reverse engineering
Відкрити в Telegram
◉ A channel for learning and discussing about reverse engineering ◉ We aren't accepting any illegal works, we are here to help, learn and gain new skills ◉ Owner @M0habozaid ◉ Egypt 🇪🇬 Please don't PM ask in discussion group except in necessity
Показати більшеКраїна не вказанаТехнології та додатки21 082
4 292
Підписники
+624 години
+517 днів
+7030 днів
Архів дописів
4 295
Anthropic has just released Claude Fable 5 and it's powerful than opus models (and x2 usage of opus 😅😂)
You can use it now if you are subscribed to any claude plan (not for the free subscription)
I am excited to see results
4 295
If you love browser automation
Give browser-use a try
https://browser-use.com/
They have a good free plan
This is not a paid promotion, I just found it useful and wanted to share
@reverseengineer101
4 295
+1
Github Got Hacked
Some hackers have an unauthorized access to github.com servers which allowed them to access very sensitive and serious private repositories which in return considered a big threat even to the large tech manufacturers
Github had a serious vulnerability short time before (RCE CVE-2026-3854) -March 4, 2026- fortunately this one wasn't exploited and was reported by a legitimate security researcher
Do you think that we are seeing that because github decided to replace a lot of employees with AI and hackers are using AI nowadays for cyber attacks so we had a model vs model case ?
@reverseengineer101
4 295
When you depend on that no one will read the Privacy Policy 😂 😁
This service is collecting your LLLM API keys (You paid for) and Telegram bot tokens or other messaging platforms
The scary word there is "You voluntarily provide" so they put the risk on your side
Most people are like
✓ read and accept 😉This is just an example of services that you might be using every day while you don't know what do these services collect about you, so the moral is watch everything you use online and don't trust blindly Note: you can't use your API key on that platform except if you paid a subscription, so you will pay them a subscription and pay for the API key then it will simply collected #stay_safe #stay_secure @reverseengineer101
4 295
+1
In modern days when everything converted to ePay, it's really scary to see your balance getting drained from your account and fully controlled by a cyber criminal just because of one click on an app you installed doesn't caring about its source or how secure it's
These photos are showing a real vulnerability case I found on some android wallet not a CTF or a lab it's found in the wild and thousands of users are using daily with huge amount of money being transferred every day
The exploit app I created is a very simple app with no permissions or privileges
Please take care of your security online and do not trust anything or any app to avoid being a victim to hackers
#stay_secure #stay_safe
@reverseengineer101
4 295
Are you tired searching for secrets in js files or android apps ?
If yes, then RExpository can make it easier just copy regex, paste it, and search
https://jaimepolop.github.io/RExpository/
@reverseengineer101
4 295
Critical Security Vulnerability affects one of the large tech companies Github
CVE-2026-3854
Remote Code Execution affects github via
git push discovered by a security researcher
This was disclosed just 6 hours before
It seems it's the large manufactures hacking year, this is why we always ask you to pay attention about your security.
- Securing the git push pipeline: Responding to a critical remote code execution vulnerability
- GitHub Advisory Database
#stay_safe #stay_secure
@reverseengineer1014 295
Xiaomi MiMo-V2.5 is now officially open-sourced!
https://x.com/i/status/2048821516079661561
https://huggingface.co/collections/XiaomiMiMo/mimo-v25
Note: the Pro version is 1T parameters so you need a super power computer or server
@reverseengineer101
4 295
+1
If you are using Udemy, I am sorry to say that you mostly have been breached
Hackers breached 1.4 Million records from udemy including bills and users' data, and this came after a warning from the hackers mostly udemy overlooked
Check if your data breached :
https://darkentry.net/latest-breaches/udemy
4 295
These news are going around but I am not 100% sure but if it's real then anthropic is cooked
4 295
Learn Prompt Engineering For Free
This course is foucsed on prompt engineering and basics of using Ai in daily and business life
The course is introduced by the UAE 🇦🇪
The course is free and in English, so feel free to register
Arabic is available also
https://omp.dub.ai/module/creative-frontiers-with-generative-ai-4
@reverseengineer101
4 295
Qwen3.6-plus is released 🔥
◉ a 1M context window by default
◉ significantly improved agentic coding capability
◉ better multimodal perception and reasoning ability
Official release article:
https://qwen.ai/blog?id=qwen3.6
Note: you can use Qwen3.6-plus on the android chat app now@reverseengineer101
4 295
+1
Json Haddix went wild 😂
Btw, the attached photo is showing the hidden features/modes you aren't meant to use
4 295
Telegram's latest update added AI to their chat app, which can fix, summarize, and make text context-based. Additionally, in channels, you can get a summary of long posts using the AI.
I see this as a good step that offers more flexibility and time-saving features, although adding new features could introduce new vulnerabilities, especially nowadays with AI. 😂
4 295
Today one of the Biggest Critical Security Breaches happened, anthropic claude code CLI source code has been breached by someone who says it was a security research (I don't think that was a legit one)
How the breach happened:
- who has leaked the source code says it was publicly noted that Claude Code source material was reachable through a .map file exposed in the npm package:
"Claude code source code has been leaked via a map file in their npm registry!"- who is involved in the leak Chaofan Shou (@Fried_rice) The scary part: - anthropic knows that claude hallucinates and not giving you accurate answers while it has the capability to do - claude has massive power but it's restricted to you but not to the employees in anthropic - they are trying to keep you consuming and paying for tokens that runs out quickly due to the stupid answers you get - anthropic is developing more powerful agents but keeps everything undercover - claude has modes that can be switched to, to do specific tasks based on the job/task type but that's not for you as well The funny part: - I have found the same vulnerability not too far from now in some service provider, where I found source maps also exposed logs that contains data about the databases and administrators - days before I heard some security professional says that the AI bubble is near to burst or vanish The leak repository: - Can be found on github That's why I am always warning about these security vulnerabilities specially for developers Thank you for reading ♥️ @reverseengineer101
4 295
+2
We are now in the age of Vibe Coding, it's great and everyone in tech feild should use AI in his work and if not he will not equalify his mates in the field or lose his job
But, when it comes to security concerns every developer or organization shall not relay on the AI code generated because it really can cause massive damages or manipulations on their business logic or lose thousands of dollars
The screenshots here is showing a real case found on the wild (my own security researchs) where the developer stored AES Encryption Keys in different places in the code without obfuscation which are responsible to encrypt and decrypt sensitive information like PIN used to unlock users' wallets and other storage that shall be secure by encryption algorithms but unfortunately the keys are exposed
Usually when I see emojis inside a code (like ✅ and ❌❎) I understand it was written by AI or this code wasn't written by a professional developer so I start my investigations from that point
@reverseengineer101
4 295
SaveAny-Bot 🗃️
Save Any Telegram File to Anywhere 📂 (Alist, Disk, Webdav, S3, Rclone...) . Support restrict saving content and files beyond telegram.
🎯 Features 1- Support documents / videos / photos / stickers… and even Telegraph 2- Bypass "restrict saving content" media 3- Batch download 4- Streaming transfer 5- Multi-user support 6- Auto organize files based on storage rules 7- Watch specified chats and auto-save messages, with filters 8- Transfer files between different storage backends 9- Integrate with yt-dlp to download and save media from 1000+ websites 10- Aria2 integration to download files from URLs/magnets and save to storages 11- Write JS parser plugins to save files from almost any website 12- Storage backends: - Alist - S3 - WebDAV - Local filesystem - Rclone (via command line) - Telegram (re-upload to specified chats)https://github.com/krau/SaveAny-Bot Shared by @reverseengineer101
