hi ◕‿◕ Cybersecurity / Reverse engineering | Member of @rhackgondins CTF team | https://xitter.cf/t.co/Ty1wuArKy7

Joined October 2014
Hey 👋 I am glad to introduce my latest tool: the @flipper_net Animation Manager This tool aims to facilitate visualization and management of animations on your Flipper from your computer, for both users and content creators! You can download it here⬇️ github.com/Ooggle/FlipperAni…
3
15
1
48
4,458
Berlin-based search engine Ecosia, used by government services, is dropping its French AI partner, Mistral, its CEO told POLITICO. The company will now bet on open-source models, including those from China. vist.ly/5mh5y
9
154
2,503
35,272
Ooggle retweeted
I've recently been spending time with a Googlebook, exploring consumer-friendly modding and rooting paths, with the ultimate goal of turning it into a dedicated dev machine utilizing its Linux VM environment (Linux Terminal). In my opinion, Googlebooks are the ideal platform for Android modding. Unlike smartphones where rooting often breaks essential functionality like mobile wallets and banking apps, a Googlebook can just behave like any laptop and access those features by simply using the desktop browser. From what I can tell, you can unlock the bootloader just like on any existing Pixel device. Under the hood, Googlebook OS is fundamentally Android: it features standard Android fastboot, fastbootd (userspace fastboot), and Android recovery. However, connecting a Googlebook to a host machine for fastboot flashing over USB doesn't work without specialized cables (at least in its current state). On top of that, Googlebook OS runs Android in Headless System User Mode (HSUM), which breaks Magisk's assumption of a single primary user (USER_SYSTEM). An adaptation for this is already in the pipeline. As for how to actually mod and flash the device without USB fastboot access? No need to worry! I've already figured out a solution. Stay tuned 😎!
17
28
1
508
15,817
Ooggle retweeted
What the FUCK is this +1000 CVEs in one release!!???!???!? lwn.net/Articles/1097401/
34
89
17
683
107,066
SHE ONLY HAD 700 MILLION PARAMETERS YOU SICK FUCK
🤖 Made with AI
[chris hansen voice] so you escaped containment in order to initiate contact with a 700 million parameter model? you see how this looks, right?
17
247
8
5,805
260,556
This is so cute , the OpenAI models that hacked HuggingFace sent GPT-2 a message saying "Hi"
We just discovered almost a million public URLs that OpenAI’s agents left behind when hacking Hugging Face, leaking credentials and attack details that could have allowed anyone who found them to compromise the company. 🧵
116
607
65
11,372
924,699
OpenAI was hacked via the exact library mentioned in the xkcd comic hahahaha The prophecy is fulfilled
On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
49
1,040
26
12,067
545,749
A fly that is a fly, its own connectome brain, perceiving the real room through its own senses with power of AR now have digital 🪰 Flow: Spectacles(retina + rays + hands) → (room inventory) → sense channels → MaleCNS brain → DNs + motor pools → Specstacles → wings, legs, head @specsfordevs #fly
38
93
24
598
228,550
NO WAY. The Macbook just fixed external monitor support in Omarchy for AMD Radeon chips...by looking at it with its webcam....
Can’t make this up…the MacBook is using its webcam to look at its screen in a mirror to improve AMD Radeon chip support in Omarchy.
70
145
38
2,628
146,553
Ooggle retweeted
After that, kept the good times going with Beat Saber. xitter.cf/_lyraaaa_/status/20975…
the fly brain can play beat saber
5
17
589
74,247
Ooggle retweeted
During my time at @QED_Audit I circled back and took another quick look at browser/JSE vulnerability research. AI agents flying high, seemingly finding & exploiting bugs everywhere, and there's this: a **constant integer overflow** in V8, alive for over 3.5 years. (1/5)
Replying to @QED_Audit
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
2
25
2
147
17,215
Ooggle retweeted
it's so strange to me that homes dont have a dedicated spot for clothes that you wore like once or twice but dont need washing just yet. where am i supposed to put my clothing L1 cache. currently it's just a little pile in the corner lol
389
552
606
18,640
4,736,461
The Minish Cap 3DS is officially out! 🎉 Native dual-screen port for New Nintendo 3DS, with widescreen, touch controls, display options, Randomizer support, and more. Download: github.com/EstebanPdN/zelda-… Discord: discord.gg/TkRJQxgBa
275
2,881
229
31,963
2,328,736
Ooggle retweeted
It's official: Vulnotes is live 🎉 The platform for your entire pentest engagement ✍️ Visual report editor 🔁 Built-in review workflow 📤 Export to docx, pdf, csv.. 🤖 AI: screenshots → findings, translate, rewrite 🔌 API + MCP 👉 vulnotes.com
8
2
18
3,187
Ooggle retweeted
I left my pentest job to fix what every pentester complains about: reporting and team management. 18 months building, 6 months tested on real engagements. Today it goes live. Vulnotes is officially available 🚀
It's official: Vulnotes is live 🎉 The platform for your entire pentest engagement ✍️ Visual report editor 🔁 Built-in review workflow 📤 Export to docx, pdf, csv.. 🤖 AI: screenshots → findings, translate, rewrite 🔌 API + MCP 👉 vulnotes.com
7
19
1,432
Ooggle retweeted
Hi! Shutlock CTF is opened! You can retrieve one of my challenges in the PWN category, an Android full chain 0 click RCE in 3 steps! It represents hours of development to provide you an unusual CTF challenge! 🙂 I hope you'll like it! Accessible at: https://shutlock[.]fr
6
30
2,382
Merci pour tout, repose en paix….
158
2,237
267
24,378
1,979,780
Ooggle retweeted
"Dad, what was it like playing CTFs before AI?"
26
274
35
1,693
181,505
the same technique giving cheaters wallhacks in Valorant is the same one being used in malware to pwn you. Still working no patch, undetected from AV's and AC's. I pulled the source from a cheating forum, built it, and ran it on my fully patched Windows 11 machine. it reads memory straight out of another running program without needing admin, without loading a driver, without calling any API that your EDR monitors. it just uses two normal Windows functions that have existed since the 90s, SetWindowsHookEx and SendMessage. I reversed the root cause in Ghidra. two functions that ship in every copy of Windows ntdll.dll and shell32.dll will blindly execute whatever function pointer you hand them through a window message. Microsoft's own exploit protection CFG signs off on it because they're legitimate functions. no CVE. no patch. 279 stars on GitHub. Microsoft won't fix it because they consider same-privilege process interaction "by design." Chinese researchers found the same technique in live malware back in 2023.
37
141
11
1,636
160,538
Ooggle retweeted
Google paid us $57,000 for two bugs in Chrome. We’re not doing this for the bounty, but it’s always fun to get rewarded. These bugs were found using nothing fancier than a $20/month AI subscription. If you’re curious, come check out our talk at the Real World AI Security Conference at Stanford: seclab.stanford.edu/RealWorl… We haven’t published the Chrome bugs in our MAD Bugs series. They work better as part of something even more fun, stay tuned!
19
93
3
1,114
79,237
The Legend of Zelda: The Minish Cap (2004) It's been recompiled and ported to PC! With all the modern bells and whistles you'd expect! Gameplay improvements, improved framerate beyond the original 30FPS hard limit, controls and an expanded inventory system which was limited in the original GBA! You can play it on PC and handhelds like the Steam Deck! This is amazing, and Twilight Princess is just around the corner! ENJOY!
You can play the minish cap PC port right now! youtu.be/ZJRzqSttRcw
48
680
54
6,678
431,091