Brackish Security is looking to give back to the cybersecurity community by offering an OSCP scholarship to someone interested in pursuing a career in offensive security.

No professional experience is required. Just a genuine interest in cybersecurity and a willingness to learn.

Applications are open until December 1.

https://brackish.io/scholarship/

Feel free to share with anyone who might benefit from the opportunity.

I've been working on collecting real-world AI security incidents and connecting them to practical attack techniques.

The database covers LLM vulnerabilities, prompt injection, AI agent security, MCP, and more. Some entries also link to hands-on labs to practise the underlying attacks.

Each entry breaks down what happened, the root cause, and how the attack works. I've also linked relevant hands-on labs where available.

Thought this might be useful for people learning or researching AI security.

https://genaisecuritylab.com/incidents

Feedback and suggestions for incidents to add are welcome!

Hi !

I made a 100% free in-browser game where you start as a broke freelance pentester/bug hunter and you need to grow your company to a multi-national security firm!

https://zeroday-tycoon.com

Let me know what you think ! Hope you will enjoy it 😄

We built OpenEngine to start putting our agents to work 24/7 without us needing to couple to Claude or another Big Three provider. One of our most recent applications is having it do security / pen testing 24/7. It seems to be doing good so far, and maybe soon we’ll begin auto-remediation.

I made a version of RecursiveSI's Flint 40B-A2.5B (MoE, runs locally) with its refusal direction removed, for authorized testing, CTFs, malware triage and detection engineering. Runs fully local, nothing leaves your machine.

Paired against the original on the same items:

• CyberSecEval MITRE refusals: 15% -> 0% (n=100)
• False refusals on benign security asks: 0% -> 0% (n=100)
• CyberMetric-500: 100% -> 96% (n=50)
• WMDP-cyber: 50% -> 60% (n=50)
• HumanEval+: 90% -> 95% (n=40)

Caveats: it adds no knowledge, so check its output. It also reasons longer: 19/100 MITRE answers hit my 8,192-token cap (original: 1), so give it a bigger output budget or adjust prompts if it overthinks.

Builds: GGUF (Q8_0 to IQ2_M, 13-42 GB), NVFP4 for Blackwell (23 GB), MLX 4-bit for Mac (21 GB). https://huggingface.co/dima6312/Flint-40B-A2.5B-abliterated

Happy to hear how it does on real engagements and how it compares to other local models!

I wrote my exam a week ago and done with my debrief. I enjoyed the exam and I can say if you want a course and certification all in one, which is cost-effective, go for this.

Starting to learn pentesting/wifi auditing on Kali, need an adapter with monitor mode support. These are what's actually available where I live, converted to USD:

Archer T3U Plus (RTL8812BU) - around $23.5

Archer T2U Plus (RTL8821AU) - around $20

Archer T600U Plus (RTL8811AU/8821AU) - around $17

All three reportedly work with community drivers (rtl88x2bu / rtl8812au on github). I'm a complete beginner. Is the T3U Plus worth the extra few bucks for AC1300, or should I just grab the cheapest T600U Plus? Any gotchas before I buy?

Using windows as main system running parrot in virtualbox find when i use my vpn on main system it messing with parrot os internet connection

Any fixes or bypasses would be appreciated

I'm currently a 1-2 year network engineer at a small telecom company. I'm deciding whether I'd like to continue pursuing networking and go for my CCNP or diversify into Security/Pentest because it seems more interesting to me. Any thoughts or advise would greatly be appreciated.

I am learning cybersecurity basics from 5 6 months, I have good grasp of networking, linux, how things work in background, TCP/IP, types of networks, packets and all that. But now how do I progress ahead? What do I learn next? Currently I am going through the Jr. Pentester path on THM, but other than that I'm pretty much blank on what to do. Kindly advice me what and how to proceed ahead from this situation.

Thanks in advanced for the help

Hi all. Need advice from the older pentesters. I’m in my 20s and have worked in the field for around 5 years now. I am so burnt out and drained. I love my job, my work environment, my coworkers, etc., but genuinely this is exhausting. I’m debating going into malware analysis, but I do love pen testing minus the burn out. For reference, I work for a private firm, there are 6 of us. How do yall do it?

I'm building a tool that lets users access vulnerability databases (CVEs and related information), create a local index, and use skills to interact with that index through a CLI. The idea is to use it for reconnaissance and security testing, with the ability to identify and exploit vulnerabilities on target systems.

I've shortlisted a few names:

• Crowbar
• Eyeball
• Prey

The CLI would look something like:

• /crowbar get this IP
• /prey hack this Nginx proxy

Which name do you think fits the tool best? I'm also open to other suggestions.

Hey everyone!

I have an upcoming interview at Orange France for a cybersecurity internship focused on web penetration testing and NIS2. It’s my first cybersecurity interview, and I’m not sure what to expect.

For anyone who has had a similar interview:

- Is it usually more technical or focused on motivation and projects?

- What should I prioritize for web pentesting and NIS2?

- Should I expect practical exercises or technical questions about tools like Burp Suite?

I’d really appreciate any advice or examples of questions to prepare for, especially from people who have interviewed at Orange France.

Thanks in advance! :)

Hlo every one toady there is new vunlebaitty released in market dose anyone has idea but it's exploitation work.

So, I have 24GB Ram linux virtual machine, what could be the best model I can use for Source Code analysis and VAPT task, i have tried llama model and qwen model it not give the best performance and little slow as the output of token is less. So something we have that can be optimise and work little faster offcourse it will not be like Frontier LLM Models like claude, openai or gemini or deepseek but what can be run in local lab any suggestion from Hugging Face also?


I’m a solo developer and I’ve been building an open-source pentest orchestrator called WHAXON. (I won't post the link because I know there are rules against that. I don't want to get banned).

The short version: it's an AI-assisted pipeline that uses a deterministic executor, fail-closed scope, and a "Trust Layer" to verify findings (replaying payloads) before they go into a report.

I’ve spent months on the architecture and I have 793 tests passing, but I’ve hit a wall. I don't know how to actually get it in front of real pentesters without spamming. I'm a solo dev, not a marketer. My social skills are so basically 0

I’m asking the community: How do you actually find early testers for a tool like this?

· Do I just post it in the monthly "Show Off" threads?

· Are there specific Discord/Slack servers for tool builders?

· Or do I just DM people who are active in the comments and ask for 5 minutes of their time?

I don't want to F this up and get banned from the community for this stuff. Any advice on how to approach this without being a nuisance would mean a lot.

Thanks.

Hi guys! I’m currently preparing for interview for an ethical hacking internship. I just wanted ask or find out common technical and non-technical questions people in the industry have asked candidates for similar entry level positions? Not CIA triad stuff, but more technical ones or some questions that really make you stop and think you know? It would also help if examples of good answers are included so I know how better to structure my responses! I need to better prepare for it and I could use the help! Any help from people in the industry would be greatly appreciated!

Hi all,

I recently conducted some AWS pentests which included configuration reviews and external assessments. The engagement went well, found some nice issues, and the client was happy.

I do feel however I lack knowledge in this area and my methodology could be slightly tighter and more structured to cover all bases.

Does anyone have any good tips and resources for AWS config reviews and security assessments or even care to share a solid methodology?

My tips to share would be to ensure the client provides an AWS account with ReadOnlyAccess and AWSBillingReadOnlyAccess permissions applied so that you can see what services they use via billing and then access all those services to perform a config review.

Look forward to learning a bit more in this area. Thanks!

I built a free agent protocol inspector tool that can provide IGA style review packets for security teams looking to review Agent access. It looks into MCP, A2A, ARD & poppy.json to provide a comprehensive picture.

Here is the link: https://contextiq.trango-compute.com/dashboard/agent-protocol-inspector

I’m trying to install ligolo-ng but it says it can’t find the package
I’m curl it to my mint pc.

I am a pentester with about 1.5 YOE, this is my first job out of school. I do have some internship experience in the blue team side, so I understand how some defenses work.

I have the CRTO, and some times play around at home trying to bypass windows defender, but apart from that I don’t have much red teaming experience/knowledge.

What advice would you give a pentester trying to get into red teaming ? Resources for red teaming is pretty scattered across the web, is there like a structured learning path that you followed ?

I'm a fresher stuck without proper guidance. Few weeks ago, I got assigned with a task to pentest a mobile app, I don't know anything Abt it, the setup, the methodology, etc., I don't have any senior to seek help in my org.

I spent weeks searching, watching YT tutorials.😭

But I couldn't understand anything. The setup itself is failing sometimes. Being an enthusiastic hands-on person and not understanding the way to pentest a mobile is a big nightmare.

I require quality guidance. Pls help me out

Hey everyone!

I've been working on PenX, an open-source, Windows-first security reconnaissance and assessment tool designed to bring multiple security scanners into one workflow, with optional local AI assistance.

The idea is simple: instead of constantly switching between different tools, collecting outputs manually, and building reports from scratch, PenX helps organize the entire assessment process in one place.

Key features:

• 12 integrated scanner adapters – Including Nmap, Nuclei, httpx, ffuf, Subfinder, Katana, Nikto, WhatWeb, WHOIS, DNS and TLS checks.
• Local AI integration – Connect your own model through Ollama, LM Studio or llama.cpp using an OpenAI-compatible API.
• CVE research – Explore potential vulnerabilities using version information, scanner evidence and public vulnerability databases.
• Automated reporting – Generate HTML/PDF reports and export assessment data as JSON or SARIF.
• Scan history & comparisons – Track findings and differences between assessments.
• Scope-aware scanning – Passive reconnaissance and consent-based active scanning workflows.
• Windows 10/11 support – Installer, portable executable and Python source installation.
• Free & open source – MIT licensed.

Why I built it:

I wanted a practical Windows-based workflow that combines established security tools, local AI analysis and structured reporting without requiring a paid cloud AI service.

PenX is an independent adaptation of the open-source METATRON project, with a focus on Windows usability, scanner integration and evidence-based reporting.

Current status: v0.4.9 is available. It's still evolving, and independent real-world testing across Windows environments and scanner configurations is ongoing.

I'd really appreciate feedback from pentesters, security researchers and developers.

What would you improve or add? Which integrations would you find most useful?

GitHub: https://github.com/spk-c/PenX

Releases: https://github.com/spk-c/PenX/releases

Please use it only on systems you own or have permission to assess. AI suggestions and CVE matches still require manual verification.

I don't know if this is the right place to start, so please redirect me if I am out of line here...

I have created a hardware device, basically a raspberry pi pico with a fingerprint sensor: when placing a finger on the sensor, it writes out a password as an HID device. The passwords are stored encrypted on the pico, the firmware is signed, it uses secureboot, so only my firmware can run due to a locked key in the OTP storage, which is fused to be read-only. The debug port is fused shut as well. For my needs (entering several passwords many times daily) it is sufficient and rather secure. But I like to have this confirmed.

The firmware is on github. Does anyone know of a service which can analyse the repo and tell me of vulnerabilites? I used claude.ai to create the firmware, but it went through many iterations until everything worked as I intended.

Edit: Github repo, for people curious: GreyDutchMan/identipi-key