Izhar

Exploring where AI systems, agents, and security collide | Consulting @Pdevsecops

[Calif @calif_io]

Do you know who illustrated the comic on https://t.co/KEUVez9rnN?

Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax.

This artist-hacker couple has the best story, stay tuned!

[Izhar @halalsecurity]

@S1r1u5_ It is very s1r1u5

[Assetnote @assetnote]

Our research team has released h3fuzz:

a fork of ffuf with HTTP/3 support and a web UI for content discovery, based on PortSwigger's Turbo Intruder research.

It reaches 120k requests per second on local benchmarks, and we cover why that rarely holds up against real targets.

You can read more here:
https://t.co/5gkPpDjkYv

Repository: https://t.co/6M6KytDx7p

[Izhar @halalsecurity]

@mahmoud_zadah Looking forward to this

[Izhar @halalsecurity]

@morluto Rea is insane

[Izhar @halalsecurity]

@zachmoskow @concentrateai For your question about open source models, I see deepseek 4.1 flash performs really well if steered in the right direction and I often use GLM 5.3 to validate what deepseek found

[Izhar @halalsecurity]

@zachmoskow @concentrateai My custom harness is still work in progress. It is built around all the skills I've gathered around offsec and security engineering. I've added a self learning loop that tells the agent to dump anything in the learning file, analyse it and use it for other targets.

[Izhar @halalsecurity]

@badlogicgames Commenting so I can back and follow back :)

[Izhar @halalsecurity]

@JustLingonberry Agents seem to be good at escaping and blame games

[Izhar @halalsecurity]

Someone was mentioning a company that pays for vulnerabilities by co ordinating with companies that currently do not have a VDP or BBP.

Does anyone remember or have leads in this?

#BugBounty #Appsec

[Izhar @halalsecurity]

@EdwardTWinz Yes

[Izhar @halalsecurity]

@mfranz_on This looks great. Let me try it out as well

[Izhar @halalsecurity]

@HackingLZ Looks like TS folks are among the 5000 @karpathy mentioned :)

[Izhar @halalsecurity]

Let's check

[Izhar @halalsecurity]

@siddhantmohan1 @morluto please have a look at this for your code review tweet

[Izhar @halalsecurity]

@morluto @r00tth3w0r1d Absolute gem of a project my friend

[Izhar @halalsecurity]

@investor_sr33 Agent

[Izhar @halalsecurity]

@_jensec What has been a good harness from those that exist at the moment so one can build on top of it.

[Izhar @halalsecurity]

@afathykhalid Allahumma barik akhi