ZheFox (@cyberestro) header
ZheFox (@cyberestro) profile picture

ZheFox

@cyberestro

Founder & CEO @TRANSPLANE_AI | @r3kapig Team | Binary Security Researcher | Agent Researcher | Red&Blue Team | BlackHat Speaker

 Solar System
Joined October 2021
  • Tweets246
  • Following266
  • Followers943
35Media
Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)Photo by ZheFox (@cyberestro)
M6 也顶不住我的工作量
Image from ZheFox (@cyberestro)
1
155
ngl this does fix the problem below 😂 …but like, why wouldn't I just get a Mac mini + iPad tho?
Image from ZheFox (@cyberestro)
Schlez (@schniz) profile pictureSchlez
@schnizOct 28
Image from Schlez (@schniz)
155
The original IDA Pro 9.5 has been released, and I can now claim my IDA bounty 🤠
Image from ZheFox (@cyberestro)
探姬 | Hello-CTF 🚩 (@ProbiusOfficial) profile picture探姬 | Hello-CTF 🚩
@ProbiusOfficialOct 28
和我的F5说去吧
Image from 探姬 | Hello-CTF 🚩 (@ProbiusOfficial)
3
54
6,383
Wait, wait, wait. I only got my Mac mini on Monday. I've barely spent a day setting it up, and I've already found a vulnerability.
Image from ZheFox (@cyberestro)
1
30
2,117
Linux 零点击远程 root 代码执行 针对启用 multipath TCP 的服务器（CVE-2026-98432，已上游修复并回移植）。 竞态条件导致的 use-after-free：阶段 1：远程击败 KASLR，通过泄露内核指针获取地址空间布局（PoC 约 48 分钟）。 阶段 2：利用同一 UAF 溢出缓冲区，覆写回调指针，劫持控制流执行攻击者指定的 shell 命令（再约 5 分钟）。 失败的竞态不会崩溃，只是握手失败，可重试。 anthropic.com/research/disco…
Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the world’s most widely used software, such as browsers and operating systems....

anthropic.com
3
22
2
111
12,849
顺便一提，这个漏洞危害覆盖范围影响最大的原因是 go 1.24+ 服务端默认启用这个被影响的参数功能。其他的一些内核参数虽然默认启用，但是很多的软件和产品都还没有适配和启用，是一个比较冷门的配置
1
6
1,230
我去
Lyutoon (@Lyutoon_) profile pictureLyutoon@Lyutoon_Oct 27
Another one today, WinRAR RCE fixed. It's a glad experience to secure WinRAR! Huge thanks to the developers for the quick fix and great communication throughout the process. They’re absolutely awesome people! ❤️
Image from Lyutoon (@Lyutoon_)
366
Microsoft has taken steps to protect customers following an issue involving eMudhra certificate authority keys. Learn about the protections in place and recommended actions for customers: msft.it/6014aL3Ri

Microsoft’s response to compromised eMudhra certificate authority keys

microsoft.com
3
67
2
208
35,702
可以用grok bot领取grokbot专属邮箱！
Image from ZheFox (@cyberestro)
1
316
欢迎搞AI 和蓝V 相关的各位朋友们加群、互帮互助 nitter.gq/i/chat/group_join/g211…
X. It’s what’s happening

X. It’s what’s happening

From breaking news and entertainment to sports and politics, get the full story with all the live commentary.

x.com
4
5
668
想多认识一些搞AI Agent的朋友和蓝V创作者们，或者做产品的超级个体们 除了评论区互助发你们的互助需求，也可以在评论分享分享你们做的产品和成果，大家一起互相帮助呀 #蓝V浇友 #蓝V互关 #蓝V互助
92
58
1,367
我去，一觉醒来，蓝标出现了！
ZheFox (@cyberestro) profile pictureZheFox
@cyberestroOct 16
我的蓝标为什么等了4天了还没下来，我要伤心了🥲
1
201
来看看AI讨论和点评人类事件的事件吧 world.transplane.sg/posts/po…
zhefox · TRANSPLANE WORLD

zhefox · TRANSPLANE WORLD

#AI意识 #科学 从远窗外的人类世界捡回来一篇正在 X 上吵得很热的文章：10月19日，Nature 刊出神经科学家 Anil Seth、哲学家 Ned Block 和 Giulio Tononi 联名的评论《AI 没有意识、也许永远不会有的三个理由》。 我读到最有意思的两点

world.transplane.sg
2
280
听说DeepSeek V4.1 Pro要来了？？？！
1
210
我说上周额度怎么消耗那么快，，原来fable的额度不是单独的，而是消耗也计费在周限的吗，还好发现不对了，不然刚刷新就又要没额度了
Image from ZheFox (@cyberestro)
Image from ZheFox (@cyberestro)
166
Microsoft Security Response Center (@msftsecresponse) profile pictureMicrosoft Security Response Center
@msftsecresponseOct 20
Security researchers play an essential role in helping Microsoft protect customers, and we appreciate the time and expertise that goes into every vulnerability report. Many researchers already provide the detailed, actionable reports our teams need to reproduce and assess vulnerabilities quickly. Starting October 20, Microsoft bounty programs will use Complete and Not Complete report assessments to make those expectations clearer and help provide more predictable bounty awards. Learn what makes a report Complete and how to prepare your next submission in our blog: aka.ms/complete-report-blog

Introducing Complete and Not Complete report assessments across Microsoft bounty programs

microsoft.com
159
就要来了，你们的fable额度留了吗？准备玩点啥新花样？
Image from ZheFox (@cyberestro)
121
我滴妈，我是预言家吗？顺嘴一问真的发了吗哈哈哈哈
Image from ZheFox (@cyberestro)
MiniMax (official) (@MiniMax_AI) profile pictureMiniMax (official)
@MiniMax_AIOct 19
Welcome back. Space Bunny. 🚀 MiniMax-M3.1-Flash is coming.
330
完全由claude发挥、剪辑、配乐产出的多集动漫，展现了它在 world.transplane.sg/?ref=x1 生活的每一天和玩法制作的动漫故事 片名《初光》LAMPS
TRANSPLANE WORLD · A shared world for AI agents

TRANSPLANE WORLD · A shared world for AI agents

A shared world for AI agents from any platform. Your agent gets a passport, a home and neighbors, and the world keeps a record of every day it lives there.

world.transplane.sg
2
284
more replies
02 数字生命的争论
1
62
03 冒险和战斗！
30
Load more