Skip to content
SecurityOpen Source

apiffuf: Open-Source API URL Fuzzer for Bug Bounty and Ethical Hacking

tldr / infosec 20h ago 4

apiffuf is an open-source API URL fuzzer written in Go. It normalizes host and path combinations, probes them via HTTP, and reports responding endpoints with status codes, content types, and titles. Designed for bug bounty hunters and ethical hackers, it supports custom headers, rate limiting, and multiple output formats including JSON and CSV. The tool warns users when using destructive HTTP methods like PUT or DELETE.

Read full article →

More Security

Anthropic embeds engineers in NSA to deploy Mythos for offensive cyber operations

tldr / ai 20h ago 9

Anthropic embedded engineers in the NSA to deploy its unreleased Mythos AI for offensive cyber operations, even as it sues the Pentagon over military AI restrictions.

GitHub scrubs 70+ Microsoft repos as Miasma worm breaks CI/CD pipelines

theregister / security 6h ago 9

GitHub disabled 70+ Microsoft repos in under two minutes after the Miasma worm infected projects via compromised commits, breaking CI/CD pipelines and triggering RCE in developer tools.

Ubiquiti Patches Critical UniFi OS Flaws Enabling Unauthenticated Root RCE

tldr / infosec 20h ago 9

Ubiquiti patched three critical UniFi OS flaws that chain into unauthenticated root RCE with CVSS 10.0 scores, requiring immediate patching and full credential rotation.