You spent months building your project?
Late nights. Debugging at 2am. Finally shipping.
π₯An attacker needs one afternoon to take it all down
One exposed endpoint. One missing check. One secret left in the code. Months of work. Gone.
The solution β https://t.co/G2gePU32OK
Introducing Claude Fable 5: a Mythos-class model that weβve made safe for general use.
Its capabilities exceed those of any model weβve ever made generally available.
Our first one pager! We're going to talk about Broken Access Control π₯
The vuln that lets a user become an admin. We break down how to detect & fix it.
Worried your product might be vulnerable to IDOR?
Itβs more common than you think! And often overlooked.
Test it like a hacker would π
π https://t.co/qpE8dr0Te3
Make your app truly hacker-proof.
βΉοΈ Do you know about IDOR?
One of the simplest, yet most powerful, web vulnerabilities. π₯
If a URL looks like: /ππππ /10
What happens if you try:
- /ππππ /11
- /ππππ /9
- /ππππ /1337
If the server doesn't check permissions... you might access other users' data.
No exploit. No brute force. β
Just changing a number.
And sometimes it's even sneakier: "random" IDs, UUIDs, hashes... that aren't truly unpredictable.
That's IDOR: Insecure Direct Object Reference.
@syraa0011@thandepappa It's like starting to drive with a Lamborghini. Start with something more accessible like mint, ubuntu or debian.
If you're looking for something more newgen, I would recommend @pop_os_official it's a blast!
Else, ngl Windows + WSL is quite nice since win11
@iuditg You speaking about the tools or the models? Those are two different things.
Frontier models are great out of the box whereas opensource models have to be used in more specialized tasks.
For tools, opensource is great. I've been using @opencode, it's often better then ClaudeCode