blasty

irresponsible disclosure aficionado

[blasty @bl4sty]

this somehow reminded me of how every time I released some linux LPE thing I would get random e-mails from HTB players thanking me for da ez cheeses

[LiveOverflow 🔴 hextree.io @LiveOverflow]

You made me buy a HTB subscription... Tenet pwned with php2shell

[blasty @bl4sty]

man, @emirates "economy plus" is such a fucking overpriced scam. don't buy it if you think it'll let you operate a laptop computer in a normal way once the jerk in front of you fully reclines his seat (with 0 notice, of course)

[blasty @bl4sty]

@ErikVoorhees where can I report venice dot ai API defects/bugs?

[blasty @bl4sty]

@boredpentester 🤘

[blasty @bl4sty]

this aged pretty well given the nsw2 news ;)

[blasty @bl4sty]

/goal find all php2shell github slop repo’s and synthesise them into a universal weapon of mass cyber destruction

my bad wrong window

[blasty @bl4sty]

man, @officialmcafee would’ve been so psyched for the entire world finally latching onto PHP (until he would discover they are talking about some nerd shit and not grade-a alpha-pyrrolidinohexanophenone)

[blasty @bl4sty]

@landaire @_kujen5 @oct0xor @thimstar 🫡

[itewqq @lyq_sqsp]

OpenAI independently reported the same root cause ON THE SAME DAY?
I hope that it is just a coincidence...

[blasty @bl4sty]

SHELLSHOCK II: ELECTRIC BUG-ALOO ?

[Hacktron AI @HacktronAI]

bash2shell?

[blasty @bl4sty]

tl;dr: responsible/coordinated disclosure is cooked && you cannot argue with a (root)shell

[Halvar Flake @halvarflake]

For the next few months, we are looking at frequent discoveries of long-standing bugs - competent code auditing has gotten cheap and abundant. This carries a few consequences:

[blasty @bl4sty]

anthropic has employees installing mics in their own offices.. openAI had some questionable situation with the navier stokes discovery. we need to stop sending them good context..

.. although most collisions are probably just people rolling the virtual dice in a similar way ;)

[Stefan Esser @i0n1c]

There is a recurring info I hear from vendors that there is often a first discovery of a vulnerability by AI and suddenly one or two weeks later lots of collisions come in. In this case the PHP bugs were first discovered 5th August and then rediscovered 2 weeks later

[blasty @bl4sty]

vulnerability vultures are everywhere ;-(

[Daniel @ergot86]

The amount of scavengers that come out just as a new vulnerability is disclosed is insane in the age of AI...

[blasty @bl4sty]

sent from my iPhone at #TheSAS2026 afterparty

[blasty @bl4sty]

https://t.co/yKMAiPoE6O i accidentally marked this repo as public i dont know if its ANY GOOD. bbiab

[blasty @bl4sty]

@withzombies that was a much better bug ;)

[blasty @bl4sty]

had some time to kill en route to #TheSAS2026 dinner party.. so clanked on php apocalypse PoC.. ;-PPpppPp

[blasty @bl4sty]

cube.obj with fire.glsl shader :O #TheSAS2026