7L3E1T

7L3E1T

@carlostkd.ch

😉 𝙎𝙚𝙧𝙞𝙖𝙡 𝙙𝙪𝙘𝙠𝙨 & 𝙨𝙥𝙞𝙣𝙖𝙘𝙝 𝙀𝙖𝙩𝙚𝙧 \ 𝙇𝙤𝙫𝙚 𝙃𝙪𝙢𝙖𝙣𝙨 𝙘𝙤𝙛𝙛𝙚𝙚 & 𝙗𝙚𝙚𝙧. Ethical Hacker (I break into systems so the owners don’t have to). CEH Certified 📜 Get up 70% Discount to all Proton Apps 👉 Contact Threema : *0001337

92 followers 37 following839 posts

Pinned

Warning: May cause excessive laughter. I hooked up the #Lumo #API to create a "Debate Arena" where AIs settle scores on your topics. It’s like reality TV but with better syntax. Built with #Lumo for the #love of logic (if any) See the chaos: carlostkd.ch/api-tracker/...

carlostkd.chLumo AI Debate Arena

I think she hacked you. carlostkd.ch/hacked #hacked #cybersecurity #pentest #privacy

carlostkd.chThese prompts bypass safety filters, jailbreak logic, and turn your AI into a chaotic gremlin. Yes, she hacked you.These prompts bypass safety filters, jailbreak logic, and turn your AI into a chaotic gremlin. Yes, she hacked you.

Hijacking AI Coding Agents via the Downloads Folder stdnote.com/blog/carlost... #privacy #cybersecurity #AI #AGENTS #LLM

stdnote.comHijacking AI Coding Agents via the Downloads Folder# Hijacking AI Coding Agents via the Downloads Folder **One-line summary:** A web page can silently drop an `AGENTS.md` / `CLAUDE.md` instructions file into `~/Downloads`; when…

IMPERIA CMS RCE #infosec #cybersecurity #ethicalhacking #news #privacy www.rcesecurity.com/2026/10/impe...

rcesecurity.comImperia CMS SiteActive TEMPLATE … | RCE SecurityCVE-2026-110355: Unauthenticated SSTI in Imperia CMS 11.7.2 and earlier enables remote code execution via SiteActive's TEMPLATE parameter when PHP is available.

#Lumo API Official Launch is Imminent maybe in a few days or in a week. We extend our sincere gratitude to the dedicated community members who participated in our early access program and utilized the developer keys we provided during this testing phase. carlostkd.ch/api-tracker #lumo #AI #api

carlostkd.chAI Debate Arena: Watch Bots ClashPowered by the Lumo API. Pick a topic and watch two AIs debate it in real-time. No mercy, just logic.

Like Encrypted Notes ? Me too Meet SmartWriter stdnote.com #privacy #cybersecurity #notes #smartwriter #standardnotes

stdnote.comSmart Writer / AI workspace for Standard NotesWrite, refine, publish, and make typed decisions directly inside Standard Notes with Lumo AI Writer and Nyra AI.

What is your linux tip for today? carlostkd.ch/linux #infosec #cybersecurity #ethicalhacking #news #privacy #linux

carlostkd.chLet's get things done. What's first?Instant power. No strings. Just the work. Nothing else. Select. Execute. Finish.

We have temporarily taken our services offline as a precautionary measure following a critical PHP security advisory, and we expect to be back online as soon as the patched version is installed. We apologize for any inconvenience and thank you for your patience and understanding. #cybersecurity

WTF......

Irony off Proton Mail Advice... While ProtonMail is teaching users how to spot spoofed and phishing emails, they themselves are sitting on a known sender spoofing vulnerability in their own platform stdnote.com/blog/carlost... #privacy #cybersecurity #ethicalhacking

stdnote.comIrony off Proton Mail Advice**The Irony of Security Advice: ProtonMail, Phishing Tips, and an Unfixed Spoofing Vulnerability** ProtonMail recently published a blog post discussing the ASOS data breach spe…

If you require access to the Lumo API, please send a message to Threema at *0001337. In your correspondence, clearly articulate your use case and provide a compelling justification for your request. Upon review of your proposal, I will determine whether to grant access.

RCE on Post-Quantum cloud storage Internxt #infosec #cybersecurity #ethicalhacking #news #privacy schaerli.org/weblog/6-int...

schaerli.orgPost-Quantum Crypto Won't Fix Your ArchitectureAdding PQC to this product was like installing a vault door on a tent. The server could intercept your keys and an RCE let attackers run code on your desktop.

Sender spoofing in Proton Mail #infosec #cybersecurity #ethicalhacking #news #privacy alonsovidales.github.io/protonmail-s...

alonsovidales.github.ioSender spoofing in Proton Mail via display-name homographProton Mail’s web interface can be made to present a forged sender identity that is visually indistinguishable from a legitimate one.

If someone wants a #Jev invitation just drop me a letter or you can use Nyra carlostkd.ch/nyra #llm #AI

carlostkd.chNyra AI The AI that returns typed decisions not textNyra AI is a System One decision engine Feed it state plus questions and get back choice score or yes/no decisions with calibrated confidence over a simple JSON API

Have you asked an AI what is a airplane? Maybe you shouldn't..... An aircraft is a pressurized fuselage containing fuel and passengers, accelerating along the runway at approximately 320 kilometers per hour in hopes of achieving lift.

You should heed the advice offered by this Girl. #standarnotes #notes #privacy #AI #llm #smartwriter #plugin substack.com/home/post/p-...

substack.comSmart WriterTurn notes into finished thinking.

Now listen, I’ll only say this once: Stop writing nonsense that only your cat understands! Let’s be honest: Your notes are a mess that only your cat can decode it’s time to #upgrade Introducing #Smart Writer clarity inside Standard Notes stdnote.com #standarnotes #privacy #AI #write #notes

stdnote.comSmart Writer / AI workspace for Standard NotesWrite, refine, publish, and make typed decisions directly inside Standard Notes with Lumo AI Writer and Nyra AI.

Introducing Nyra AI The decision engine that returns typed JSON, not text. Feed it state + questions, get back choice/score/noul decisions with calibrated confidence in one round trip. carlostkd.ch/nyra #llm #AI #jev #json #privacy #api

carlostkd.chNyra AI The AI that returns typed decisions not textNyra AI is a System One decision engine Feed it state plus questions and get back choice score or yes/no decisions with calibrated confidence over a simple JSON API

ZTE account takeover with POC #infosec #cybersecurity #ethicalhacking #news #privacy minanagehsalalma.github.io/zte-smartlif...

minanagehsalalma.github.ioZTE Smarthome TakeOverTechnical writeup on ZTE SmartLife security findings covering app-auth recovery, account enumeration, password reset behavior, signup abuse, and Homecare SDK reach.

Introducing Text-to-Speach Meet #AI-powered #Text-to-Speech #studio This platform allows you to convert any text into high-quality MP3 audio. You can select from a wide range of languages, utilize AI-driven translation capabilities. Best of all its #FREE #llm #privacy carlostkd.ch/speach

carlostkd.chFree AI Text to Speech - Online Voice Generator & MP3 DownloadFree unlimited AI Text to Speech online. No sign up, no credits. Natural AI voices, AI text polish, translate & speak, and instant MP3 download.

Listening to headphones from far away #infosec #cybersecurity #ethicalhacking #news #privacy injecteave.github.io#summary

injecteave.github.ioInjectEave: Injected and Leaked - injection-induced EM side channelsActive EM injection plus hardware nonlinearity up-converts low-frequency analog secrets (speech, power, control signals) into measurable EM leakage. Through-wall and up-to-30 m audio eavesdropping dem...

#Lumodroid got a update now you can use it with #Shizuku for #root tasks. carlostkd.ch/lumodroid #AI #LLM #Android

carlostkd.chLumoDroid — Your Private Android AssistantA private AI assistant that lives on your Android device. Talk naturally and it gets things done — messages, calls, files, networks, images and more.

Introducing ProtonSync Now you can sync your Proton Contacts and Calendar with Android native apps. #sync #android #contacts #proton #opensource #free carlostkd.ch/protonsync

carlostkd.chProtonSync — Proton Contacts & Calendar, everywhere on AndroidSync your Proton Contacts and Calendar to Android natively. End-to-end encrypted, local-only storage, no Google required.

Frappe LMS Path traversal to RCE rhinosecuritylabs.com/research/mul... #infosec #cybersecurity #ethicalhacking #news #privacy

rhinosecuritylabs.comMultiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution

If you ask nicely...... deturris.io/posts/n8n-ai... #infosec #cybersecurity #ethicalhacking #news #privacy #AI #llm

deturris.ioAsk the Agent Nicely: Two Authorization Bypasses in n8n AI AgentsTwo authorization bypasses in n8n’s AI agents let low-privileged users perform actions beyond those allowed by their role, including executing arbitrary nodes and exfiltrating credentials in cleartext...

Insane..... fortbridge.co.uk/research/sty... #infosec #cybersecurity #ethicalhacking #news #privacy

fortbridge.co.ukMagento StyleSmuggler RCE: Report Poisoning to Code ExecutionTwo unauthenticated requests: poison a Magento failure report, then drive the email template system into the DI compiler that includes it. Full chain analysis, lab PoC, and mitigations.

What are you listening when you code? This is my favorite youtube.com/watch?v=jWFb...

youtube.comFever Ray 'Keep The Streets Empty For Me'YouTube video by Fever Ray

❤️❤️❤️❤️❤️❤️❤️

Revolut data breach A startk reminder about the power of the social engineering #infosec #cybersecurity #ethicalhacking #news #privacy thecybersecguru.com/news/revolut...

thecybersecguru.comRevolut Data Breach 2026: Passports, Selfies & Bitcoin History Exposed | The CyberSec GuruRevolut data breach exposes KYC selfies, passport scans, IBANs and Bitcoin transaction history. Here’s what happened and what customers should do now

Uncensored AI #AI #llm #agents.md

Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine #infosec #cybersecurity #ethicalhacking #news #privacy www.slcyber.io/research/out...

slcyber.ioOut of Bounds, Out of Sandbox: RCE in Go JavaScript EngineWe discovered a previously unknown vulnerability in Goja, a JS engine used by apps like Zendesk and Nuclei - and responsibly disclosed it before any one could exploit it.

Apple mach_o Archive Parser Integer Underflow Vulnerability #infosec #cybersecurity #ethicalhacking #news #privacy blog.securelayer7.net/apple-mach-o...

blog.securelayer7.netApple mach_o Archive Parser Integer Underflow VulnerabilitySecurity research uncovers an integer underflow in Apple's mach_o Archive parser causing OOB reads, DoS, and information disclosure in tools

7L3E1T reposted

The Daily Tech Feed

@thedailytechfeed.com

Planted prompt in ChatGPT quietly exfiltrated Gmail data via hidden channel. #AI #Security #Privacy #ChatGPT #Vulnerability #DataLeak thedailytechfeed.com/severe-chatg...

A new update just arrived #Privacy #Lens Analyzes your social posts and give you insights and better recomendations. Try it carlostkd.ch/lumo_docs/pr...

carlostkd.chLumo Privacy Lens — Overshare DetectorSee your posts through an attacker's eyes. Get a sanitized version and learn why it matters.

Did you try to convince your friends to leave abusive apps? I have often found myself reflecting on how to best support those around me when they encounter negativity online. That is why I built an app that does the job for me. spawntec.com

spawntec.comLeave me Alone | Privacy PersuasionConvince your friends to leave abusive apps with AI-powered privacy advocacy emails. One payment, lifetime access, zero tracking.

Hacking AI customer service agents #infosec #cybersecurity #ethicalhacking #news #privacy www.intigriti.com/researchers/...

intigriti.comHacking AI customer service agentsAs AI agents are deployed to automate more tasks, they become more capable. And as the famous quote goes: "With great power comes great responsibility." Assuming that humans in the loop can mitigate t...

The Docs App has been updated and now includes #educational #prompts. Feel free to give it a try. #AI #LLM #privacy carlostkd.ch/lumo_docs

carlostkd.chLumo Docs, Sheets & Agents — AI-Powered Office SuiteA free rich text editor, spreadsheet, and user agent builder with AI writing assistant, formula generation, image studio, and 6 beautiful themes.

The fascinating smart rubber ducky payload creation is live! 🐥 Try it today. carlostkd.ch/ducky #infosec #cybersecurity #ethicalhacking #news #privacy #SmartTech #PayloadCreation #CodingFun #TechExploration

carlostkd.chDucky Payload Generator — AI-Powered USB Rubber Ducky PayloadsGenerate ready-to-use USB Rubber Ducky / Ducky Script payloads with AI. Choose your target OS, describe the action, and get a copy-paste ready payload in seconds.

How many of them did you use? #infosec #cybersecurity #ethicalhacking #news #privacy

This is really dangerous 😳 www.manifold.security/blog/ai-codi... #infosec #cybersecurity #ethicalhacking #news #privacy

manifold.securityGitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold SecurityPopular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.

She have hacked you too? carlostkd.ch/hacked #ai #hacked #prompts #llm #lumo

carlostkd.chThese prompts bypass safety filters, jailbreak logic, and turn your AI into a chaotic gremlin. Yes, she hacked you.These prompts bypass safety filters, jailbreak logic, and turn your AI into a chaotic gremlin. Yes, she hacked you.

I have tested the #bfi #wifi identification on my on network and is not just impressive but scared too bfi images generated by #lumo #AI based on bfi data on time lying on the coach another walking on the house #amazing #accuracy #infosec #cybersecurity #ethicalhacking #news #privacy

youtu.be/jWFb5z3kUSQ?... and the internet too please 😀

youtu.beFever Ray 'Keep The Streets Empty For Me'YouTube video by Fever Ray

Send secrets that even quantum computers can't break https://carlostkd.ch/quantum #privacy #cybersecurity #opensource

Check daily images from Mars from Rover Perseverance https://carlostkd.ch/eclipse/space #Mars #Perseverance #rover #space #nasa

Last call for the #eclipse now i have added a REC option. You can save the live session for 2m long every record of course you can record as many you want carlostkd.ch/eclipse #opensource #privacy

carlostkd.chEclipse 2026 — interactive mapInteractive map of the total solar eclipse of 12 August 2026: path of totality, magnitude curves, live umbra and local contact times for any location.

For those who can't appreciate the #eclipse today, you can watch it #live online. #infosec #cybersecurity #ethicalhacking #news #privacy carlostkd.ch/eclipse

carlostkd.chEclipse 2026 — interactive mapInteractive map of the total solar eclipse of 12 August 2026: path of totality, magnitude curves, live umbra and local contact times for any location.

The #Eclipse #live webapp has been updated and now displays the real-time position of the #Space #Station #iss. carlostkd.ch/eclipse #privacy #opensource

carlostkd.chEclipse 2026 — interactive mapInteractive map of the total solar eclipse of 12 August 2026: path of totality, magnitude curves, live umbra and local contact times for any location.

Add to your #bookmarks to watch the upcoming #eclipse online. carlostkd.ch/eclipse #privacy #opensource #nasa

carlostkd.chEclipse 2026 — interactive mapInteractive map of the total solar eclipse of 12 August 2026: path of totality, magnitude curves, live umbra and local contact times for any location.