This was streamed live this morning from the ICIST conference in Lithuania. Its happening. https://www.youtube.com/watch?v=b8VhICUcB6k

I’m the author of Super Trouper, a single-Go-binary stdio MCP server exposing Frida for authorized app reverse engineering.

I’ve just released v0.5.0 with the following changes:

• Updates the Frida Core DevKit to v17.23.2.
• Adds minimal, metadata, and full scope arguments to app_find and app_frontmost.
• Adds package_install for installing npm packages used by script_create imports, plus package_list for viewing packages in the shared workspace.
• Adds Frida's new Pattern lifecycle tools: pattern_create, pattern_list, pattern_read, and pattern_delete. • Adds pattern_describe to compile patterns and return types and diagnostics. • Adds pattern_decode to decode target memory using declared Pattern types.

Recent context: - v0.4.0 added memory_read, memory_write, module_list, and thread_list; introduced minimal, metadata, and full query scopes for app_list; renamed MCP tools for clearer namespaces; and updated the Frida Core DevKit to v17.19.0.
- v0.3.0 added npm installation support, Frida CodeShare snippet search/use support, and general cleanup and improvements.

I’d appreciate practical feedback on the package and Pattern workflows, especially where the current tools are missing useful reverse-engineering steps. Feature requests are welcome too.

Somewhat surprised with this merger (really an acquisition). I always thought Synack had the better business model to deal with the emerging push to automate and AI enable pen testing.

Synack built a good platform and crowdsourced pen testers. They were perfectly set up to adopt automation at scale.

But they chose to get acquired by Netspi which is a predominantly manual pen testing company.

Hi everyone!

I have eight years of experience in IT. Started on Helpdesk, went from VBA automation, Oracle SQL, front end to finish on backend and light devops. Got GCP ACE certificate. In the meantime, I got laid off on July (love reorgs) and since then can't find any job. It also made me try cybersecurity, and I fell in love with Red Teaming. Bought TryHackMe Max, finished Cybersec101 and currently doing Jr Pentester path.

I applied to many junior pentesting jobs but got replies on the first stage that I was rejected. There was only one, where I was applying to junior role, did the task and got feedback they need somebody more experienced. For junior role? How else am I supposed to gain experience?

My question to you is: how can I be more visible on the market? I know, that no cert gives you job, but which one makes the probability of getting hired higher? I'd really love to work in this field, feels like home to me. Eg. getting the flag, feels like doing puzzles :D

If it matters- I am based in Poland, but I assume the market here and EU is pretty different than US.

I don't want to discourge everyone but I am shitting myself from fear.

Layoffs everywhere. Yes most of them are developer but some security teams have been laid off as well , Netflix team was just laid off. Imagine Netflix and Google pentesters being laid off ??

AI is accelerating so much that we don't know how the future will look like.

What should we do ?

Some say learn how to harness your AI and use it in your workflow.

Some say you should learn plumbing

Even if we are safe now , in couple of years what is gonna happen?

I don't know what to do anymore.

That besides visa sponsorship issues Immigration Wars Racism Everyone fed up and taking it on each other.

I hope the world gets better in a couple of years

Hello, hope everyone is doing well. I've been studying and solving labs for about 2 years (yes, I fall into the student dilemma) and have gotten CPTS and am on the CRTO and CAPE path right now.
Also got a Bachelor's degree in Cyber Security.
I'm having a couple of problems; I hope you guys can help me solve them.
1. In my country, cybersecurity is a niche thing an organization would do. So most jobs around banking systems (Which is something I want to avoid working in). So how can I deal with this?
And is this going to be a problem on the career ladder?
2. Now, my study path is to finish the CRTO and CAPE path, then the BSCP and CWEE path. What can I add to the path? I saw that AI Red Teaming is going to be trendy, and remote opportunities are better.
3. If I didn't find pentesting/red team junior roles, should I pivot to IAM, sysadmin, or a helpdesk role and then pivot to security once I get the opportunity

Hi All,

My manager has asked me to pursue a certification in Mobile Application Penetration Testing, specifically focusing on Android and iOS.

I've come across the eMAPT certification from INE, and I'm considering taking it.

For those who have taken eMAPT or have experience in mobile penetration testing, what are your thoughts? Is it worth pursuing, or would you recommend a better certification that covers both Android and iOS?

I'd appreciate your recommendations and feedback!

Which entry-level job for penetration tester, I have a good knowledge in Linux , network, web hacking programming and tool like burpsuit, wireshark and other cli tool but with these knowledge where I mistake to deliver my first job role and what your suggestions and guidance for me .

Hey all, I'm 24 and about 2-3 months into my first pentesting role. I never advertised experience beyond a few labs, but the lead took a chance on me and told me I'd learn a lot. I expected to start in the SOC, but now I'd never go back. I love this work.

That said, I feel like I'm constantly playing catch-up. I'm working on HTB CPTS alongside the job, but between internal/AD, web, API, WiFi and more, I keep hitting walls.

My first engagement was an internal pentest and I felt like I flopped. I got one hash I couldn't crack, found my user had a MachineAccountQuota of 10 but didn't know about RBCD yet, and found a lot of PII, but no real exploitation.

My company is pretty relaxed on methodology, so I can work however suits me. I just can't find good resources that reflect real engagements. HTB is great, but client environments feel different.

How did you bridge the gap between labs and real internal pentests?

How do you decide what to learn first when everything feels important?

Does the "I flopped my first engagement" feeling ever go away?

I am looking for AI either local or online which will help me create automated scripts and help analyze logs or anything in general which other well known AI don't do. Can you please suggest something?

I've been following Commix for a while, and finally seeing an API is huge. The original request goes all the way back to 2016: https://github.com/commixproject/commix/issues/27

I tried both the REST API and the new Burp Suite extension, and honestly, they're fire!

The API lets you launch and manage scans over HTTP, run multiple scans in parallel, monitor results live, and retrieve JSON reports. Lots of possibilities for custom tooling and automation.

The Burp extension takes it to another level. You can launch Commix straight from Burp, watch the scan run, and get confirmed findings as native Burp Scanner issues. No need to keep jumping between Burp and a terminal.

The extension's BApp Store submission is still in progress, but you can check it out on GitHub already : https://github.com/commixproject/commix-to-burp

Definitely worth checking out if you're into bug bounty, security automation, or CTFs.

Big props to the Commix project for this one.

Hello,

I am looking to do some certifications since my employer is paying for it, already got OSCP and CPTS. I’ve heard of White knight labs, what’s your experience with it?

Thank you,
Best regards

https://glitr.io/blog/reverse-engineering-my-own-project

i wanted to red-team myself on my project and id like to know how to reverse engineer so i can see what can be done to defend against it.

my app is aiming to be fully client-side. things like javascript seem like it would relatively easy for an AI to chew-up, my latest project is in rust, which would make it harder for a person, but AI can digest binaries.

i created a fairly unique p2p messaging app. a Rust-based frontend with a Git-server backend, which can be used to establish a P2P connection. while this version remains close-source, i have aimed to create the most comprehensive documentation (formal-verification and security audits too (all ai generated under my guidance)).

1. https://glitr.io
2. https://app.glitr.io

a core detail to my project is the focus on local-first and client-side cryptography and storage. id wanted to learn how vulnerable this project is to decompilation. i think my older iteration as a javascript webapp would be relatively easy for AI, so i thought id put a spin-on-things by having a rust wasm frontend... i dont think it even slowed it down.

i dont know much about decompiling, but i think the TUI would be the easiest for it to decompile and given its largly one codebase, it can be used to trace and see whats going on the build for the other platforms.

it might be that all close source is obselete. i tried asking here, and the responses there are polar opposites, so i decided to get some first-hand experience.

im using using cursor composer 2.5 (far from the frontier models available). i used https://github.com/morluto/rea and gave it a few binaries of my project (tui, apk, web) and pointed it to the documentation on the website.

after a few prompts, it seems to have done a decent job decompiling the project here: https://github.com/positive-intentions/glitr-decompiled (note: this is basically AI-slop). like with many projects, i see AI lacks taste in architecture. it consolidates a lot of complexity into one repo, when in my project it's split into multiple repos. it also seems to lack a bunch of bells and whistles i added for my own benefit like formal verification and rigorous unit-tests (having done it myself before, i dont think that is a large gap to fill for somone who knows what they are doing). i think the overhead to keep up with new changes may become trivial if you can automate the process. i kinda offer the base in the repo above (maybe it saves you a few tokens?), but its for my own research and i dont plan to maintain it given it undermines the actual project.

in general, im impressed. it seems this may push forward my timeline for when i open source my project, i wasnt expecting close-source being so easy to undemine. while the project can be decompiled, in a project like this, its important to consider the countless nuances there are in cybersecurity. the code is only a part of the project.

(note: feel free to try decompile this yourself or offer tips on how i can improve. id be keen to see what can be done. feel free to reach out for clarity about how it works within the limitation of the original source code not being used)

been working on this for a few weeks. it's a wifi and bluetooth toolkit for the esp32, runs off a single button and a small oled. no pc needed once it's flashed — updates come over wifi from a browser.

whole thing is about $8. esp32 board + oled + a button. that's it.

what it does:

- scans wifi, sniffs probes, reveals hidden SSIDs, shows channel congestion

- WPA2 stuff — PMKID capture, EAPOL handshake capture (hashcat 22000 format), deauth, targeted deauth

- captive portals — karma, rogue ap, 2fa (email/pass then otp)

- BLE spam

- optional nrf24 module for a 2.4ghz RF sweep

- captures save to onboard flash so they survive reboots

controls are just the boot button. short press scrolls, long press selects. that's the whole UI.

repo here if anyone wants to look: https://github.com/eccue/ALIEN-ESP

im self taught and this is my first real project so go easy lol. built with AI as a coding tool but wired and tested everything by hand on my own board.

for authorized testing only obviously. dont be weird with it.

Hi,

I'm taking the OSAI course and just way out my depth here, looking for a tutor that can help me understand the course and work through some of the challenges, I also need to learn to build an AI Harness for attacks for the challenge labs as well.

Would you consider the lack of client isolation on a guest WiFi network a valid finding during an internal network penetration test?

I'm curious how other pentesters approach this and what severity you would typically assign, assuming connected guests can communicate directly with each other.

I am a relatively new grad pentester, 23 with about 1.5 yoe. I pretty much run the whole process from scoping/kickoff to readouts. I make 75k.

If y’all are comfortable, could y’all drop your stats below.

YOE:
Title:
Salary:

Hey everyone! I've been working on OWASP Hunting, an open-source project for security researchers and penetration testers.

Feel free to explore the project, use it in authorized testing, and contribute!

🔗 OWASP: https://owasp.org/projects/hunting
💻 GitHub: https://github.com/OWASP/OWASP-Hunting

Feedback and contributions are welcome!

Hi there,

I recently got my first tech/cyber role out of college in threat intel/vulnerability management. It took me 18 months to get a role but it pays well ($83k) starting out. Honestly I’m very proud of myself because I’m essentially self-taught, and was able to get through a pretty rigorous interview that went super in-depth on web-app vulnerabilities.

My main goal is to get into pentesting. So far I’ve been doing web security labs through PortSwigger, completed the CPTS path on HTB (taking the exam in December), and publish writeups on my solved boxes on Medium. I also go to local security meetups, though I haven’t turned that into any direct industry connections yet.

After CPTS I’m planning to go for CRTO/OSCP, and eventually GWAPT since web app testing is a smaller part of my current role and my employer covers the cost of GIAC certs.

I’m planning to stay in my current role for another year or two to build up more experience and finish CPTS/OSCP before I start applying — want a stronger resume and more runway before I make the jump. Does that timeline make sense, or should I be applying sooner/in parallel?

Any other advice is welcome. Thanks!

Hey everyone,

I've been working on a project called PenX, an open-source security reconnaissance toolkit for Windows 10/11.

It's based on the original METATRON project, which was designed for Linux. I wanted something similar that runs natively on Windows, without having to set up Kali, WSL, or a separate Linux VM just to use a few reconnaissance tools.

So I've been porting and expanding it.

PenX basically brings several security tools together in one terminal interface:

• Nmap – Port scanning and service discovery
• WhatWeb – Web technology fingerprinting
• Nikto – Web server vulnerability scanning
• WHOIS & DNS – Domain reconnaissance
• HTTP Headers – Basic security header analysis
• Local AI – Analyze scan results using your own LLM
• PDF/HTML Reports – Export findings
• Scan History – Store and review previous results locally

The part I find most interesting is the local AI integration.

You can connect PenX to Ollama or LM Studio and use whatever compatible model you have running locally. The model can analyze reconnaissance results, suggest potential security issues, and recommend fixes.

No OpenAI subscription or paid API is required.

I've also added SQLite support, so there's no need to configure MariaDB just to get started.

For Windows, there's an installer that handles the Python environment and helps set up the external scanning tools. You can also build a Windows executable using PyInstaller.

It's still an ongoing project, and there are definitely things that need improving, especially around compatibility, reliability, and the AI analysis workflow.

I'm not trying to replace Nmap, Burp Suite, or other established tools. The goal is simply to make reconnaissance and initial security assessments more convenient, especially for people running Windows.

GitHub: https://github.com/spk-c/PenX

Everything is open source under the MIT license, with credit to the original METATRON developer.

I'd be interested to hear what you think. What features would actually make something like this useful in your workflow?

Bug reports, suggestions, and contributions are welcome.

If you like the project, feel free to leave a star on GitHub. It helps a lot!

For authorized security testing and educational use only.

I just completed Red Team Fundamentals room on TryHackMe! Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber security engagements. https://tryhackme.com/room/redteamfundamentals

Recentemente, descobri ferramentas de busca como o DeskData e o Portal Neonara, mas percebi que seus custos são um pouco elevados.

Gostaria de saber se existem alternativas gratuitas ou de código aberto que ofereçam funcionalidades semelhantes. Se alguém conhecer alguma ferramenta desse tipo, agradeço pelas indicações e por compartilhar suas experiências!

I've been working on it for quite some time now, it's a desktop toolkit for web application and API pentesting where I tried to put most of what I normally use during an assessment in one place.

It's basically a traditional HTTP/HTTPS and WebSocket proxy but I've added quite a few things like request replay, automation workflows, endpoint discovery and findings linked to the captured traffic. I also integrated an MCP server so tools like Claude code and Codex can directly interact with the captured traffic and perform some testing.

I added an interactive demo directly on the homepage so you can actually try the interface without having to download or install anything.

https://ogmabox.com/

I'm the developer so obviously I'm biased but I'd really appreciate some feedback from people who use Burp Suite or Caido regularly especially what you think is missing or could be improved