Xiaomi MiMo-V2.5 is now officially open-sourced！
https://x.com/i/status/2048821516079661561
https://huggingface.co/collections/XiaomiMiMo/mimo-v25
Note: the Pro version is 1T parameters so you need a super power computer or server
@reverseengineer101
https://x.com/i/status/2048821516079661561
https://huggingface.co/collections/XiaomiMiMo/mimo-v25
Note: the Pro version is 1T parameters so you need a super power computer or server
@reverseengineer101
🤩3❤2🗿1
Critical Security Vulnerability affects one of the large tech companies Github
CVE-2026-3854
Remote Code Execution affects github via
This was disclosed just 6 hours before
It seems it's the large manufactures hacking year, this is why we always ask you to pay attention about your security.
- Securing the git push pipeline: Responding to a critical remote code execution vulnerability
- GitHub Advisory Database
#stay_safe #stay_secure
@reverseengineer101
CVE-2026-3854
Remote Code Execution affects github via
git push discovered by a security researcherThis was disclosed just 6 hours before
It seems it's the large manufactures hacking year, this is why we always ask you to pay attention about your security.
- Securing the git push pipeline: Responding to a critical remote code execution vulnerability
- GitHub Advisory Database
#stay_safe #stay_secure
@reverseengineer101
The GitHub Blog
Securing the git push pipeline: Responding to a critical remote code execution vulnerability
How we validated, fixed, and investigated a critical vulnerability in under two hours, and confirmed no exploitation.
❤4🔥4
Are you tired searching for secrets in js files or android apps ?
If yes, then RExpository can make it easier just copy regex, paste it, and search
https://jaimepolop.github.io/RExpository/
@reverseengineer101
If yes, then RExpository can make it easier just copy regex, paste it, and search
https://jaimepolop.github.io/RExpository/
@reverseengineer101
❤6🫡1
In modern days when everything converted to ePay, it's really scary to see your balance getting drained from your account and fully controlled by a cyber criminal just because of one click on an app you installed doesn't caring about its source or how secure it's
These photos are showing a real vulnerability case I found on some android wallet not a CTF or a lab it's found in the wild and thousands of users are using daily with huge amount of money being transferred every day
The exploit app I created is a very simple app with no permissions or privileges
Please take care of your security online and do not trust anything or any app to avoid being a victim to hackers
#stay_secure #stay_safe
@reverseengineer101
These photos are showing a real vulnerability case I found on some android wallet not a CTF or a lab it's found in the wild and thousands of users are using daily with huge amount of money being transferred every day
The exploit app I created is a very simple app with no permissions or privileges
Please take care of your security online and do not trust anything or any app to avoid being a victim to hackers
#stay_secure #stay_safe
@reverseengineer101
❤5👏4😁1🤩1
When you depend on that no one will read the Privacy Policy 😂 😁
This service is collecting your LLLM API keys (You paid for) and Telegram bot tokens or other messaging platforms
The scary word there is "You voluntarily provide" so they put the risk on your side
Most people are like
This is just an example of services that you might be using every day while you don't know what do these services collect about you, so the moral is watch everything you use online and don't trust blindly
Note: you can't use your API key on that platform except if you paid a subscription, so you will pay them a subscription and pay for the API key then it will simply collected
#stay_safe #stay_secure
@reverseengineer101
This service is collecting your LLLM API keys (You paid for) and Telegram bot tokens or other messaging platforms
The scary word there is "You voluntarily provide" so they put the risk on your side
Most people are like
✓ read and accept 😉
This is just an example of services that you might be using every day while you don't know what do these services collect about you, so the moral is watch everything you use online and don't trust blindly
Note: you can't use your API key on that platform except if you paid a subscription, so you will pay them a subscription and pay for the API key then it will simply collected
#stay_safe #stay_secure
@reverseengineer101
🤣14❤2😁1
Github Got Hacked
Some hackers have an unauthorized access to github.com servers which allowed them to access very sensitive and serious private repositories which in return considered a big threat even to the large tech manufacturers
Github had a serious vulnerability short time before (RCE CVE-2026-3854) -March 4, 2026- fortunately this one wasn't exploited and was reported by a legitimate security researcher
Do you think that we are seeing that because github decided to replace a lot of employees with AI and hackers are using AI nowadays for cyber attacks so we had a model vs model case ?
@reverseengineer101
Some hackers have an unauthorized access to github.com servers which allowed them to access very sensitive and serious private repositories which in return considered a big threat even to the large tech manufacturers
Github had a serious vulnerability short time before (RCE CVE-2026-3854) -March 4, 2026- fortunately this one wasn't exploited and was reported by a legitimate security researcher
Do you think that we are seeing that because github decided to replace a lot of employees with AI and hackers are using AI nowadays for cyber attacks so we had a model vs model case ?
@reverseengineer101
❤10🗿2😁1
If you love browser automation
Give browser-use a try
https://browser-use.com/
They have a good free plan
This is not a paid promotion, I just found it useful and wanted to share
@reverseengineer101
Give browser-use a try
https://browser-use.com/
They have a good free plan
This is not a paid promotion, I just found it useful and wanted to share
@reverseengineer101
Browser-Use
Browser Agents & Stealth Browser Infrastructure | Browser Use
State-of-the-art browser agents and stealth cloud browsers for web automation at scale.
❤5
You can use Z.ai GLM5.2 (z-ai/glm-5.2-freel) and stepfun 3.7 flash (stepfun/step-3.7-flash-free) for free now for a limited time by Zenmux AI gateway (opencode partenar -zen gateway-)or the chat client directly on the website
GLM5.2: https://zenmux.ai/z-ai/glm-5.2-free
Stepfun 3.7: https://zenmux.ai/stepfun/step-3.7-flash-free
Sample openai compatible API requests to integrate:
- GLM5.2:
- Stepfun 3.7:
They support also:
@reverseengineer101
GLM5.2: https://zenmux.ai/z-ai/glm-5.2-free
Stepfun 3.7: https://zenmux.ai/stepfun/step-3.7-flash-free
Sample openai compatible API requests to integrate:
- GLM5.2:
curl https://zenmux.ai/api/v1/chat/completions \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ZENMUX_API_KEY" \
-d '{
"model": "z-ai/glm-5.2",
"messages": [
{
"role": "user",
"content": "What is the meaning of life?"
}
]
}'
- Stepfun 3.7:
curl https://zenmux.ai/api/v1/chat/completions \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $ZENMUX_API_KEY" \
-d '{
"model": "stepfun/step-3.7-flash-free",
"messages": [
{
"role": "user",
"content": "What is the meaning of life?"
}
]
}'
They support also:
POST /v1/responses (openai compatible)
POST /anthropic/v1/messages (anthropic compatible requests)
@reverseengineer101
zenmux.ai
z-ai/glm-5.2 | ZenMux AI Model Routing
Explore z-ai/glm-5.2 on ZenMux with provider routing, pricing, latency, throughput, uptime, and API access.
❤8
Developers mistakes (laziness) 🥴
Me at 2 am: 😎 🎯 💻
Me at 2 am: 😎 🎯 💻
❤🔥6❤4🔥2👎1🥰1🤝1
Just found a SSRF, I am tired I will continue tomorrow 🥱
Know more about it: https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
Know more about it: https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
owasp.org
Server Side Request Forgery | OWASP Foundation
Server Side Request Forgery on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
❤6
reverse engineering
You can use Z.ai GLM5.2 (z-ai/glm-5.2-freel) and stepfun 3.7 flash (stepfun/step-3.7-flash-free) for free now for a limited time by Zenmux AI gateway (opencode partenar -zen gateway-)or the chat client directly on the website GLM5.2: https://zenmux.ai/z…
Claude Fable 5 and sonnet 5 are free on Zenmux 😳
https://zenmux.ai/anthropic/claude-sonnet-5-free
https://zenmux.ai/anthropic/claude-fable-5-free
https://zenmux.ai/anthropic/claude-sonnet-5-free
https://zenmux.ai/anthropic/claude-fable-5-free
zenmux.ai
anthropic/claude-sonnet-5 - ZenMux
Explore anthropic/claude-sonnet-5 on ZenMux with provider routing, pricing, latency, throughput, uptime, and API access.
🔥6❤2
I am Amazed
Post: https://x.com/i/status/2075731830477877612
Github repo: https://github.com/JustVugg/colibri
Post: https://x.com/i/status/2075731830477877612
Github repo: https://github.com/JustVugg/colibri
❤6🤔5👍1👀1