Sorcery

Security and Software Services

[Bros10 @Bros10_]

Wanted to figure out which AI was best at hacking websites, so I put 11 LLMs against 32 challenges. GPT-5 solved 29/32 at 63% cheaper than Sonnet 4.5.

Big thanks to @SorceryIE for donating OpenRouter credits.

Blog: https://t.co/L3AoQHMRfn
Full Results: https://t.co/WkcyNCfF5l

[Sorcery @SorceryIE]

Embedding Payloads in GIF File Using the Global Color Table
https://t.co/vdqXNlYQ1Z

[Sorcery @SorceryIE]

CFOR Exploit for Recovering Deleted and Private Github Commits https://t.co/qdeVwU6yiK

[Sorcery @SorceryIE]

MyBB RCE in Admin Panel using ReDoS https://t.co/ThfXF20HsU CVE-2023-41362 #redos #rce #php #mybb

[Sorcery @SorceryIE]

SQLi in SimpleImportProduct Prestashop Module CVE-2023-39675 https://t.co/CZhLfR57PR #prestashop #sqli

[Sorcery @SorceryIE]

PHPInfo Exposure in MyPrestaModules Modules CVE-2023-39677 https://t.co/Egp8K9eua7 #prestashop

[Sorcery @SorceryIE]

XSS in FieldPopupNewsletter Prestashop Module CVE-2023-39676 https://t.co/HOiGAXKSWZ #prestashop #xss

[Sorcery @SorceryIE]

HigherLogic Community RCE Vulnerability (__VSTATE deserialization) https://t.co/mgPF3nT84h #higherlogic #security #bugbounty

[Sorcery @SorceryIE]

Authentication bypass in ADOdb CVE-2021-3850 https://t.co/a522tzzfKS #postgresql #adodb #phppgadmin #security

[Sorcery @SorceryIE]

Proof of Concept for CVE-2021-38314 (Redux Framework Wordpress plugin) and code analysis: https://t.co/QkOtFkqDLA

[Sorcery @SorceryIE]

SQLi in SmartBlog (Prestashop module) CVE-2021-37538 https://t.co/Nuvm8M5pNM

[Sorcery @SorceryIE]

SQLi in ph_simpleblog CVE-2021-36748 https://t.co/CspVSdZQuG

[Sorcery @SorceryIE]

New blog post about Adminer and its vulnerabilities: https://t.co/psqiXqUGHf #bugbountytips #adminer

[Sorcery @SorceryIE]

@ericaltm @SteelSeries Yeah looks like it should work, same API. :)

[Sorcery @SorceryIE]

Made a small script that displays $BTC price on @SteelSeries Keyboard screen using the GameSense API - https://t.co/8JlCjHzcyQ

[[email protected] @0daystolive]

Just got the Chinese New Year swag from @AsrcSecurity . Thanks :) #bugbounty #swag

[Sorcery @SorceryIE]

New blog post about a time I tried to get a #bounty from #Binance for identifying people behind #phishing attacks https://t.co/4XEZCdZP8j

[Sorcery @SorceryIE]

Hi @housfy_es can you DM me, I have a security vulnerability to report and can't seem to find a contact email anywhere

[Sorcery @SorceryIE]

Just availed of this great #CyberMonday deal!

[Host.io – Domain Data Provider @host]

We had an absolutely EPIC product launch, and to say THANK YOU we are offering an equally epic Cyber Week offer! Domain Data API for $1 a month! Want some? Just shoot us a message at [email protected] this week!

[Sorcery @SorceryIE]

Hi @Madrid_Cultura can you DM me, I have a security vulnerability to report and can't seem to find a contact email anywhere