clumps

A wanabee hacker, learning how to hack web tech for good.

[clumps @IDistend]

@cshwshd99 I'm trying to send you a DM, and I'm unable to. Mind checking your inbox settings?

[clumps @IDistend]

@hakluke @codecancare

[TheBlackRabbit 🔍 @skaggsspaz]

@youhatefive That’s not all

[JS0N Haddix @Jhaddix]

We’ve seen plenty of people try to vibe code the php exploit who have no experience in the domain. Failure. Over and over. Then people who know what they are doing in exploit dev, marginal success.

People would say anyone with a frontier LLM can just say “hack this site, make no mistakes” and I won’t argue, some shallow bugs will fall out this way for a while. But the most successful applications of LLMs are coming from experts who at least know how to dissect the problem, change the models thought direction, and have put engineering into harnesses and skills. I’ve seen this across several sub sections of cyber. And that requirement will only get more mandatory as all the shallow bugs shake out. Just my 2c and observation.

🫶

(Also beware of influencers trolling with opinions on this topic. It’s often just for fake clout and clicks)

[clumps @IDistend]

@Behi_Sec Is it still relevant to BB programs these days? Because I successfully achieved RCE with something similar via RubyGems pkg, it was downgrade to N/A and my account was deleted.

[clumps @IDistend]

@intigriti DNS rebinding

[clumps @IDistend]

@fattselimi @badcrack3r @intigriti I love this guy! 😃

[clumps @IDistend]

@YShahinzadeh Bro how? did the company stumbled on your report and decided to work on it or you sent them a follow-up request with more reasoning?

[clumps @IDistend]

Hello @Hacker0x01 @jobertabma

I need your knowledge and expertise on this; how can new hunters write impressive reports, find real security bugs, not functional bugs while cutting through the false positives?

[clumps @IDistend]

@anyrun_app @BirminghamCyber @north_scan Why are they using biblical names? these guys are funny. (:

[clumps @IDistend]

@vxunderground @vxunderground Here comes the stealth Ops cat. Ready to fight thru d3 pit.

[clumps @IDistend]

@vxunderground Nice!

I'm bracing for whatever comes next.

[clumps @IDistend]

@vxunderground @cyberwarfarelab @cyberwarfarelab @vxunderground ready for the nice bigger suprise! meooow!!!🐈

[clumps @IDistend]

@nowaskyjr @nowaskyjr, nice one! This is capable of confusing a lot of parsers.

[Dimitri Os @Ch0pin]

There are countless tutorials, blog posts, and workshops on how to exploit a vulnerability. What’s missing is the thought process — how you approach a target, form hypotheses, and ultimately discover a bug. That mindset can’t be fully taught; you have to develop it yourself ;)

[clumps @IDistend]

@ProbeJoe @chux13786509 Oh, I missed it. (:

[clumps @IDistend]

@chux13786509 I was thinking of SSRF & ATO

[clumps @IDistend]

@intigriti @intigriti this is Miami skyline from bridge to brickell key