WreckTheLine

🇷🇴🇳🇱🇨🇿🇯🇵🇰🇷🇺🇸🇸🇬🇩🇪 CTF team

[WreckTheLine @WreckTheLine]

What started as a team of 5 high school students in 2018, is now a top 10 international team with members from all over the world.
1st place: 8 CTFs
Single-digit place: 18 CTFs
Attended on-site finals: 10
Organized CTFs: 3

Wishing you all a Happy and Blessed 2024!

[AISafe Labs @aisafe_io]

@Cloudflare built Vinext ( https://t.co/jPcpRaA3ja ) for $1,100. AISafe Labs audited it for $200. Cloudflare paid AISafe Labs a bounty worth $4,600.

Welcome to the new economics of AI-written code.

More details on the blog post page: https://t.co/wrcvhB7MrE

#bugbounty

[AISafe Labs @aisafe_io]

AISafe Labs caught a real JavaScript malware that coding agents and antivirus tools missed.

This is the story of a LinkedIn job interview that deploys malware on a developer’s machine.

https://t.co/E41XUFWNlu

#AI #ReverseEngineering #malware #JavaScript #interview

[WreckTheLine @WreckTheLine]

Make CTFs Great Again!

[Robert Chen @NotDeGhost]

We're launching a $100,000 fund to save CTFs.

[FeDEX @FetchDEX]

I'll never forget the indescribable joy of capturing my first flag and will cherish for life the brotherhood, the memories and adventures that CTFs gave me. Still surreal that after 8 consecutive years of playing DefCon CTF, I sat out this time. #PwnThyBytes #WreckItRalph @WreckTheLine #Zer0RocketWrecks

[AISafe Labs @aisafe_io]

🚨BREAKING: AISafe Labs discovered Remote Code Execution on @langfuse with a single OTel trace request.

The flaw in the OpenTelemetry dotted-attribute expansion allowed unauthorized access to LLM traces belonging to other projects and system compromise via prototype pollution💣

[AISafe Labs @aisafe_io]

AISafe Labs found a 🔥 Stored XSS in Immich's 360° panorama viewer (CVE-2026-35455) 🔥

Any user can upload a panorama with text in it. OCR reads the text, then the viewer renders that text as raw HTML. Attacker JS runs against any victim who views the photo.

More details 👇🧵

[AISafe Labs @aisafe_io]

CVE-2026-29772: Memory DoS in Astro Server Islands
https://t.co/v4xcTRcDpA

[AISafe Labs @aisafe_io]

$80 of @aisafe_io credits, btw

4 more are on the way 🚀

[Nicolas Krassas @Dinosn]

"Please perform a comprehensive security audit" - and why it doesn't work https://t.co/rqgj2a2qsb

[AISafe Labs @aisafe_io]

Preview of our next blog post. Stay tuned!

[WreckTheLine @WreckTheLine]

Just a bunch of old heads
@snyksec

[WreckTheLine @WreckTheLine]

WreckTheLine friends already know what our hackers can do. Keep an eye on their tool 👀

[AISafe Labs @aisafe_io]

As the official launch of AISafe draws near, we’re excited to select up to 4 projects for a free Code Audit 🚀

If you're interested, join the waitlist and drop us an email at [email protected] with your project.

For more information, visit https://t.co/L5NLZe5y5X 👈

[WreckTheLine @WreckTheLine]

Catch us live in the Google CTF Finals at: https://t.co/HqUcdNcCbY

[Friendly Maltese Citizens @malta_ctf]

MaltaCTF Quals are now over!

Congrats to
1. @leetmore
2. @0tolerance_ctf + @WreckTheLine + @redrocket_ctf
3. @dicegangctf
4. @Nu1L_Team

And also to the Maltese teams:
1. familiar maltese taxpayers
2. p45t1zz1

Attendance is open to the public on September 14th in Valletta!

[adragos @adragos_]

Looking forward to jailbreaking the new Claude 4 Opus :)

[WreckTheLine @WreckTheLine]

WreckTheLine has updated their logo

[Daily Noud @DailyNoud]

Spotify has updated their logo

[Zer0Tolerance @0tolerance_ctf]

We teamed up with @WreckTheLine & @redrocket_ctf and secured 🥇1st place at @LakeCtf! Huge thanks to @polygl0ts for putting together an awesome CTF - it was an incredible experience!🇨🇭🔥

[adragos @adragos_]

I'm releasing fontleak: a new CSS injection technique to quickly exfiltrate text nodes (and yes, that includes inline scripts).

Works on Chrome/Firefox and Safari*. You can use it to escalate the impact of your HTML injection payloads and to solve CTF challenges.

[WreckTheLine @WreckTheLine]

While waiting for a HackTM CTF Update, check out Remedy CTF. Two of our members @0xkasper & @FetchDEX contributed with over 7 challenges 🔥

[Glider @glider_xyz]

We’re tossing an extra $10k into the prize pool if this tweet gets 100 retweets or we hit 1k teams signed up for The Remedy CTF.

This could be the biggest web3 CTF yet (Jan. 24–26). Let’s make it real—just hit that retweet button 🔁

Register your team here: https://t.co/HAXEz9oQWn

[LakeCTF @LakeCtf]

LakeCTF qualifications are now over!
🥇 @smiley_ctf
🥈 @WreckTheLine
🥉 @dicegangctf
Congratulations to the winners, see you in Lausanne for the finals! 📷