Leading Provider of Free Cybersecurity Training: https://xitter.cf/t.co/x91kxo5yck Writeups: https://xitter.cf/t.co/5xOk0uqsWc | Academy: https://xitter.cf/t.co/GHqvlqpmd9

Joined November 2015
The further I advance in hacking, the more I am convinced: cognitive mastery is now the skill. It always was, but only at the top. Specialists spent years building domain knowledge until it stopped being the limit. What's remained to optimize afterwards, was the mind itself. AI killed that curve. The ceiling specialists reached after a decade is now close to where you start.
The next top hackers won't be the ones who know the most. They'll be the ones who can operate their minds at full speed without burning out
15
28
4
346
29,649
When I started ipurple.team/ two years ago, my goal was to give SOC teams practical detection opportunities across some of the most modern adversarial techniques. So far, I’ve documented 25 techniques, and every article includes: ✅ SIGMA Rules ✅ Sysmon Configs ✅ Threat Hunting Queries If you work in Purple Teaming, Detection Engineering, Threat Hunting, or even the Red Team space, and you want your MITRE ATT&CK coverage to look like the example below, dive into the articles, start emulating, and begin hunting. If you know that someone else in your network will benefit, feel free to repost.
4
67
2
308
16,300
HackerSploit retweeted
I am OBSESSED with this sentence: “A head full of fears has no space for dreams.” damn.
58
3,362
51
19,320
288,972
HackerSploit retweeted
Want to learn AI / LLM Security Assessment? Don't have the money for a training? Here are 🎯SEVENTY ONE🎯 FREE LLM security labs that we have curated for you! Like and share! (Link Below) <3 from @arcanuminfosec
22
179
7
779
60,077
HackerSploit retweeted
Hollow - a shellcode loader generator. You give it a raw shellcode binary and a profile, and it spits out a compiled Windows PE loader with your shellcode encrypted inside. github.com/Chaelsoo/Hollow
22
72
6,072
HackerSploit retweeted
Cyber weapon on a cd
12
11
1
139
6,256
Another gem, this place fking awesome
Look what I found at thift store
60
744
32
11,814
312,787
13
46
2
1,102
57,931
HackerSploit retweeted
Someone put Fable 5 on the pirate bay, 3.4TB 😂
Readers added context they thought people might want to know
A Pirate Bay search for "fable" returns no relevant results, and further, there is no "Other / Models" category as claimed in the screenshot. thepiratebay.org/search.php?q=f…
300
915
193
20,467
2,568,432
HackerSploit retweeted
Me prompting Claude fable 5 at 3 am be like:
94
667
68
7,171
668,403
‼️ Nightmare Eclipse is back on GitHub under a new alias and has released a new Windows Defender vulnerability zero-day called RoguePlanet. PoC: github.com/MSNightmare/Rogue… New GitHub Account: github.com/MSNightmare
16
180
11
1,211
72,738
HackerSploit retweeted
I see diplomacy is no longer part of the disclosure process
12
65
3
703
69,116
HackerSploit retweeted
Had Claude Fable 5 log network packets and display them as cars on a highway, different car types = different packet types
251
844
136
14,704
1,551,173
HackerSploit retweeted
It's official, we have AGI.
Claude
@claudeaiJun 9
Introducing Claude Fable 5: a Mythos-class model that we’ve made safe for general use. Its capabilities exceed those of any model we’ve ever made generally available.
315
463
56
6,902
1,088,398
HackerSploit retweeted
A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name. He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping. His name is Fabrice Bellard. Here is the story, because almost nobody outside the systems programming world knows what one man has built. Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code. In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years. Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it. He was not done. In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth. He kept going. In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real. In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark. Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory. Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links. A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet. He is still shipping.
384
4,498
405
25,331
3,196,781
HackerSploit retweeted
Charly Wargnier ♨️
@DataChazJun 6
Anthropic with Cybersecurity experts right now:
Charly Wargnier ♨️
@DataChazJun 6
🚨 ANTHROPIC JUST PUBLISHED A 36-PAGE SECURITY GUIDE THAT BASICALLY TELLS YOU TO STOP TRUSTING YOUR OWN AI AGENTS. If you run agents on Claude Code, MCP servers, or automation tools, pay attention. The attack timeline has collapsed. AI models compress the gap between a vulnerability and a working exploit from months to hours, for mere dollars. Agents introduce new autonomous risks, from tool poisoning to context memory manipulation. The most useful idea in the guide is Anthropic's new security test: Does a control make an attack impossible, or just tedious? Automated attackers have unlimited patience. They will grind straight through friction like rate limits and 2FA. To defend at the speed of AI, you need hard barriers and automated defensive operations. Here is how Anthropic says you should lock down agents: → Treat static API keys as compromised. Use short-lived tokens that expire in minutes. → Apply "Least Agency": explicitly limit what each tool can DO. → Sandbox agents that process untrusted inputs like emails and web pages. → Scope permissions dynamically per task, not permanently. I've added the link to the guide in the 🧵↓
37
376
15
5,194
2,072,591
HackerSploit retweeted
spent my 11-hour flight back from europe working on a very long report. started as a slack message but morphed into a several pages long doc. wifi was as shitty as it gets. after finally making it home i realized that the computer had forcefully restarted. opened slack: draft was gone :( hail mary: claude pls save me, no clue how but pls try it checked APFS snapshots, time machine, slack indexeddb, write-ahead logs, service worker / http caches, local storage, app logs, hibernation image... nothing. all gone but then... it realized i have alfred installed. so it checked the clipboard snapshots alfred keeps in sqlite. sad news: alfred clipboard memory gets deleted after 24h. aggressive retention policy. however! when sqlite runs DELETE, nothing gets actually deleted. it only marks pages as reusable, but it doesn't override the physical bytes. so claude decided to do a raw-scan of the db, reverse eng alfred data format, figure out the portion containing the timestamp, stitched everything back together across overflow pages... and handed me the exact final version of my report, the last one i cmd+C'd all this, in a single shot ... day 200 of "what if you had an elite hacker you can ask anything to"
130
207
65
4,352
702,582