Wood Pixels Art

[Wood Pixels Art @PixelsWood]

@HackenProof worst feeling ever

[Wood Pixels Art @PixelsWood]

@pashov Fable 5 immediately falls back to Opus when I use it with Solidity-auditor v3. Is this a known issue, or is it just happening to me?
@pashov

[pashov @pashov]

Winners of the giveaway for a month of Claude Pro/GPT Plus subscription. DM @0xFireFist on X to get the reward and congratulations🥳

AI is a wildly powerful tool that you can use to take on great challenges. Use the full month wisely🫡

@georgi91757
@faruukku
@0xbube
@heavyw8t_
@soligxbt
@0xJason__
@Harvesto12
@Oxvexor
@stoyan_penchev
@atharv_181
@EGOi1STA
@0xgo4ko
@hsnmughal_
@oladoteth
@darmawanggg
@chain_linkd
@s1lent_sta1ker
@JayShugito
@crypt_jeff1
@0xfl3x
@acetaminofenol
@raihanmddd
@alxstai
@0xSyv
@SolidityDev
@s1lent_sta1ker
@h4ckl07d
@dvrvsimi
@flexwrapp
@SahilKaush33125
@leroooyjankins
@cosminm53
@geeceemmy
@AIRMALIEL
@R4Y4N3___
@MKryptoDev
@j4ycked
@xxiv_eth
@kalyan__tr
@cryptomv3
@jsmaxi666
@PixelsWood
@kingoooooX1
@paspe0111
@Albertfd1999
@satyaorz
@onehundredgees
@ozochukwucc
@dimobugs

[Wood Pixels Art @PixelsWood]

@pashov @engcool
great security tool

[Wood Pixels Art @PixelsWood]

@pashov @engcool great security tool

[pashov @pashov]

Most people's security strategy is wrong. Speak to me on Telegram @ pashovkrum about yours.

Btw, we are giving away 50 (yes, 50) monthly Claude Pro/GPT Plus plans to people who RT the main post and tag a fellow web3 developer below. Good luck, results on Monday🫡

[pashov @pashov]

🤯An AI security tool has 1st-place performance on security contests from just 1yr ago. Solidity-auditor v3 is out, FREE & Open Source.

Thousands of Solidity developers are using the tool already. Upgrade your security baseline, use the tool🫡
https://t.co/SfxjuQ17gA

[Wood Pixels Art @PixelsWood]

@p_tsanev can not wait to try it with Codex CLI

[Wood Pixels Art @PixelsWood]

@Bugcrowd The filter uses urlparse(url).hostname.endswith(...), which can be bypassed because different libraries interpret "authority" differently.
The Payload
To hit a local service while bypassing the check: http://127.0.0.1#@internal.company.com

[Wood Pixels Art @PixelsWood]

@intigriti The red flag is here:
format.json { render json: @users }

That returns all users as raw JSON, which can expose sensitive fields depending on the User model.
And the authorization is also badly designed:
unless current_user.admin? && request.format.html?

[Wood Pixels Art @PixelsWood]

@0xcastle_chain can you share the protocol's source code to check from my side how many findings I can find with the help of AI?

[Wood Pixels Art @PixelsWood]

@p_tsanev any plans to make codex version?

[Wood Pixels Art @PixelsWood]

@p_tsanev does it support codex?

[Wood Pixels Art @PixelsWood]

@Achraf_03_ excellent

[Wood Pixels Art @PixelsWood]

@Achraf_03_ مفيد جدًا. شكرًا لك أشرف

[Wood Pixels Art @PixelsWood]

@Achraf_03_ PYR, ARB, GMX

[Wood Pixels Art @PixelsWood]

@pashov Learned a lot from you. Thank you

[pashov @pashov]

Since its launch a year ago, my web3 security company has both paid out to security researchers & profited >$1,000,000 USD. Secured Aave, Uniswap, LayerZero, Ethena.

We are celebrating with a giveaway. You need to like, retweet & comment. 4 winners, $500 each, 48hrs. Good luck🫡

[Achraf Elghemri | أشــرف الـغـمــري @Achraf_03_]

#CRYPTO #FOREX #STOCK

📌 السلام عليكم قررت أعمل جدول للمحتوى كالتالي:

1️⃣محتوى يوتيوب بيكون مرة بالاسبوع يوم الأحد بيكون الحديث عن جميع الأسواق

2️⃣تحليل يومي للعملات بديلة و فوريكس و اسهم على تلغرام

3️⃣تويتر لتحديث فقط بتكوين و مؤشراته

📣تلغرام: https://t.co/IV2731HLBd

[Wood Pixels Art @PixelsWood]

@pashov I do understand quantum physics, How can I become a great security researcher?