Rahul Vivek Nair

Bug hunting is love. Bug hunting is life!

[Rahul Vivek Nair @RahulVivek11]

@jietang Vision + smol model that beats qwen

[Rahul Vivek Nair @RahulVivek11]

@elonmusk Genuinely impressive. Checked a few controversial topics and it lays out all the facts without leaning towards a political ideology.

Need these to get indexed by Google so that it appears in search results.

[Rahul Vivek Nair @RahulVivek11]

@AnushElangovan All cards released from now on and both linux and windows support. That would be the only way to truly compete with Nvidia.

[Rahul Vivek Nair @RahulVivek11]

@cloneofsimo Impressive af

[Rahul Vivek Nair @RahulVivek11]

@Blaklis_ @scarybeasts This is the way

[Rahul Vivek Nair @RahulVivek11]

@codingo_ @mysanismine @Bugcrowd @Masonhck3571 @GodfatherOrwa If you don't mind, how were other researchers impacted? Was it a password change, some sort of DOS or disabling some sort of self-registration portal?

[Rahul Vivek Nair @RahulVivek11]

@adnanthekhan Thanks for sharing, great writeup as usual!

[Rahul Vivek Nair @RahulVivek11]

@GarrGhar @hackthebox_eu @0xRy4n @s0ldier93 I'm taking it either way soon

[Rahul Vivek Nair @RahulVivek11]

@tannerXrubicon @Grummz Riot is already implementing this and it auto moderates without having to report. It's so dystopian..

[Rahul Vivek Nair @RahulVivek11]

@captainhelix @ClementDelangue @StabilityAI it looks worse, sd 1.5 finetunes actually look good.

[Rahul Vivek Nair @RahulVivek11]

@bug_vs_me @sudhanshur705 Found?

[Rahul Vivek Nair @RahulVivek11]

@albinowax @stokfredrik @joohoi This year's lineup is insane! Can't wait!

[Rahul Vivek Nair @RahulVivek11]

@erickfernandox Hey, I was able to reproduce it but targets behind nginx and awselb cannot be exploited right since they merge slashes? I have a bunch of targets that are vulnerable but not exploitable because of this...

[Rahul Vivek Nair @RahulVivek11]

@AliUsma36592250 @0x2458 Did you find a way around it by any chance? unless merge slashes is off or an old version of nginx is used, it cannot be exploited right?

[Rahul Vivek Nair @RahulVivek11]

@arjun0x1c @xitsec Did you find a way?

[Rahul Vivek Nair @RahulVivek11]

@infosec_au @Rhynorater @DoomerOutrun @assetnote @CaidoIO Thank you, this is pretty helpful!! Just wondering about GET requests, is mutation of the payload still the only option here?

[Rahul Vivek Nair @RahulVivek11]

@alluppinya @violetto96 Better than me lol

[Rahul Vivek Nair @RahulVivek11]

@cloneofsimo The fact that such a large scale training can be done as a hobby is mind-blowing considering where we were a few years ago.

[Rahul Vivek Nair @RahulVivek11]

@GodfatherOrwa Great stuff!

[Rahul Vivek Nair @RahulVivek11]

@xnl_h4ck3r @GodfatherOrwa Yup same,I wonder how people here do it,I see many finding 15+ sqlis a day. I'm so used to testing modern applications where queries are safe by default.