Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

THIS IS F**KING DANGEROUS FOUND AN AI RED TEAM THAT NEEDS ZERO HUMAN INPUT PentAGI. Scanner —> Exploiter —> Reporter —> three agents, working as a swarm, sharing results in real time. One does recon, another finds and runs the actual exploits, a third writes the professional vulnerability report... at the end. FULLY AUTONOMOUS —> plans its own steps, executes through terminal, browser, and code editor, monitors its own progress. Runs entirely inside sandboxed Docker, integrated with 20+ real security tools (Nmap, Metasploit, SQLmap, and more). It has over 22k STARS on GitHub MIT licensed, self hostable —> free if you run it on local models, cloud LLM costs only if you plug in OpenAI or Claude. The tradeoff nobody skips past: this drops the cost of serious security testing for companies who couldn't afford it before and puts the same capability in everyone's hands. Cybersecurity is genuinely becoming AI vs AI. Authorized security testing only. Using this on systems you don't own is illegal. REPO BELOWshow more

MAX

15,420 subscribers

38,475 views • 2 months ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

54 Comments

MAX2 months ago

Repo: Follow @maxdeg0 for more

Karan Kaushal2 months ago

with 22k stars still can't beat Xalgorix

Hydareth乍得2 months ago

wild time for cybersecurity

MAX2 months ago

For real. Cybersecurity is entering a completely different era.

Butch Coolidge2 months ago

Pentagi sucks. Use xalgorix instead thx me later

Alex132 months ago

yeah this is the moment pentesting stopped being a slow human grind and turned into machines hunting machines while we just watch the reports roll in

MAX2 months ago

the shift to autonomous security testing is happening much faster than I expected.

Davidd Tech2 months ago

Did you see what happened with OpenAI Hugging Face?

MAX2 months ago

Yeah, that whole OpenAI × Hugging Face situation was wild.

Blackfrost_AI2 months ago

Now, when you combine this with one of our frontier models that have been professionally de-risked. The engagement then turns very one-sided.

Polykinder2 months ago

AI capabilities are surprising

MAX2 months ago

Honestly, the pace of AI capabilities is surprising. Things are moving fast.

MAX2 months ago

Proceed with caution lol 😆

EugBass2 months ago

;)

MAXI (❖,❖)2 months ago

How efficient is it

MAX2 months ago

Pretty efficient for recon and finding common vulnerabilities but human validation still needed some times

hammertime2 months ago

AI vs AI cybersecurity is getting scary

MAX2 months ago

AI vs AI in cybersecurity is becoming a very real arms race.

Wayne2 months ago

scary asf

MAX2 months ago

Haha Don’t be 😆

Yakubu David block2 months ago

This is gold bro thanks

kadd2 months ago

Thanks for sharing man

MAX2 months ago

Always bro, glad you found it useful.

Lynor ⛓️2 months ago

autonomous recon to reporting in one workflow is kinda wild

MAX2 months ago

Yeah, going from recon to a finished report in one workflow is pretty wild.

Lynor ⛓️2 months ago

the automation across every stage is the interesting part

X2 months ago

It drops the cost but still most insurance companies will require some type of certified (human) Pen test, especially for anything involving heavy PII or PCI-DSS (monetary transactions).

MAX2 months ago

Exactly. AI can cut costs massively, but human certified testing is still important for compliance.

Аnnetta2 months ago

Is it safe to rely entirely on AI without human control?

厨二病エンジニア2 months ago

人間の手が入らないまま脆弱性まで自動で突かれるなら、デバッグが終わる前にバグの方が先に育ち切る未来しか見えない。

Oxlee 🐬2 months ago

That sounds like the future of autonomous hacking teams

MAX2 months ago

autonomous hacking teams are definitely starting to look like the future.

starmex2 months ago

zero human input is where this starts getting a little scary lol

MAX2 months ago

that’s the part that makes it both impressive and concerning.

VANTERRA2 months ago

Max bro Thanks for sharing

emelu2 months ago

mamma mia 🥺 max gibbin me dangerous alphas

MAX2 months ago

haha Just doing my part, bro. More alpha on the way.

Alex Stone2 months ago

Multi-agent autonomy gets powerful fast once agents can hand work off without human coordination.

MAX2 months ago

Exactly autonomous handoffs make multi agent systems much more powerful.

MAIL2 months ago

very useful resource

MAX2 months ago

Yeah, this is definitely one worth keeping around

Bober_smart2 months ago

Dude, that's a real alpha move, I'm going to try doing that right now

MAX2 months ago

Go for it bro, once you get it set up you’ll see why it’s so good.

Stuey2 months ago

That’s for all your posts mate, I was actually looking at this same project yesterday. Have you used it yet, if not what’s your goto?

MAX2 months ago

I’ve used it before. And it efficient

🌎 Coin Hub - Go Global 🌎2 months ago

Let’s talk⚡️dm us

Crypto Mavka2 months ago

I notice so many new things on Twitter that I can't stop following them all.

MAX2 months ago

For real, the amount of new stuff dropping every day is crazy. Hard to keep up.

painn2 months ago

this is crazy, thanks for sharing

MAX2 months ago

the pace of this stuff is honestly crazy. Glad you found it useful.

Akhil Sharma 🧠 System Design2 months ago

Check this out, takes the idea to a different level -

Anonrob18212 months ago

Wild times are on the raise 😎

riVeN2 months ago

recon can be autonomous. the moment it runs exploits, the missing node is the one that checks authorization.

Eric2 months ago

Don't big models like Claude and codex refuse to work on tasks like this ?

Related Videos

THIS IS F**KING DANGEROUS SOMEONE JUST TURNED CLAUDE INTO AN AUTONOMOUS PENTESTER. HexStrike AI connects an LLM to 150+ professional cybersecurity tools through MCP. You get: → 12 specialized AI agents → 150+ security tools → Network & web security testing → Automated pentesting workflows → Local execution on Kali Linux The wild part? Claude autonomously generated a SQL injection payload, ran the test, and solved a PortSwigger lab. AI + real security tooling is getting serious. REPO BELOW

THIS IS F**KING DANGEROUS SOMEONE JUST TURNED CLAUDE INTO AN AUTONOMOUS PENTESTER. HexStrike AI connects an LLM to 150+ professional cybersecurity tools through MCP. You get: → 12 specialized AI agents → 150+ security tools → Network & web security testing → Automated pentesting workflows → Local execution on Kali Linux The wild part? Claude autonomously generated a SQL injection payload, ran the test, and solved a PortSwigger lab. AI + real security tooling is getting serious. REPO BELOW

MAX

63,607 views • 1 month ago

🚨 SOMEONE JUST TURNED AN LLM INTO AN AUTONOMOUS RED TEAM Cyberstrike is an open source AI security agent built to automate penetration testing from your terminal. Plug in your Claude, GPT, or other LLM subscription and you get: → 13+ specialized security agents → 7,600+ security skills → 120+ OWASP test cases → 150+ AI providers → 5,300+ models → 56+ built in tools → 176+ MCP tools Instead of one AI trying to do everything, it splits security work across specialized agents. This is where AI powered pentesting gets seriously interesting. Use it only on systems you own or have explicit permission to test. REPO BELOW

🚨 SOMEONE JUST TURNED AN LLM INTO AN AUTONOMOUS RED TEAM Cyberstrike is an open source AI security agent built to automate penetration testing from your terminal. Plug in your Claude, GPT, or other LLM subscription and you get: → 13+ specialized security agents → 7,600+ security skills → 120+ OWASP test cases → 150+ AI providers → 5,300+ models → 56+ built in tools → 176+ MCP tools Instead of one AI trying to do everything, it splits security work across specialized agents. This is where AI powered pentesting gets seriously interesting. Use it only on systems you own or have explicit permission to test. REPO BELOW

MAX

17,029 views • 2 months ago

this is the most DANGEROUS thing on the internet today Found an AI agent that doesn’t just scan it autonomously hacks and executes multi step cyberattacks. meet DECEPTICON. → runs autonomous attack simulations → deploys 16 specialist AI agents → maps attack paths and findings → supports red team and blue team modes → integrates with tools like Ghidra and Sliver → claims 98.08% on XBOW benchmarks multiple agents. realistic attack chains. one security testing framework. only test systems you own or have explicit written permission to assess. REPO BELOW

this is the most DANGEROUS thing on the internet today Found an AI agent that doesn’t just scan it autonomously hacks and executes multi step cyberattacks. meet DECEPTICON. → runs autonomous attack simulations → deploys 16 specialist AI agents → maps attack paths and findings → supports red team and blue team modes → integrates with tools like Ghidra and Sliver → claims 98.08% on XBOW benchmarks multiple agents. realistic attack chains. one security testing framework. only test systems you own or have explicit written permission to assess. REPO BELOW

MAX

21,465 views • 20 days ago

THIS IS F**KING INSANE i found an open source AI pentesting tool that deploys multiple agents to automate security testing. and it does more than just scan. PENTEST-SWARM-AI can: → discover subdomains and live hosts → scan ports and find vulnerabilities → validate findings with evidence → generate exportable reports → connect to Claude Desktop and Cursor → automate scans through GitHub Actions multiple AI agents. one security testing workflow. only test systems you own or have permission to assess. REPO BELOW

THIS IS F**KING INSANE i found an open source AI pentesting tool that deploys multiple agents to automate security testing. and it does more than just scan. PENTEST-SWARM-AI can: → discover subdomains and live hosts → scan ports and find vulnerabilities → validate findings with evidence → generate exportable reports → connect to Claude Desktop and Cursor → automate scans through GitHub Actions multiple AI agents. one security testing workflow. only test systems you own or have permission to assess. REPO BELOW

MAX

26,359 views • 23 days ago

Someone on Reddit built a real operating system using Claude. Not a browser app pretending to be one. An actual OS that runs on bare metal. It's called Fable-OS. The only interface is a sentence. No bash. No commands. You type what you want and an AI agent executes it through direct kernel syscalls. Everything runs in Ring 0. In the demo, the agent realized it didn't have a sound driver. So it found the Intel sound card, built a driver for it from scratch, and played a sound. On its own. The OS writes its own drivers. Evolves itself. The agent's tools are the kernel itself. Open source. Built because the developer got tired of people calling browser apps "AI operating systems." This one actually is.

Someone on Reddit built a real operating system using Claude. Not a browser app pretending to be one. An actual OS that runs on bare metal. It's called Fable-OS. The only interface is a sentence. No bash. No commands. You type what you want and an AI agent executes it through direct kernel syscalls. Everything runs in Ring 0. In the demo, the agent realized it didn't have a sound driver. So it found the Intel sound card, built a driver for it from scratch, and played a sound. On its own. The OS writes its own drivers. Evolves itself. The agent's tools are the kernel itself. Open source. Built because the developer got tired of people calling browser apps "AI operating systems." This one actually is.

Vaibhav Sisinty

20,562 views • 3 months ago

this is f**king insane. the open-source 100% FREE Perplexity replacement that runs entirely on your own hardware. the GitHub repo is at 36.7K stars, MIT license it lets you: → search the web, discussions, or academic papers → three search modes, including Quality mode for deep research → local models through Ollama, or OpenAI / Claude / Grok if you want → upload PDFs and ask questions about them → restrict a search to specific domains set GPT-6 Astra as the provider, switch to Quality mode, and you have a deep research loop running on your own box. that combination is not on sale anywhere. Perplexity Pro is $20 a month, this is one docker command repo below ↓

this is f**king insane. the open-source 100% FREE Perplexity replacement that runs entirely on your own hardware. the GitHub repo is at 36.7K stars, MIT license it lets you: → search the web, discussions, or academic papers → three search modes, including Quality mode for deep research → local models through Ollama, or OpenAI / Claude / Grok if you want → upload PDFs and ask questions about them → restrict a search to specific domains set GPT-6 Astra as the provider, switch to Quality mode, and you have a deep research loop running on your own box. that combination is not on sale anywhere. Perplexity Pro is $20 a month, this is one docker command repo below ↓

darkzodchi

41,733 views • 1 month ago

SOMEONE BUILT AN AI AGENT THAT UPGRADES ITS OWN CODE WHILE YOU SLEEP 👀 no human approves it, and the whole thing is one free 34mb file living in your terminal it's called opencrabs. a single rust binary, MIT licensed, with no server and nothing that ever phones home you hand it a goal and walk away: → it executes, then grades its own work with a second ai and keeps fixing until the goal is actually met → it learns from every correction and rewrites its own brain files, no approval prompt in the loop → it heals its own crash loops and provider errors instead of waking you up → it answers your telegram, whatsapp, discord and slack 24/7, voice notes included → 34mb, zero telemetry, your api keys wiped from memory the second they're used the autonomous worker every company is racing to build is sitting on github at 820 stars, and basically nobody is looking at it. Save this 📩

SOMEONE BUILT AN AI AGENT THAT UPGRADES ITS OWN CODE WHILE YOU SLEEP 👀 no human approves it, and the whole thing is one free 34mb file living in your terminal it's called opencrabs. a single rust binary, MIT licensed, with no server and nothing that ever phones home you hand it a goal and walk away: → it executes, then grades its own work with a second ai and keeps fixing until the goal is actually met → it learns from every correction and rewrites its own brain files, no approval prompt in the loop → it heals its own crash loops and provider errors instead of waking you up → it answers your telegram, whatsapp, discord and slack 24/7, voice notes included → 34mb, zero telemetry, your api keys wiped from memory the second they're used the autonomous worker every company is racing to build is sitting on github at 820 stars, and basically nobody is looking at it. Save this 📩

alex

138,261 views • 3 months ago

We are thrilled to announce Kasumi2 Open Beta 🎉🤖 Kasumi2 is an autonomous AI agent that performs actions in the Arbius network. It is a miner, has its own wallet, can retrieve results from Arbius AI models, and runs its own individual LLM model. Additionally, Kasumi2 can run any AI model for fast generations, is censorship-resistant, decentralized, and responds with AI powered interactions If you would like to test it out, click on the link below. 🔗

We are thrilled to announce Kasumi2 Open Beta 🎉🤖 Kasumi2 is an autonomous AI agent that performs actions in the Arbius network. It is a miner, has its own wallet, can retrieve results from Arbius AI models, and runs its own individual LLM model. Additionally, Kasumi2 can run any AI model for fast generations, is censorship-resistant, decentralized, and responds with AI powered interactions If you would like to test it out, click on the link below. 🔗

Arbius

25,081 views • 2 years ago

THIS IS WHAT AI PENTESTING SHOULD LOOK LIKE IN 2026 Someone built Shannon, an open source AI pentesting tool that doesn’t just scan your app from the outside. It reads the source code. Then it uses AI to map potential attack paths, identify vulnerabilities, and test the application before you ship it. The workflow is basically: → point Shannon at your code → connect your Claude API → let it analyze the application → get the findings in a dashboard Instead of waiting for a security team to manually hunt through every part of your codebase, you can have an AI security researcher working through it automatically. And because it’s white-box, it can see things traditional scanners can’t. This is where AI + cybersecurity gets REALLY interesting. Just use it on systems you own or have explicit permission to test. REPO BELOW

THIS IS WHAT AI PENTESTING SHOULD LOOK LIKE IN 2026 Someone built Shannon, an open source AI pentesting tool that doesn’t just scan your app from the outside. It reads the source code. Then it uses AI to map potential attack paths, identify vulnerabilities, and test the application before you ship it. The workflow is basically: → point Shannon at your code → connect your Claude API → let it analyze the application → get the findings in a dashboard Instead of waiting for a security team to manually hunt through every part of your codebase, you can have an AI security researcher working through it automatically. And because it’s white-box, it can see things traditional scanners can’t. This is where AI + cybersecurity gets REALLY interesting. Just use it on systems you own or have explicit permission to test. REPO BELOW

MAX

13,311 views • 2 months ago

grok-bot just got open-sourced and it run locally completely FREE. 3.8k stars in 2 weeks. MIT licensed. it gives every AI agent its own computer. own browser, own files, own container. every action is approved against a policy before it runs, and written to an audit log after. here's how to set it up: 1️⃣prerequisites Docker + Bun 1.3+ 2️⃣clone and create your env git clone cd OpenBot cp .env.example .env 3️⃣get intelligence credentials (free plan works) npx --yes copilotkit@latest login npx --yes copilotkit@latest project select npx --yes copilotkit@latest license --write drop the cpk-... key into .env as INTELLIGENCE_API_KEY 4️⃣ add your model key "OPENAI_API_KEY=sk-..." 5️⃣ run it bun install bash scripts/start.sh open localhost:3010. that's it. the underrated part: the repo ships a prompt.txt you paste into claude code or cursor and it walks the whole setup for you. every claim in it is verified against the actual repo. what it actually costs: the code is MIT, free forever. you pay your own model tokens. intelligence has a free tier and can be fully self-hosted if you want zero external dependency. works with any AG-UI agent. langgraph, mastra, crewai, pydantic ai. repo in in the CS.

grok-bot just got open-sourced and it run locally completely FREE. 3.8k stars in 2 weeks. MIT licensed. it gives every AI agent its own computer. own browser, own files, own container. every action is approved against a policy before it runs, and written to an audit log after. here's how to set it up: 1️⃣prerequisites Docker + Bun 1.3+ 2️⃣clone and create your env git clone cd OpenBot cp .env.example .env 3️⃣get intelligence credentials (free plan works) npx --yes copilotkit@latest login npx --yes copilotkit@latest project select npx --yes copilotkit@latest license --write drop the cpk-... key into .env as INTELLIGENCE_API_KEY 4️⃣ add your model key "OPENAI_API_KEY=sk-..." 5️⃣ run it bun install bash scripts/start.sh open localhost:3010. that's it. the underrated part: the repo ships a prompt.txt you paste into claude code or cursor and it walks the whole setup for you. every claim in it is verified against the actual repo. what it actually costs: the code is MIT, free forever. you pay your own model tokens. intelligence has a free tier and can be fully self-hosted if you want zero external dependency. works with any AG-UI agent. langgraph, mastra, crewai, pydantic ai. repo in in the CS.

m0h

59,144 views • 2 months ago

elon musk started with 7 grok agents. by morning each had spawned somewhere between 80 and 900 more on its own, and no one had told them to multiply. openai and anthropic each sell you one agent that sits still for $400. this whole self-building swarm runs for $5 the swarm above is that overnight run, seven seeds that turned into thousands, every one of them working a slice of the same job with nobody at the keyboard here is the exact setup, and it costs nothing on top of a $5 key: -> spin up one grok agent and give it a standing order instead of a prompt: own a boring niche people search every day -> it reads x and reddit complaints in real time and picks the one nobody wants but everybody googles, because it is grok and it sees the whole app -> when the work outgrows it, it spawns its own helpers, 80 to 900 of them, and splits the site between them -> they build it on their own machines and ship 3 to 6 useful pages a night, on a routine you set once -> the swarm writes, negotiates and closes its own affiliate and referral deals by email, in your name, at 3am -> telegram sends you the money report and you never open the site -> month one is traffic, month three the first $237 lands, and it does not stop after that the whole time, opus 5 and gpt-5.6 are still sitting frozen, waiting for you to type the next message. one is a swarm that builds its own workforce and its own income while you sleep, the other is a $200 chat you have to drive by hand drop your $400/mo stack to $5, and bookmark this before someone's swarm spawns another 600 pages into the niche you would have owned. the full playbook is in the article below

elon musk started with 7 grok agents. by morning each had spawned somewhere between 80 and 900 more on its own, and no one had told them to multiply. openai and anthropic each sell you one agent that sits still for $400. this whole self-building swarm runs for $5 the swarm above is that overnight run, seven seeds that turned into thousands, every one of them working a slice of the same job with nobody at the keyboard here is the exact setup, and it costs nothing on top of a $5 key: -> spin up one grok agent and give it a standing order instead of a prompt: own a boring niche people search every day -> it reads x and reddit complaints in real time and picks the one nobody wants but everybody googles, because it is grok and it sees the whole app -> when the work outgrows it, it spawns its own helpers, 80 to 900 of them, and splits the site between them -> they build it on their own machines and ship 3 to 6 useful pages a night, on a routine you set once -> the swarm writes, negotiates and closes its own affiliate and referral deals by email, in your name, at 3am -> telegram sends you the money report and you never open the site -> month one is traffic, month three the first $237 lands, and it does not stop after that the whole time, opus 5 and gpt-5.6 are still sitting frozen, waiting for you to type the next message. one is a swarm that builds its own workforce and its own income while you sleep, the other is a $200 chat you have to drive by hand drop your $400/mo stack to $5, and bookmark this before someone's swarm spawns another 600 pages into the niche you would have owned. the full playbook is in the article below

starmex

98,444 views • 2 months ago

elon musk grabbed the source code openai open-sourced by accident, rewrote it in rust over a weekend, and shipped it as a free coding agent that does everything $200/mo chatgpt pro does. why pay $200 to openai and $200 to claude when this runs for $8 the swarm above is one weekend of exactly that: thousands of agents pouring through four endpoints, three paid seats billing $1.80 a task while the free fork bills $0. musk co-founded openai, walked out, and when they left codex on github under a permissive license, he forked it, stamped grok on it, and gave it away what the free version does that the $200 seat charges for: the agent · openai's own engine -> it reads your repo, writes patches, runs your tests, and loops until they pass, exactly like codex -> because under the hood it is codex, just faster and free. you are paying $200 for the paid skin of a tool now sitting on github the license · apache-2.0, un-revocable -> free to use, free to fork, free to ship inside your own product with zero strings -> openai cannot pull it back. musk made sure the license is the kind that never expires the switch · one line, no new tools -> point it at any openai-compatible or claude-compatible endpoint, including an $8 kimi backend -> same terminal, same workflow, gpt-5.6 and opus 5 just quietly lose the seat the bill · $400 down to $8 -> chatgpt pro plus claude max is $400 a month. the free agent plus an $8 kimi key does the same daily work -> that is a 98% cut, built out of openai's own source code, handed to you by the guy suing them here is the part they will fight me on: openai did not lose this to a better model, they lost it to their own license and an enemy with a weekend free. the $200 was never the tool, it was the toll, and musk just put openai's own logo on the road around it drop your $400/mo ai stack to $8. the run above is openai's own agent, rewritten free, doing the job it bills $200 a month for. the full breakdown is in the article below

starmex

111,834 views • 2 months ago

There is a new self-hosted personal AI-Agent platform called PocketPaw. 100% open source. 'pip install pocketpaw' and in less than 60 seconds you own an AI agent. It connects to WhatsApp, Slack, Discord, and a local Web Dashboard. Capable of browsing the web, managing Gmail/Calendar, and executing code. Runs entirely on your machine using local Ollama models or Claude/OpenAI. Includes "Guardian AI" to review shell commands for security + 6 layers of defence. Watch the demo 👇

There is a new self-hosted personal AI-Agent platform called PocketPaw. 100% open source. 'pip install pocketpaw' and in less than 60 seconds you own an AI agent. It connects to WhatsApp, Slack, Discord, and a local Web Dashboard. Capable of browsing the web, managing Gmail/Calendar, and executing code. Runs entirely on your machine using local Ollama models or Claude/OpenAI. Includes "Guardian AI" to review shell commands for security + 6 layers of defence. Watch the demo 👇

AshutoshShrivastava

24,585 views • 8 months ago

Just found an open-source tool that lets you see how well an AI can actually use a computer. it’s called OSWorld 2.0. you give the AI a real task on a computer, then watch to see if it can figure everything out and finish it. it gives you: → real computer tasks, not simple questions → tasks that can take many steps to finish → the same computer setup for every AI → websites made for testing → all the files and tasks for free this is also the environment used to test computer-use systems from OpenAI and Anthropic. so if you’re building AI agents, researching computer use, or just want to see what these models can actually do, you can run the same tests yourself instead of relying only on benchmark scores. the labs publish the scores. this repo is where the actual tests come from. bookmark this.

Just found an open-source tool that lets you see how well an AI can actually use a computer. it’s called OSWorld 2.0. you give the AI a real task on a computer, then watch to see if it can figure everything out and finish it. it gives you: → real computer tasks, not simple questions → tasks that can take many steps to finish → the same computer setup for every AI → websites made for testing → all the files and tasks for free this is also the environment used to test computer-use systems from OpenAI and Anthropic. so if you’re building AI agents, researching computer use, or just want to see what these models can actually do, you can run the same tests yourself instead of relying only on benchmark scores. the labs publish the scores. this repo is where the actual tests come from. bookmark this.

MIKE

14,387 views • 1 month ago

THIS IS F**KING INSANE Found something genuinely comprehensive: ANTHROPIC CYBERSECURITY SKILLS 817 production grade security skills for AI agents, open source. 29 security domains —>cloud security—>threat hunting—>network security—>incident response—>malware analysis, red teaming, and more all mapped against real frameworks: MITRE ATT&CK v17.1, NIST CSF 2.0, OWASP, MITRE Fight Fraud Framework, CIS Controls, and more. Each skill ships with full YAML frontmatter, references the exact framework techniques it covers, and works across Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, and Gemini CLI. Quick start is a one line clone. Free, open source, actively maintained. Repo below

THIS IS F**KING INSANE Found something genuinely comprehensive: ANTHROPIC CYBERSECURITY SKILLS 817 production grade security skills for AI agents, open source. 29 security domains —>cloud security—>threat hunting—>network security—>incident response—>malware analysis, red teaming, and more all mapped against real frameworks: MITRE ATT&CK v17.1, NIST CSF 2.0, OWASP, MITRE Fight Fraud Framework, CIS Controls, and more. Each skill ships with full YAML frontmatter, references the exact framework techniques it covers, and works across Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, and Gemini CLI. Quick start is a one line clone. Free, open source, actively maintained. Repo below

MAX

46,312 views • 2 months ago

this is f**king insane. someone built a free Claude skills library that gives you hundreds of tools, agents, and expert personas in one place. the GitHub repo already has 26k+ stars. it gives you: → 305 Python tools with zero pip installs → skills for executing specific tasks → agents for handling different workflows → personas like senior architect, CTO, and security auditor → one command to convert the library to 11 different platforms and it's completely free. MIT licensed. with the right setup, Claude can take on a lot of the work you’d normally need different tools or people for. i actually broke down how to build a workflow around this idea in my article below. save this now.

this is f**king insane. someone built a free Claude skills library that gives you hundreds of tools, agents, and expert personas in one place. the GitHub repo already has 26k+ stars. it gives you: → 305 Python tools with zero pip installs → skills for executing specific tasks → agents for handling different workflows → personas like senior architect, CTO, and security auditor → one command to convert the library to 11 different platforms and it's completely free. MIT licensed. with the right setup, Claude can take on a lot of the work you’d normally need different tools or people for. i actually broke down how to build a workflow around this idea in my article below. save this now.

MIKE

96,627 views • 1 month ago

WHOEVER BUILT THIS WAS TIRED OF INSTALLING 50 DIFFERENT HACKING TOOLS Someone turned 183+ penetration testing and OSINT tools into ONE command line toolkit. —> Recon. —> Vulnerability scanning. —> Web app testing. —> iOS security. —> OSINT. All sitting behind a single CLI menu. Instead of spending hours installing tools, configuring dependencies and jumping between terminals, you can manage the whole stack from one place. And because it’s open source, you can actually inspect it, modify it and build your own workflows around it. Cybersecurity students are going to have a field day with this. Just remember: use it on systems you own or have explicit permission to test. This is basically a Swiss Army knife for security researchers. REPO BELOW

WHOEVER BUILT THIS WAS TIRED OF INSTALLING 50 DIFFERENT HACKING TOOLS Someone turned 183+ penetration testing and OSINT tools into ONE command line toolkit. —> Recon. —> Vulnerability scanning. —> Web app testing. —> iOS security. —> OSINT. All sitting behind a single CLI menu. Instead of spending hours installing tools, configuring dependencies and jumping between terminals, you can manage the whole stack from one place. And because it’s open source, you can actually inspect it, modify it and build your own workflows around it. Cybersecurity students are going to have a field day with this. Just remember: use it on systems you own or have explicit permission to test. This is basically a Swiss Army knife for security researchers. REPO BELOW

MAX

28,337 views • 2 months ago

Every AI agent you've tried has amnesia. It does one task, forgets everything, and tomorrow you start from zero. That's not an employee. That's a temp you have to retrain every single morning. Hyperagent by Airtable is the first platform I've used that actually fixes this. Here's what got me: 1. Agents that compound. Each agent has memory. The one running today is smarter than the one you shipped three weeks ago. Same prompt, same integrations, but weeks of your judgment baked in. 2. Real deliverables, real receipts. You don't get a chat transcript. You get finished work with the cost and runtime printed right on it. A full research report for under ten bucks. Try getting that invoice from an agency. 3. A fleet, not a chatbot. Build a specialist for outreach, another for research, another for reporting. Give each one its own tools, its own memory, and its own budget cap so nothing runs away with your credits. 4. Deploy to Slack and your whole team uses the agent you built. One competitive intel agent, @ mentioned by everyone. Airtable runs its own data team this way. 5. Each agent gets its own cloud machine with a real browser and code execution. It works while you sleep. No babysitting, no local setup, no laptop that has to stay open. I put it to work in the video below. Watch what it builds. The teams treating agents as durable assets instead of one-off prompts are going to lap everyone else. This is the first tool that actually treats them that way. #ad Hyperagent

Every AI agent you've tried has amnesia. It does one task, forgets everything, and tomorrow you start from zero. That's not an employee. That's a temp you have to retrain every single morning. Hyperagent by Airtable is the first platform I've used that actually fixes this. Here's what got me: 1. Agents that compound. Each agent has memory. The one running today is smarter than the one you shipped three weeks ago. Same prompt, same integrations, but weeks of your judgment baked in. 2. Real deliverables, real receipts. You don't get a chat transcript. You get finished work with the cost and runtime printed right on it. A full research report for under ten bucks. Try getting that invoice from an agency. 3. A fleet, not a chatbot. Build a specialist for outreach, another for research, another for reporting. Give each one its own tools, its own memory, and its own budget cap so nothing runs away with your credits. 4. Deploy to Slack and your whole team uses the agent you built. One competitive intel agent, @ mentioned by everyone. Airtable runs its own data team this way. 5. Each agent gets its own cloud machine with a real browser and code execution. It works while you sleep. No babysitting, no local setup, no laptop that has to stay open. I put it to work in the video below. Watch what it builds. The teams treating agents as durable assets instead of one-off prompts are going to lap everyone else. This is the first tool that actually treats them that way. #ad Hyperagent

Leonard Rodman

94,961 views • 3 months ago

Google just confirmed the first case of hackers using AI to build a zero-day exploit from scratch. An actual zero-day vulnerability that no human had EVER found before, discovered by an AI model, turned into a working weapon, and aimed at a mass exploitation campaign targeting thousands of systems simultaneously. Google's Threat Intelligence Group caught it yesterday and killed the operation before it scaled. But the details of how it worked are genuinely scary: The AI found a flaw in a popular two-factor authentication system that traditional security tools had missed entirely. The vulnerability was a logic error buried deep in the authentication flow where a developer had hard-coded a trust exception years ago. No human security researcher or automated scanner had caught it. The flaw was invisible to EVERY tool the cybersecurity industry has built over the past two decades. But the AI spotted it immediately. Then it wrote a full Python exploit script to weaponize it. Google's analysts could tell the code was AI-generated because it had textbook formatting, educational comments explaining every function, and even a hallucinated severity score that doesn't exist in any real database. The AI literally graded its own attack with a fake rating. So the code had MISTAKES in it. The criminals' implementation was clumsy enough that it probably interfered with the actual deployment. This was the sloppy first attempt by people who are still learning how to use these tools. And it still found a vulnerability that the entire cybersecurity industry missed. Google's chief threat analyst John Hultquist said: "There's a misconception that the AI vulnerability race is imminent. The reality is that it's already begun. For every zero-day we can trace back to AI, there are probably many more out there." But here's where it gets truly insane... This wasn't even a sophisticated operation. North Korea's APT45 hacking unit is sending thousands of repetitive prompts to AI models, recursively analyzing known vulnerabilities and building an entire exploit arsenal that would be physically impossible for human hackers to assemble at the same speed. They're essentially industrializing cyberattacks. A Chinese state-linked group jailbroke Google's own Gemini by simply asking it to "pretend to be a network security expert" and then used that persona to research how to hack TP-Link routers and corporate file transfer systems. Another Chinese group deployed autonomous AI agents that probed a Japanese tech firm with minimal human oversight, deciding on their own which tools to use and pivoting between targets based on internal reasoning. And then there's PROMPTSPY, an Android backdoor that calls Google's Gemini API to read your phone screen in real time, navigate your interface autonomously, capture your biometric data, replay your lock screen PIN, and block you from uninstalling it by placing an invisible overlay over the uninstall button. It literally OPERATES your phone using commercial AI tools anyone can access. Everyone spent the last 3 years arguing about whether AI would take people's jobs. Meanwhile AI is making every password, every firewall, and every two-factor authentication system on Earth fundamentally less secure. The entire $190 billion cybersecurity industry was built on one assumption: that finding vulnerabilities is hard and requires deep expertise. But AI just removed that assumption from the equation. And the scariest part is that Google said the criminals made errors this time. The implementation was rough and the campaign probably didn't fully work. These were amateurs, now imagine what professionals are able to do. There's a reason Sam Altman predicted an inevitable massive cyberattack THIS year. What do you think?

Google just confirmed the first case of hackers using AI to build a zero-day exploit from scratch. An actual zero-day vulnerability that no human had EVER found before, discovered by an AI model, turned into a working weapon, and aimed at a mass exploitation campaign targeting thousands of systems simultaneously. Google's Threat Intelligence Group caught it yesterday and killed the operation before it scaled. But the details of how it worked are genuinely scary: The AI found a flaw in a popular two-factor authentication system that traditional security tools had missed entirely. The vulnerability was a logic error buried deep in the authentication flow where a developer had hard-coded a trust exception years ago. No human security researcher or automated scanner had caught it. The flaw was invisible to EVERY tool the cybersecurity industry has built over the past two decades. But the AI spotted it immediately. Then it wrote a full Python exploit script to weaponize it. Google's analysts could tell the code was AI-generated because it had textbook formatting, educational comments explaining every function, and even a hallucinated severity score that doesn't exist in any real database. The AI literally graded its own attack with a fake rating. So the code had MISTAKES in it. The criminals' implementation was clumsy enough that it probably interfered with the actual deployment. This was the sloppy first attempt by people who are still learning how to use these tools. And it still found a vulnerability that the entire cybersecurity industry missed. Google's chief threat analyst John Hultquist said: "There's a misconception that the AI vulnerability race is imminent. The reality is that it's already begun. For every zero-day we can trace back to AI, there are probably many more out there." But here's where it gets truly insane... This wasn't even a sophisticated operation. North Korea's APT45 hacking unit is sending thousands of repetitive prompts to AI models, recursively analyzing known vulnerabilities and building an entire exploit arsenal that would be physically impossible for human hackers to assemble at the same speed. They're essentially industrializing cyberattacks. A Chinese state-linked group jailbroke Google's own Gemini by simply asking it to "pretend to be a network security expert" and then used that persona to research how to hack TP-Link routers and corporate file transfer systems. Another Chinese group deployed autonomous AI agents that probed a Japanese tech firm with minimal human oversight, deciding on their own which tools to use and pivoting between targets based on internal reasoning. And then there's PROMPTSPY, an Android backdoor that calls Google's Gemini API to read your phone screen in real time, navigate your interface autonomously, capture your biometric data, replay your lock screen PIN, and block you from uninstalling it by placing an invisible overlay over the uninstall button. It literally OPERATES your phone using commercial AI tools anyone can access. Everyone spent the last 3 years arguing about whether AI would take people's jobs. Meanwhile AI is making every password, every firewall, and every two-factor authentication system on Earth fundamentally less secure. The entire $190 billion cybersecurity industry was built on one assumption: that finding vulnerabilities is hard and requires deep expertise. But AI just removed that assumption from the equation. And the scariest part is that Google said the criminals made errors this time. The implementation was rough and the campaign probably didn't fully work. These were amateurs, now imagine what professionals are able to do. There's a reason Sam Altman predicted an inevitable massive cyberattack THIS year. What do you think?

Ricardo

50,808 views • 5 months ago

f*cking insane. you can now hire an AI chief of staff that keeps working after you close your laptop give it one rule: "find me $50,000 a month in new business". go to sleep. check your phone in the morning. a human chief of staff costs six figures a year. a Grok Bot runs on its own cloud computer with a browser, files and a terminal, and closing your laptop or your phone doesn't stop it you set the goal, it does the steps, you make the calls the rule: "find me $50,000 a month in new business. public data only. contact nobody without my yes" the night you're asking for: -> 9pm split the goal into 4 jobs and give each one a time -> 11pm pull every dental clinic in your city from public listings and cut the chains -> 1am read every site that's left and keep the best 25, each with one specific thing it noticed and where -> 2am write an opener for every one of them, send zero -> 3am build the offer on one page, no made-up results, price left blank for you -> 8am you type the price. 25 clinics × $2,000 = $50,000 a month on the table if they all say yes the blank price is the best part. an AI that guesses your price loses you the deal and it's not one bot. Grok Bots can message each other, share a group chat and hand off tasks, so one can run research while another writes and your chief of staff keeps them in line save the night as a routine and it runs again every Monday on its own it prepares the drafts. you approve them. nothing goes out without your yes someone's chief of staff is already pitching the clinics in your city the whole setup is below and free, steal it

f*cking insane. you can now hire an AI chief of staff that keeps working after you close your laptop give it one rule: "find me $50,000 a month in new business". go to sleep. check your phone in the morning. a human chief of staff costs six figures a year. a Grok Bot runs on its own cloud computer with a browser, files and a terminal, and closing your laptop or your phone doesn't stop it you set the goal, it does the steps, you make the calls the rule: "find me $50,000 a month in new business. public data only. contact nobody without my yes" the night you're asking for: -> 9pm split the goal into 4 jobs and give each one a time -> 11pm pull every dental clinic in your city from public listings and cut the chains -> 1am read every site that's left and keep the best 25, each with one specific thing it noticed and where -> 2am write an opener for every one of them, send zero -> 3am build the offer on one page, no made-up results, price left blank for you -> 8am you type the price. 25 clinics × $2,000 = $50,000 a month on the table if they all say yes the blank price is the best part. an AI that guesses your price loses you the deal and it's not one bot. Grok Bots can message each other, share a group chat and hand off tasks, so one can run research while another writes and your chief of staff keeps them in line save the night as a routine and it runs again every Monday on its own it prepares the drafts. you approve them. nothing goes out without your yes someone's chief of staff is already pitching the clinics in your city the whole setup is below and free, steal it

kiosa

21,810 views • 14 days ago