Faav

Hacker & Developer.
Hunting bugs. Building & NameMC Extras.

[Lupin @0xLupin]

We managed to find a way to backdoor the next release of OpenAI Codex 🔥

This is the best exploit chain I’ve ever witnessed

https://t.co/SlH6bG2tud

[Faav @efaav]

@p0psec @Hacker0x01 Goat as always

[Faav @efaav]

@rip_xerxes This is just the start bro

[Depi @depi_]

🚨👾First post → Awesome research.

We compromised the latest version of OpenAI Codex.

We prompt injected.
We escaped a sandbox.
We exfiltrated secrets…

And ended up with control over what could be published to the official openai/codex npm package.

Prompt injection → RCE → supply chain compromise.

Full research by @0xMadder and @_Worty in the comments 👇

[Faav @efaav]

@p0psec @intigriti This is just the start bro well done

[p0psec @p0psec]

I am feeling fortunate and grateful.

This is my best month in bug bounty.

Thank you, @intigriti

[Faav @efaav]

@samwcyo @infosec_au Amazing as always

[Sam Curry @samwcyo]

The second blog post is about an RCE on a hosting provider that allowed us (@sshell_, @xEHLE_) to steal the WARDOGS server binary, where we could grant unlimited XP and money to any player: https://t.co/SbckwrvyuQ

[Sam Curry @samwcyo]

Had some time off of work and was finally able to release a few blog posts: the first is about an RCE on ForgeRock that allowed us (@infosec_au) to remotely send vehicle commands for two automakers using only a customer's name, email, or phone number: https://t.co/XYlWdoAZdk

[Faav @efaav]

@gasInjection https://t.co/LLcoACLZVe

[Faav @efaav]

Please send over any Microsoft MSRC writeups I may be missing! :) https://t.co/Cq2EyGjEKu

[Faav @efaav]

@p0psec @Hacker0x01 LFG 🐐

[ozgun @kultekin]

*sshole is out

if you run sshd on alpine, openwrt or any musl box with password auth on: update now

official writeup: https://t.co/hQUJXVPKwE

[Faav @efaav]

@p0psec @Hacker0x01 🐐

[Faav @efaav]

I made a MSRC (Microsoft) version of @xdavidhu’s Awesome Google VRP writeups repo! https://t.co/Cq2EyGj6UW #BugBounty

[Faav @efaav]

@ctbbpodcast Amazing

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

What's scarier than spending days building yout exploit chain to realise it's worth absolutely nothing? 👻

Halloween special episode is here!
https://t.co/7pOcEckboG

[Parameter @parameter_ai]

We hacked ChatGPT (using ChatGPT).

We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it.

OpenAI rated it P1 and fixed it Oct 26.

[Gergely Orosz @GergelyOrosz]

Fuck around and find out.

When Railway was breached on 21 Oct, Northflank dunked on them and urged people to migrate over to them because of that breach.

9 days they got hacked, the same way.

Zero sympathy: instead of securing you were busy dunking

[Sean Heelan @seanhn]

haha, so apparently OpenAI are about to start training on your Daybreak Blue sessions, with no way to opt out.

Literally stealing people's private work, as they do it, is cartoonishly evil.

It also will presumably kill Daybreak usage by security researchers. Or at least, it should. The thing OAI have had to swear they are not doing to math researchers, they are now explicitly about to start doing to security researchers.

Yet another reminder of the importance of open models.