Loading video...

Video Failed to Load

Go Home

PatchaPalooza now shows exploit & detection coverage for every CVE. - Exploit coverage (VulnCheck, GitHub PoC, Nuclei, Metasploit) - Detection coverage (Sigma, YARA from 40+ repos) 12,500+ Microsoft CVEs enriched. All free, all open. Example:

18,377 views • 4 months ago •via X (Twitter)

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 views • 5 months ago

9 repos that mass replace a $150,000/year NBA analytics department. all free. all open source. -> replaces Second Spectrum and SportVU YOLO tracks every player and ball from any broadcast. assigns teams by jersey color. court keypoint detection builds a tactical top-down map. speed, distance, passes - all from a TV feed. no sensors. -> replaces paid NBA prediction services ($100/mo) XGBoost + Neural Net. moneyline and totals. Kelly Criterion sizing. 69% accuracy. pulls odds from FanDuel/DraftKings automatically. the most starred NBA betting repo on GitHub. -> replaces an entire quant sports desk 5-model ensemble: XGBoost + PyTorch MLP + Ridge + Lasso + baseline. Optuna-tuned hyperparameters. SQLite database with box scores, play-by-play, betting lines, injury reports. production-grade. -> replaces manual daily prediction workflows XGBoost/LightGBM with GitHub Actions automation. scrapes new data, retrains models, outputs daily win probabilities. set it and forget it. -> replaces ELO subscription services custom ELO + Ridge + XGBoost + Neural Networks ensemble. full data scraping pipeline. comprehensive visualizations. FiveThirtyEight-style ratings from scratch. -> replaces Four Factors analytics dashboards ELO rating system + Four Factors + PCA dimensionality reduction. detailed comparison of 10+ models. honest 65.3% accuracy - because that's what real NBA prediction looks like. -> replaces computer vision analytics platforms ($500/mo) YOLO player/ball tracking. automatic team assignment. court keypoints. pass and interception detection. speed and distance. full tactical view. modular architecture. -> replaces shot tracking hardware YOLOv8 detects ball and hoop in real-time. linear regression predicts trajectory. registers makes and misses automatically. works on any video feed. -> replaces paid sports data subscriptions ($300/mo) official Python client for NBA. com API. box scores, play-by-play, shot charts, player tracking. 40+ years of data. zero cost. the foundation every NBA ML project is built on. like + bookmark you'll need this when you build your first NBA prediction bot

zostaff

102,814 views • 2 months ago

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components instances vulnerable to CVE-2025-55182 (React2Shell). ⸻ ✅ 1. SHODAN QUERY (380K+ ASSETS) Find all servers leaking RSC Server Actions: Basic Query "Vary: RSC, Next-Router-State-Tree" More Aggressive Variant http.headers.vary:"RSC" AND http.headers.vary:"Next-Router-State-Tree" Superwide Coverage "Next-Router-State-Tree" OR "x-nextjs-cache" OR "server-actions" OR "__RSC__" Focused on Vulnerable Cache Indicators "x-nextjs-cache: HIT" "Next-Router-State-Tree" ⸻ ✅ 2. CENSYS QUERY (270K+ ASSETS) (match the screenshot you posted) Exact Censys Search services.http.response.headers.vary: "RSC, Next-Router-State-Tree" Safer Multi-Matcher services.http.response.headers.vary: "RSC" AND services.http.response.headers.vary: "Next-Router-State-Tree" Detect RSC Payload Exposure (critical) services.http.response.body: "__RSC__" Detect Flight Data Leaks services.http.response.body: "server-reference-manifest" ⸻ ✅ 3. FOFA QUERY (CHINA’S OSINT GIANT) (VERY POWERFUL for RSC/Next.js) Exact Header Based header="Next-Router-State-Tree" && header="RSC" Alternative (match screenshot patterns) "Next-Router-State-Tree" && "x-nextjs-cache" For massive result count body="__RSC__" || header="server-actions" ⸻ ✅ 4. ZOOMEYE QUERY ZoomEye scans often catch Node.js apps Shodan misses. Exact Unicode-Ready Query "Next-Router-State-Tree" && "RSC" Advanced app:"Next.js" && header:"RSC" ⸻ ✅ 5. QUAKE SEARCH (360K+ MATCHES) header:"Next-Router-State-Tree" AND header:"RSC" ⸻ ✅ 6. BINARYEDGE QUERY http.response.headers.vary:"Next-Router-State-Tree" ⸻ ✅ 7. QUERY headers:"Next-Router-State-Tree" && headers:"RSC" ⸻ 🎯 8. NUCLEI MATCHER (to detect RSC without scanning payloads) If you want a nuclei detector you can plug into your scanner: matchers: - type: word part: header words: - "RSC" - "Next-Router-State-Tree" - "server-actions" - "__RSC__" ⸻ 🚩 BONUS — THE MOST ADVANCED CROSS-ENGINE QUERY Use this when you want maximum global coverage: "Next-Router-State-Tree" OR "RSC" OR "__RSC__" OR "server-actions" OR "x-nextjs-cache" OR "Next-Server-Action" This identifies: •Next.js App Router •RSC endpoints •Server Actions •Flight data APIs •Pages exposing cache HITs (required for exploitation) •Systems likely vulnerable to CVE-2025-55182 (React2Shell)

X

10,469 views • 7 months ago

HERMES AGENT NOW HAS AUTOMATION TEMPLATES. COPY-PASTE RECIPES FOR CRON JOBS AND WEBHOOKS. ANY MODEL. ANY DELIVERY PLATFORM. three trigger types: SCHEDULE → runs on a cadence (hourly, nightly, weekly) GITHUB EVENT → fires on PR opens, pushes, issues, CI results API CALL → any external service POSTs JSON to your endpoint all three deliver to Telegram, Discord, Slack, SMS, email, GitHub comments, or local files.Nous Research what templates ship right now: DEVELOPMENT: → nightly backlog triage (label + prioritize new issues) → automatic PR code review (posts review on every PR) → docs drift detection (finds code changes without doc updates) → dependency security audit (daily CVE scan, CVSS >= 7.0) DEVOPS: → deploy verification (smoke tests after every deploy) → alert triage (correlates alerts with recent changes) → uptime monitor (check endpoints every 30 min, notify only when something is down) RESEARCH: → competitive repo scout (monitor competitor PRs daily) → weekly AI news digest (headlines, papers, repos, industry) → daily arXiv scan (saves summaries to your notes) the webhook system is the part most people miss: hermes webhook subscribe github-pr-review \ --events "pull_request" \ --prompt "Review this PR for security, performance, and code quality." \ --skills "github-code-review" \ --deliver github_comment one command. every future PR gets reviewed automatically. the review posts as a comment directly on the PR. two cost-saving details from the docs: 1. use [SILENT] in prompts. "if nothing changed, respond with [SILENT]" prevents notification noise on monitoring jobs. 2. use script-only cron jobs for data collection. a Python script handles HTTP requests and file reads. the agent only sees stdout and applies reasoning. cheaper and more reliable than having the agent fetch. every template is copy-paste ready. every template works with any model. docs: full Hermes agent SOUL MD guide in the article 👇

YanXbt

37,775 views • 1 month ago

🚀 Sahara AI: Powering the Future with Decentralized Intelligence 🔗 | 🗓 June 8–11 on Buidlpad 🔆 Developed and operated by Tyler Zhou | Sahara AI 🔆 & Sean Ren | Sahara AI 🔆 Sahara AI 🔆 is revolutionizing how we build, share, and earn from AI by combining blockchain transparency with open, community-driven AI development. With $SAHARA, anyone can: Contribute data or models Build AI solutions Monetize their work — all on-chain 🧱 Three Pillars of Sahara AI Sovereignty & Ownership – Every dataset/model has verifiable provenance Utility for All – Tools for building, training, and deploying AI Collaborative Economy – Rewards for contributors, from coders to curators 👉 With its open and decentralized approach, Sahara AI has the potential to power real-world AI solutions across industries like healthcare, agriculture, education, and more. 10 Industries Being Transformed Let’s zoom out and see how AI, through platforms like Sahara, is transforming industries globally: 🏥 Healthcare Applications: Cancer detection, robotic surgery, drug discovery Example: Google DeepMind predicts patient deterioration in ICUs 💳 Finance Applications: Fraud detection, credit scoring, algorithmic trading Example: Banks use AI to detect real-time suspicious account activity 🛒 Retail & E-commerce Applications: Smart recommendations, virtual shopping assistants Example: Amazon’s AI-driven recommendation engine 🏭 Manufacturing Applications: Predictive maintenance, quality inspection via vision AI Example: AI robots ensure product quality on assembly lines 🚚 Transportation & Logistics Applications: Autonomous vehicles, route planning, fleet tracking Example: DHL uses AI for optimal delivery routes 📚 Education Applications: Adaptive learning, automatic grading, tutoring bots Example: Duolingo’s AI tailors lessons to your pace and progress 🌾 Agriculture Applications: Drone-based crop monitoring, predictive irrigation Example: AI tells farmers the best time to irrigate or fertilize ⚡️ Energy Applications: Smart grid management, renewable optimization Example: AI balances load demand in real-time in smart cities 🎬 Media & Entertainment Applications: Personalized content, AI-generated music & art Example: Netflix’s suggestions based on your watch habits 🛡 Security & Defense Applications: Surveillance, facial recognition, cybersecurity Example: AI monitoring CCTV for instant threat alerts #saharaai #AIforALL #Buidlpad

Jerry

30,109 views • 1 year ago

#1 skill for developers in 2026: Automate everything you can using AI. I bet my lunch your team is dealing with all of these: • Stale documentation • Outdated dependencies • Poor test coverage • Deprecated APIs Every company I work with has these same problems. You can solve all of these right now. Automatically. Using AI. Here are 3 examples. Watch the attached video: I'm using Ona Automations to tackle this. These are background agents that run in the cloud, in a fully configured dev environment with your toolchain, your dependencies, and your services. You can run an unlimited number of these agents in parallel and across all your repositories. Claude Code and Codex only run locally, so they are hard to scale, and you can't run them when your computer is closed. Ona runs in the cloud. Here are the three examples: 1. Test coverage Run a nightly automation to identify any untested code paths, generate candidate tests, verify they pass, and open draft PRs. You wake up every morning to PRs that improve your test coverage. 2. Dependency upgrades Configure a weekly automation that bumps a dependency version, runs your full test suite, and reports any regressions. If everything is clean, it opens a PR. If something breaks, it opens a report so you can decide what to do. 3. Documentation auditing Set up a weekly automation that checks recent commits against your README file and setup guides, identifies broken examples and outdated instructions, and opens a PR with fixes.

Santiago

25,804 views • 4 months ago

Long post alert. A few thank you's as well. ❤️ I feel bad I've really just got into the TTV game for the season 3 weeks in. As you know, Gridiron always takes priority for me at launch as I am nose to grindstone on covering as much about the game as I can. I truly appreciate you all rocking with me when it's a bit more sporadic. There are lots of elite players grinding TTV right now and it inspires me genuinely when I see you all growing and locking in on your craft. It's also amazing that so many of you choose to hang out given the choices! Over on the Gridiron side I also owe thank you's. All this coverage work and feedback is paying off. Big time. It's collaborative. #Madden26 If you want to shut down every formation, WE WILL TELL YOU (not just me) what front, stunt, coverage call, and who your user/switch stick rules are. The Discord has kicked it up so much this year and there's basically coverage residents in there giving advice at most hours of the day. That way you can get perspectives other than yours/my own on topics. They are great and answering things I am not (MUT sets, upcoming content, etc...) Here's a montage of just some clips of just today's stream. Some of these guys had seriously competent route combinations. Others were your average online player. Either way, we faced everything. Bunch. Trips TE. 4 Strong. Empty. 2x2 Tight. Doubles Flex Meta. And now with the Miami defense out for stunts/pressure/QB containment, two of my most thorough defensive game plans are fusing together and becoming really good together. Perfect complimentary rush + coverage rules. The YouTube channel WILL WIN YOU MORE GAMES (no strings attached) but it only scratches the surface. There's so much more. Maybe the best in coverage I've ever felt, all things considered. Yeah, aggs suck and CIT rates are super high. But the point is that we are prepared for when the game normalizes and still playing tight coverage in spite of that. Just keep generating turnover-worthy plays and usually (but not always) the player who wins that category wins the game. I also want to give a shout-out to the Gridiron Discord again, this time for the quality lab session questions and focus this yea. This group of dudes (and a couple gals too) is locked in as I've seen it in a bit. The questions and feedback in there has driven the Vault content more than ever. People have been labbing their tails off to memorize coverage rules and help one another. It's inspiring to see the growth and people graduating from days of just starting out and winning less than 50% of games online become stronger because we are applying football teaching together with a focus on learning what is reproducible inside a game's code. That's not easy, honestly. I'll have a film breakdown tomorrow out on talking about the most recent coverage updates I've installed from today's Twitch stream. I want to bring you more game tape/film study of tips in action with telestration. Again, thanks to everyone who's grinding this game. It's motivating.

ZAN

11,953 views • 10 months ago

Beta Blocker just got a big update on Windows and Android. Buckle in 🐾 🎨 New Censor Styles Windows gets a full new lineup of effects: Static, Glitch, RGB Shift, Terminal and lot's more. Android gets also gets most of them too! 🎭 Preset Styles Windows now has themed preset styles, letting you swap between complete censor looks instantly instead of tuning every setting by hand. 🔄 Reverse Censor Reverse Censor is now available on Android, with a new Reverse Strength slider to choose your strength. There’s also a setup popup when enabling it, plus stronger One App coverage through Android Accessibility. On Windows, Reverse Censor is now more consistent across live mode, exports, recording, and virtual cam. 🎯 Per-Detection Overrides Windows now supports per-detection customization, so different detections can have their own style, text, and image instead of all sharing one global setup. 🧹 Fixes & Polish Fixed heavy cursor flickering during active blocking, improved performance for animated effects and larger boxes, and cleaned up several parts of the UI. This update also brings better language access, smoother scrolling, cleaner style controls, updated Android device targeting, support for the new Android settings in packs, cleaner overlay behaviour, and a smoother install/update experience. Oh, and the pack creator program was also updated to support all of the new features, and got a major cleanup, so this is essentially 3 programs getting major updates at the same time 🤗 Enjoy 💕

Isla

71,124 views • 1 month ago

Pakistan's PRSC-EO3: an unusual orbit for an optical satellite Radar tracking via Leonardo Avella. Processed via COMSPOC SSA. PRSC-EO3 (visualized in cyan) launched April 25, 2026 on a Long March 6. It's an optical imager — but its orbit is curious. Most optical LEO satellites use sun-synchronous orbits (~97-105° inclination), which provide consistent lighting for imaging. PRSC-EO3 is in a 38° inclined orbit instead. This sacrifices global coverage and consistent lighting, but increases revisit rates over a specific latitude band: 20-40°N. That's India, Kashmir, and Pakistan. Now consider PRSC-S1 (visualized in pink), Pakistan's SAR satellite launched July 2025, sitting in a 41° orbit. Similar inclination, similar altitude — but their RAANs are ~175° out of phase. When one passes over South Asia in daylight, the other passes in darkness. SAR works day and night. Optical needs sunlight. The geometry appears to allow complementary coverage. We ran the access analysis [Image 1]. The SAR sensor (unconstrained) and optical sensor (daytime-constrained) together provide repeatable revisit across day and night. The gaps left by one are filled by the other. Then there's PRSC-HS1 — a hyperspectral satellite in SSO [Image 2], capable of detecting camouflage and identifying materials from orbit. Optical shows you the picture. SAR shows you the picture at night and through weather. Hyperspectral tells you what you're looking at. Five remote sensing satellites in 16 months [Image 2]. All launched by China. All with orbits favoring South Asian coverage. The stated missions are civilian. The orbital architecture appears consistent with a multi-modal ISR constellation. Space Domain Awareness , Jonathan McDowell, Joey Roulette, SpaceNews , Integrity ISR #Pakistan #Space #SAR #ISR #PRSC

COMSPOC_OPS

58,022 views • 2 months ago