News for hackers. Stuff that matters.

coding-maniac

Thanks man!

ngl you are pretty cool

This is the only thing which i kindof went deep into while investigating ransomwares, hopefully it sheds some light

https://medium.com/the-first-digit/i-investigated-the-dark-w...

there needs to be a difference between vibe-coded and developed using AI. When building complex systems, you would be aware that building the systems and then coding it takes a lot of time, so im not architecting it using AI, im architecting it myself, but developing it using AI, there has to be a clear difference between both of them.

Im with you on the fact that on the dark web there is dark stuff, but that dark stuff comes in through images, urls or some sort of media right? What if all media itself is blocked, thats exactly what ive done, and then whatever comes through text will still needs filtering, that gets handled in multiple levels, it goes through a clear wordlist, which kindof filters it out, and then a classifier and then, if AI is enabled, the AI handles anything that might be left off, but never comes to that.

Also AI is not needed to run this tool, it just helps out in making decisions, the engine itself does its job carefully, that even without AI it gives very close results, but the only thing it kindof stutters on is when there are pivots, and thats currently beign worked on.

On the part of that NSFW material itself being the intel needed, agreed but to some extinct, 90% of what the ethical analysts are trying to find is something realted to their own domain being sold, or database pertaining to them, so for that case this does a pretty good job and for that 10% there is not automation and the analysts are trained enough to know what to exactly. im not trying to replace the actual analysts but to accelerate their job basically.

Hopefully you understand that AI is just an addition and the engine itself works well without any AI whatsoever, but yeah on the part of NSFW filtering, i would stand with it, that this tool is capable of filtering anything that gets thrown at it, mainly because 80-90% nsfw stuff is media, which is already blocked.

Good for you man. Hating on something that is developed by AI is just peak quality of a person who cant do either on their own. And do you for real think, that i cant write a couple of words to get some attention to this tool, be realistic man, and come out of the bubble that you are living inside of

Show HN: VoidAccess – open-source dark web OSINT, from query to a graph

https://github.com/KatrielMoses/voidaccess

Hi HN! Im Katriel, and im a Security Researcher/Enthusiast and in the wave of AI, i wanted to build that next gen of security tooling that surpasses the current tools, and even the paid industries with an open source engine. I built MailAccess as well, which is going to be the best damn email osint tool out there, in another year. But just before building MailAccess i built VoidAccess, because...

( Read More... | 14 comments | 92 points | on HN )

Show HN: MailAccess – the true Email OSINT framework

https://mailaccess.pro

Im a security engineer and i built mailaccess. When i started learning pentesting, i came across multiple lectures and notes of people listing out tools and websites, which gives the emails for a particular domain, and almost all of them mentioned that the tool might not stick, so its better to learn the methodology, rather than learning a tool- that stuck with me. As i was beginning to really...

( Read More... | no comments | 54 points | on HN )
Correct, apk developers could really benefit using this, if they want to go secure by design and also if they just want to test functionalities out on the go.

The client apk can be installed on whatever emulator, the device needs to be rooted, thats the only requirement, which makes sense

Yeah, true. Makes a lot of sense to QA/Test Engineers to also use it.

Show HN: I built a free Burp/Caido alternative but, zero setup - API Testing

https://apiaxess.dev

This is Katriel, the architect of the tool APIaxess.I have been API pentesting for a good time now, and starting with API pentesting was a bit of a rough patch. Specially the setting up and having to know the intricacies of proxies, networking and other stuff. Then once i got through it, the next rough patch was the apk pentesting, where getting the traffic of any apk was more of a task then...

( Read More... | 5 comments | 30 points | on HN )