FREE.
12 lectures + 10 hands-on labs + 4 projects covering:
• Static + dynamic malware analysis
• x86 + IDA
• Windows internals + WinAPI
• Malware behavior + persistence
• Anti-disassembly
• Anti-VM + anti-debugging + anti-AV
• Packing + unpacking
• Windows kernel + drivers
• Rootkit techniques
• Hooking + DKOM
• Anti-forensics + covert channels
• Runtime process manipulation
• APT sample analysis
It was designed for students starting with zero reverse engineering experience and built heavily around Practical Malware Analysis.
github.com/RPISEC/Malware
Huge credit to RPISEC and original authors Branden Clark, Austin Ralls and Aaron Sedlacek for making the course materials publicly available.
#MalwareAnalysis #ReverseEngineering #WindowsInternals
CyberSaasquatch retweeted
Cloudflare open-sourced the security audit skill that seeded its own vulnerability hunting harness. Your coding agent can now run it on your code.
How it works, in 6 phases:
→ maps your codebase
→ hunts for bugs area by area so nothing gets skipped
→ sends every finding to a fresh agent that didn't find it, to confirm it's real
→ writes structured results
→ verifies each record again, independently
→ writes the final report
You get a findings file split into confirmed, needs validation and rejected, so you fix the real problems first.
Install:
npx skills add github.com/cloudflare/securi… --skill security-audit
Then open your agent in your project and type: "security audit this codebase"
MIT licensed, 31.3K stars.
completely f*cking YES. I made a prompt that reverse-engineers ANYTHING without bans and rejects
i’m not sure this should be public…
the hack: REA + a free model take apart any app, site, game or APK → Opus 5.5 builds your own version the way YOU want
how to run it:
set up → install OpenCode, pick DeepSeek or GLM
reverse → paste prompt image + app/file/URL into chat and tell it what you want to reverse (it will write you a repo)
build → open that repo in Claude Opus 5.5 and say something like:
“I’ve shared a repo for my project that i dropped a while ago. I want you to help me bring it back and make it even better!”
now you can use mechanics of every app or website you want in your own projects…
Save this prompt and thank me later. Before you start read the article below:
CyberSaasquatch retweeted
Setting Up REA with Claude Code — Teaching AI to Read Binaries with Ghidra (with Codex & OpenCode) e.ercanatay.com/rea-en
CyberSaasquatch retweeted
Claude-BugHunter provides a curated bundle of 83 skills for Claude Code designed to assist with vulnerability auditing, CVE tracking, and structured red team reporting.
github.com/elementalsouls/Cl…
CyberSaasquatch retweeted
Whoever created this, huge respect.
webhacklist.com/
CyberSaasquatch retweeted
YesWeHack Claude Kit
A Claude Code plugin that helps bug bounty hunters write clear, well-evidenced reports - the kind a triager can validate quickly.
Source: github.com/yeswehack/claude-…
THIS IS F**KING DANGEROUS.
i found 3 open source hacking tools used by ethical hackers and, in some cases, malicious actors.
and they are all FREE to use
SLIVER → a command-and-control framework used for security testing and abused by attackers.
CALDERA → automates attack simulations to test how well defenses hold up.
ADAPTIXC2 → lets security teams simulate post exploitation activity and manage agents in controlled environments.
three powerful tools. one important lesson:
understanding how hacking works is key to building stronger defenses.
BOOKMARK this before someone take it down
REPO BELOW
CyberSaasquatch retweeted
OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities github.com/anthropics/oss-sc…
CyberSaasquatch retweeted
50 legendary websites that feel like the internet’s hidden toolbox 🧰
1. unpaywall.org — free research papers
2. sci-hub.se — papers when unpaywall misses
3. openlibrary.org — borrow books
4. gutenberg.org — 70k+ free books
5. coursera.org — audit university courses free
6. wolframalpha.com — step-by-step math
7. remove.bg — background removal
8. cleanup.pictures — object removal
9. tinywow.com — quick file tools
10. ilovepdf.com — PDF merge/split
11. photopea.com — free Photoshop alternative
12. squoosh.app — image compression
13. excalidraw.com — fast diagrams
14. carbon.now.sh — beautiful code screenshots
15. regex101.com — test regex
16. jsonformatter.org — clean JSON
17. explainshell.com — terminal commands explained
18. alternativeto.net — software alternatives
19. haveibeenpwned.com — breach check
20. 10minutemail.com — temp email
21. privnote.com — self-destruct notes
22. radio.garden — live global radio
23. endel.io — focus sound
24. mynoise.net — custom ambient
25. justwatch.com — where to stream
26. archive.org — digital library
27. web.archive.org — old web pages
28. similarweb.com — site traffic
29. downtimerobot — uptime check
30. pagespeed.web.dev — speed test
31. tinypng.com — compress images
32. cloudconvert.com — file conversion
33. diffchecker.com — compare text
34. temp-mail.org — disposable inbox
35. obfuscator.io — JS obfuscate
36. keybr.com — typing practice
37. monkeytype.com — typing test
38. ankiweb.net — spaced repetition
39. notion.so — all-in-one notes
40. obsidian.md — local knowledge base
41. raindrop.io — bookmark manager
42. todoist.com — task list
43. trello.com — boards
44. miro.com — whiteboard
45. figma.com — design
46. canva.com — quick graphics
47. remove.bg — again because it's that good
48. yt-dlp — video download (open source)
49. handbrake.fr — video compress
50. localsend.org — local file transfer
Save this. You’ll definitely need some of these later. 🔖
Follow @sagorhosen93 for more useful websites, AI tools & tech resources.
CyberSaasquatch retweeted
quincunx33/ai-jailbreak: A collection of jailbreak prompts and exploit techniques for local and frontier AI models, with modern methods for Qwen3.5, Gemma 4, Llama 4, Kimi K3, GPT-OSS, GPT-5.x, Gemini 3.x and Grok 4.x. For red-... github.com/Quincunx33/Ai-jai…
CyberSaasquatch retweeted
Runs 60+ AWS services locally on a single port as a free alternative to LocalStack with real infrastructure support for RDS and Bedrock.
github.com/ministackorg/mini…
CyberSaasquatch retweeted
Trending repository of the day 📈
rea
Reverse engineer anything with agents, from app behavior down to native binaries.
Last 24h: 2,963 ⭐
Total: 6,869 ⭐️
github.com/morluto/rea
CyberSaasquatch retweeted
Perform graph-based OSINT investigations and visualize data connections using Flowsint, an open-source platform.
github.com/reconurge/flowsin…
CyberSaasquatch retweeted
Connects to PostgreSQL, MySQL, SQLite, Redis, MongoDB, SQL Server, and ClickHouse through a single native desktop application with a built-in MCP server.
github.com/gridex/gridex
CyberSaasquatch retweeted
A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for securing AI agent tool use and skill ecosystems github.com/LLMSecurity/aweso…
CyberSaasquatch retweeted
Hardens Linux servers with a comprehensive guide covering SSH, firewalls, and intrusion detection tools.
github.com/imthenachoman/How…



























