Login

r/netsecstudents

Open-source CLI for red-teaming LLM agents before they touch tools and memory
▲ 27 r/netsecstudents+6 crossposts

Open-source CLI for red-teaming LLM agents before they touch tools and memory

Sharing RedThread, an open-source CLI for AI red-team campaigns:

https://github.com/matheusht/redthread

The angle is AI agents as an attack surface. Prompt injection gets more interesting once the model can call tools, delegate to workers, write memory, retry failed actions, or propose guardrail changes.

RedThread is built for staging/internal targets. It runs LLM red-team campaigns, records traces, scores failures, and can replay exploit and benign cases before treating a defense as evidence.

Current pieces:

  • PAIR, TAP, Crescendo, and GS-MCTS attack flows
  • JudgeAgent/rubric scoring
  • replay-backed defense proposals
  • telemetry/drift signals
  • agentic checks for tool poisoning, confused deputy paths, canary propagation, and budget amplification

It is not a magic prompt shield and not broad production enforcement.

Looking for people who test agent workflows and can suggest realistic failure cases or target adapters.

u/Apprehensive-Zone148 — 1 day ago
▲ 2 r/netsecstudents

My Project

Hey everyone,

As a student project for my finals, I’ve been working on a website and security scanner designed to help developers quickly audit their sites without the complexity of massive enterprise tools.

The goal was to create something clean, fast, and completely non-intrusive.

If you have any help or feedback it would be great!

https://preview.redd.it/05fqj2152a2h1.png?width=1890&format=png&auto=webp&s=b41d66b66bfc8d808f761c8f25653c29e76b832c

https://preview.redd.it/a541d0152a2h1.png?width=1894&format=png&auto=webp&s=7aea80ddd78ed21d18362aac1f831aa5db669642

reddit.com
u/ROMANOX155 — 2 days ago
▲ 14 r/netsecstudents+8 crossposts

I have been conducting my academic thesis on dark web. For a successful research I need as many as possible global response from people who have at least once visited the dark web. Anonymity and confidentiality of respondants will strictly be maintained and all data will solely be used for the research. Data will be collected till Mid-May. So if u r willing to participate, please share your valuable knowledge in this survey. Here is the link:

https://docs.google.com/forms/d/e/1FAIpQLSdL3i2wPDwF9xBhnjsxqDMUxlQWulmzVWma0BwUEzIutwDDBA/viewform?usp=sharing&ouid=117765215647328380606

Thank you.

u/Chocolate_cupcake07 — 6 days ago
▲ 7 r/netsecstudents

WhoCord: the modular OSINT Toolkit with 30+ tools

Modular OSINT platforms:

usernames, emails, domains, phones, images, URLs, Discord profiles.

Special features:

Al-powered reports (Groq), recursive pivoting, knowledge graph, HTML reports.

Installing:

Portable zip or source install.

https://github.com/Siv-nick/WhoCord

u/No_Day_6782 — 8 days ago
▲ 8 r/netsecstudents

Don’t know what career path to choose at 19

Hi everyone.

I’m 19, originally from Ukraine, currently living in Prague and studying economics at university (first year).

Lately I’ve been feeling lost about work and career choices. I need to start making money but i don’t know how to start.

For the past few months I’ve been learning programming and IT stuff on my own. I know some Python and JavaScript, basic SQL, Linux basics (running a few VMs), networking fundamentals, how websites work, etc. I also got interested in cybersecurity and bug bounty topics. I even made a Shopify website for my friend’s clothing brand.

The problem is that I still feel like a beginner in everything. My university degree isn’t related to IT, I don’t have real work experience yet, and most entry level tech jobs seem to require experience already (and I don’t even mention that I’m a student and don’t have a lot of time).

Has anyone been in a similar situation at my age? What you can recommend?

reddit.com
u/Fluffy_Delivery_314 — 11 days ago
▲ 7 r/netsecstudents

What should I learn before starting college if I want to build a strong cybersecurity career from a tier 3/4 college?

I just completed all my entrance exams and I’ll most likely be joining a tier 3/4 engineering college for CSE/Cybersecurity.

I have around 40 days before college starts, and instead of wasting them, I want to build a strong foundation early so that I can stay ahead of most students from first year itself.

My goals are:

cybersecurity career,

good internships as early as possible,

strong projects/profile,

and eventually getting into good product-based companies.

For people already in tech/cybersecurity:

what skills should I prioritize first?

which programming language should I start with?

should I focus on DSA first or networking/Linux first?

what would you learn if you were starting from zero again?

what mistakes should I avoid in first year?

I’m ready to work consistently and would really appreciate a roadmap or honest advice.

reddit.com
u/calmbyte786 — 10 days ago
▲ 3 r/netsecstudents

Im looking for cybersecurity friends 😃

Hello 👋

I am from mexico 🇲🇽

I am currently looking for hacker friends. I am a bit experienced with learning cybersecurity and I know the basics. My level I would say I am a higher level of a script kiddie because I can create my own projects on python and currently learning more languages.

Thanks for reading this I hope I can find friends to make sort of a group.

Discord username: fun_random_person

reddit.com
u/MEGACHUNKUS — 11 days ago
▲ 12 r/netsecstudents

30 Day Cybersecurity roadmap to help Beginners get employed

One thing I’ve noticed in cybersecurity (especially for beginners) is that most people don’t fail because they’re not capable — they fail because everything is scattered.

You’ve got YouTube videos, random notes, roadmaps, advice threads… but no real structure that tells you what to do today, tomorrow, and next week in order.

So I put together something simple for that exact problem.

It’s called CyberLaunch — an interactive offline HTML system that works like a guided cybersecurity career dashboard.

Instead of reading through static PDFs or jumping between resources, it gives you a structured path from:

overwhelmed → structured → job-ready

What it focuses on:

  • A structured 30-day cybersecurity roadmap
  • Resume + LinkedIn setup guidance
  • Portfolio project direction
  • Interview prep basics
  • Job application tracking
  • Daily action + progress tracking system

The goal isn’t to overload you with information, it’s to give you a system you can actually follow consistently so you stop guessing what to do next, It's something i needed when i first entered Cybersecurity

CyberLaunch on my page

u/Remarkable_Meeting94 — 12 days ago
▲ 2 r/netsecstudents

3rd Year BTech Student Confused About Cybersecurity Roadmap (Offensive vs Defensive)

Hey everyone,

I’m currently in my 3rd year of BTech and I want to build a career in cybersecurity. My main interest is offensive security/pentesting, but after looking at the current market and fresher opportunities, I’m also considering defensive roles like SOC analyst/security analyst.

Right now I’ve:

- Started learning Kali Linux

- Learned basic Linux commands

- Completed around 5–7 levels of Bandit on OverTheWire

But honestly, I feel very lost about what I should focus on next because there’s so much information online and everyone suggests different things.

Some people recommended CS50, but it seems very lengthy, so I’m unsure if it’s worth investing time into for cybersecurity. I was also thinking about doing the Google Cybersecurity Certificate since it gives a discount for the Security+ certification, but I don’t know if this is actually a good path for building skills and getting internships/jobs.

What I really want to know is :

- What roadmap should a beginner follow in 2026?

- Should I focus on offensive security or defensive roles first?

- Is Security+ worth it for freshers?

- Is CS50 useful for cybersecurity?

- What should I practice daily?

- Which platforms are best for learning realistically (TryHackMe, HTB, PortSwigger, etc.)?

- How do I avoid getting overwhelmed while learning?

I genuinely want to take cybersecurity seriously and build strong skills, but right now I’m struggling to understand the right direction.

Would really appreciate honest advice from people already working in the field. Thanks!

reddit.com
u/NoirLykoss — 12 days ago
▲ 10 r/netsecstudents

How much OS understanding is used for work

Hi everybody, i just finished my OS class recently. Now that i have acquire the very basic view of how an OS work and interact with its components, i just have one question that is how much of OS knowledges are used in real-life work

reddit.com
u/Total-Cabinet5845 — 14 days ago
▲ 9 r/netsecstudents+2 crossposts

SunnyDayBPF: eBPF telemetry integrity research for detection engineering

I published SunnyDayBPF, an eBPF-based research project focused on post-syscall user-buffer telemetry deception.

The research is about telemetry integrity and detection engineering.

Core question:

Can a user-space security or logging agent successfully read telemetry, but still observe a modified version of that data before parsing and forwarding it to a SIEM, EDR, audit backend, or detection pipeline?

SunnyDayBPF focuses on the trust boundary between read-like syscall completion and user-space telemetry parsing.

Repository:

https://github.com/azqzazq1/SunnyDayBPF

SunnyDayBPF was originally proposed, named, and publicly documented by Azizcan Daştan. To the best of my knowledge, it is the first public research framing of post-syscall user-buffer telemetry deception with eBPF under this technique name.

This is published as authorized lab research and defensive telemetry integrity analysis, not as a production bypass framework.

I’d especially appreciate feedback from defenders on:

  • eBPF monitoring ideas
  • telemetry integrity validation
  • cross-source correlation
  • detection engineering approaches
  • limitations and prior art
u/secsecseec — 14 days ago
▲ 3 r/netsecstudents

Hello everyone,

I am a soon-to-be graduate with a degree in Cybersecurity, specializing in penetration testing. I am currently considering a career shift toward the security compliance and governance domain.

I would greatly appreciate your insights on the following questions:

  1. Industry Outlook: What is the current development prospect of the security compliance field? Is it becoming saturated?
  2. Skill Requirements: What specific knowledge and competencies are essential to enter this field?

Thank you in advance for your guidance.

reddit.com
u/Puzzleheaded-Pay2242 — 14 days ago
▲ 7 r/netsecstudents

Looking for ethical hacking student

Looking for one to two beginners interested in cybersecurity and ethical hacking.

Goals:

• Learn together

• Practice CTFs

• Participate in hackathons

• Build cybersecurity skills

Requirements:

• Active learner

• Friendly and respectful

DM me if interested

reddit.com
u/Neat-Reflection7549 — 13 days ago