If you're a security professional thinking about building something you have no business building: do it. Just bring your engineering brain along for the ride 🙂
https://accidental-ciso.alevsk.dev/
Happy hacking 💻 🏴☠️
Remote
Lenin alevski 🕵️💻
@alevsk@infosec.exchange
mastodon 4.8.0-alpha.3+glitch#security Eng @google@infosec.exchange ♥️ To Build and Break Stuff. Wannabe #Hacker. Personal opinions, review my PR please
422 Followers
102 Following
20 Posts
Joined November 18, 2022
Blog:
PGP/MIT:
0x67BA54C7DE3DD14A
Link:
Twitter:
Replying to
If you haven't played it yet (or want to give it another shot), now's a great time before we get into the story behind it on the podcast.
🎮 https://accidental-ciso.alevsk.dev/game
Why use a CLI for VirusTotal? 🤔💻
VirusTotal's `vt-cli` gives power users full VirusTotal access right from the terminal: fetch file/URL reports, launch YARA RetroHunts, search with advanced filters, or download files securely. All it needs is an API key. #Cybersecurity #CommandLine
🔗 Project link on #GitHub 👉 https://github.com/VirusTotal/vt-cli
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Ever wished for a tool that simplifies endpoint discovery? 🔍✨
Hakrawler is a blazingly fast web crawler built with Go, ideal for pentesting and reconnaissance. It extracts URLs, assets, and JavaScript files effortlessly, and its command-line options—like proxy support, JSON output, or subdomain crawling—offer flexibility for advanced workflows. Combine it with tools like Haktrails for robust OSINT.
#cybersecurity #pentesting #opensource
🔗 Project link on #GitHub 👉 https://github.com/hakluke/hakrawler
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Im planning to submit this little project to the recon village @ DEFCON this year, do you think it has potential?
Platform : go+postgres+nats+s3+redis+react+zustand. App running in k8s, very feeder and analyzer can run separately for data ingestion and horizontal scaling
Replying to
@Sempf@infosec.exchange @accidentalciso@infosec.exchange a small narrative-based, point and click, style videogame I vibe coded
Haha amazing I just meet the real accidental ciso!
Why struggle with stale environment variables? 🌍🔐
Envilder streamlines .env management by syncing secrets directly with AWS SSM. Automate updates, maintain consistency across teams, and eliminate risky manual sharing of sensitive data. Ideal for cloud-native workflows and CI/CD setups.
🔗 Project link on #GitHub 👉 https://github.com/macalbert/envilder
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Why run AI tools on cluttered setups? 🐳🤔
ClaudeBox offers a fully containerized dev environment for Claude AI. Each project gets isolated Docker images, persistent data (auth, shell history), and pre-configured profiles for languages like Python or Rust. Perfect for reproducibility and multi-instance workflows. #Docker #AI #DevTools
🔗 Project link on #GitHub 👉 https://github.com/RchGrav/claudebox
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Why do LLM-based agents need a dedicated security benchmark? 🤖⚔️
The Agent Security Bench (ASB) formalizes and evaluates attacks (like prompt injections, PoT backdoors) and defenses on AI agents in 10 real-world scenarios, from legal to investment advice. A deep dive into threats beyond the surface. #AI #Cybersecurity #LLM
🔗 Project link on #GitHub 👉 https://github.com/agiresearch/ASB
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Why is OpenCode gaining traction among developers? 🤔💻
An AI coding agent built for the terminal, OpenCode is open-source, provider-agnostic, and supports LSP out of the box. Plus, its TUI focus enables seamless terminal integration, appealing to power users. #OpenSource #AI
🔗 Project link on #GitHub 👉 https://github.com/sst/opencode
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
✈️
Following the “vibe code your way to a fully functional intelligence agency platform meme” I've been spending some time experimenting with coding agents lately 😁
This project started as a personal way to learn more about OSINT, threat intelligence, and reconnaissance techniques
❓How secure are your Google Workspace groups? 🤔🔒
Gubble audits Google Groups settings to uncover risky configurations like "Anyone Can Join" or "External Members Allowed." Misconfigurations like these can expose sensitive data or enable phishing scenarios. Automate the checks before risks arise!
#GoogleWorkspace #SecOps #Cybersecurity
🔗 Project link on #GitHub 👉 https://github.com/LowOrbitSecurity/gubble
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
How does CAI handle 300+ AI models 🤖?
Cybersecurity AI (CAI) integrates a vast array of AI models, including OpenAI's GPT-4o, Anthropic's Claude 3, and custom ones like Qwen2.5. It achieves this through LiteLLM, a lightweight library supporting modular multi-model use, making AI-powered security testing efficient for diverse scenarios.
#CyberSecurity #AI #PenTesting
🔗 Project link on #GitHub 👉 https://github.com/aliasrobotics/cai
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
How does RAPTOR make AI-driven security smarter? 🦖🤖
RAPTOR fuses Claude Code with advanced tools like Semgrep, CodeQL, and AFL to create an autonomous security agent. It scans code, fuzzes binaries, analyzes vulnerabilities, and even generates patches or exploits—all while orchestrating defensive and offensive workflows. #CyberSecurity #AI
🔗 Project link on #GitHub 👉 https://github.com/gadievron/raptor
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Ever wished LLMs could drive your computer? 🤖💻
Open Interface combines GPT-4V/Gemini with simulated keyboard & mouse inputs. Request anything—generate code, play games, or edit docs. It even course-corrects using live screenshots. Truly autonomous UI automation. #AI #opensource #automation
🔗 Project link on #GitHub 👉 https://github.com/AmberSahdev/Open-Interface
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
Can AI really pair program effectively? 🤖💻
Aider brings LLMs like GPT-4 and Claude 3.7 directly into your terminal. It maps your entire codebase, supports 100+ languages, and even integrates with Git for seamless commits. A true collaborator, not just a chatbot. #AI #CodingTools #GitHub
🔗 Project link on #GitHub 👉 https://github.com/Aider-AI/aider
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️
🐾 What if AI agents could mimic real hackers to secure your apps?
Strix is an open-source system where autonomous AI agents dynamically test your code for vulnerabilities. Unlike static analysis, it validates findings with real proof-of-concepts—making security testing faster and more precise. #CyberSecurity #OpenSource
🔗 Project link on #GitHub 👉 https://github.com/usestrix/strix
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴☠️