Many news here in Egypt about a cyber criminal called Abanoub Nady who was providing with Phishing-as-a-Service (PhaaS)
He did over 240 phishing domains for Microsoft only

The funny part, people are saying he is mostly the person who was sending phishing emails with the domain (rnicrosoft.com) "r + n"

Official Microsoft risk management article: https://www.microsoft.com/en-us/security/security-insider/risk-management/egypt-based-cybercriminal-suppliers-websites-seized

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
https://m4kr0x.medium.com/flutter-tls-bypass-how-to-intercept-https-traffic-when-all-other-frida-scripts-fail-bd3d04489088

Run full-fledged Linux Distros right on your Android device without rooting.

Official website: https://andronix.app/

Github: https://github.com/AndronixApp

Google play: https://play.google.com/store/apps/details?id=studio.com.techriz.andronix

Cyber news

TCM Security is running an AI chat bot hacking CTF on
https://ctf.tcmsecurity.com/

The winners are getting 50% discount of the certificates there

Happy hacking
It's easy to solve by the way, I already did it

@reverseengineer101

Cloudflare Turnsite is down so if your website or the website you regularly visit isn't working it's not your problem

Official source from cloudflare: https://www.cloudflarestatus.com/

Well, it should be like this instead of Google's cloud

Gooey

Turn (almost) any Python command line program into a full GUI application with one line

What is it?

Gooey converts your Console Applications into end-user-friendly GUI applications. It lets you focus on building robust, configurable programs in a familiar way, all without having to worry about how it will be presented to and interacted with by your average user.

https://github.com/chriskiehl/Gooey/

Yesterday

The new Egyptian Nuclear Project

Built Egyptians and Russians on an Egyptian land

🇷🇺🇪🇬🇷🇺🇪🇬

New video uploaded !

Intigriti's month (Nov 2025) challenge full walk through

Watch on YouTube
https://youtu.be/ZNYxws_LtWs

Read the write-up on Medium
https://medium.com/@mohamedabozaid961/intigritis-1125-challenge-walk-through-3e3c391f7699

The pdf version is in comments below 👇

@reverseengineer101

Prompt injection

Nowadays AI security is crucial, you see most of the websites now add a chat bot based on an AI model and jail breaking it can really leak sensitive data

@reverseengineer101

Btw, I forgot to attach this link from OWASP top 10 for LLMs
https://owasp.org/www-project-top-10-for-large-language-model-applications/

Orbstack is a docker alternative

OrbStack is the fast, light, and easy way to run Docker containers and Linux. Develop at lightspeed with our Docker Desktop alternative.

https://orbstack.dev/
@reverseengineer101

Chatgpt 😑😐

Don't worry if it's down with you it's not your problem

API Sec university is live !

Live Session Alert: API Security Basics - A Bug Hunter's Perspective

Today's Live Discord [Session](https://discord.gg/4X6fXK5B?event=1444365577241104384) is starting in 5 minutes in the https://discord.com/channels/1009112852759593100/1329504546858205314 stage channel.

Join us NOW!

Jo

in now on discord
@reverseengineer101

If you have a target that relay on GraphQL always test if the introspection is enabled or not (it shall not be in production systems but sometimes it is) once you enumerate the schema you can go to something like Graphql voyager for better understanding and getting all the relations between the objects or you can read the schema by yourself if it's small, then try to observe the most sensitive fields like users chats or passwords or ... then try to get it then you will find that GraphQL is just returning that to you

The reason why I am writing this because I recently found a massive leakage (user ip addresses, feedback chats, ...)in some crypto wallet

#Cyber_tips
@reverseengineer101

Cloudflare is down again taking down the all sites that's relying on it

They were celebrating that they have stopped the biggest DDoS ever happened some days before, they should wait for some time before celebrating 😂😂😂