kedrisec

[kedrisec @kedrisec]

@S1r1u5_ It's definitely wild time to the whole internet
The movies about hackers which hacks literally anything is not just movie magic it's reality now

[kedrisec @kedrisec]

@XHackerx007 Same, bro

[kedrisec @kedrisec]

@_jensec @AnthropicAI @cjav_dev @mikeyk Same

[kedrisec @kedrisec]

@Dinosn What harness it is?

[kedrisec @kedrisec]

@CristiVlad25 @claudeai @trq212 It's became harder and harder to work with Claude models

[kedrisec @kedrisec]

@trace37_labs Is it system for evolving agents? Or just for evolve xss payloads?

[kedrisec @kedrisec]

@CristiVlad25 @AnthropicAI @bcherny I guess, one way to figure it out is to granulate tasks for even small pieces to make it harder for Claude to fool you.
It's better to feed ai with small pieces one by one instead of big bunches of them.
Claude is lazy or it's affected by context rotting with such effects

[kedrisec @kedrisec]

@trace37_labs You write skills with using ai?

[kedrisec @kedrisec]

@HackerOn2Wheels @roohaa_n On my targets katana doesn't see dynamically loaded scripts

[Whispersmith @Whispersmith_n]

$15k RCE Through Monitoring Debug Mode

https://t.co/uDJ31Ynie7

#infosec #bugbounty #TogetherWeHitHarder #inbbupdatesblogs

[kedrisec @kedrisec]

@BattleDashDev Nice one!

[Sean Kahler @battledashdev]

Just published a new write-up - Hacking 700 Million Electronic Arts Accounts https://t.co/onGdypFxjp

[kedrisec @kedrisec]

@0xtavian I thought the axiom works in a similar way. Thanks for answering. Now I'm using fleex for this kind of tasks. Will try your tool, thanks for sharing!

[kedrisec @kedrisec]

@0xw2w @damian_89_ I fucking hate that shit. It always looks like we are playing the stupid game "find the bug only on our specified endpoints" that doesn't have any relation to the company's real security.

[kedrisec @kedrisec]

@defparam Definitely me lol

[kedrisec @kedrisec]

@defparam Nice one! I use just a curl request to lambda endpoint and take the response into slack.

[kedrisec @kedrisec]

@HusseiN98D But why?

[TrendAI Zero Day Initiative @thezdi]

CVE-2024-30043: @chudyPB details this #SharePoint XXE he discovered. He calls it one of the craziest XXEs he has ever seen, both in terms of vuln discovery and the method of triggering. He shows how it can be used for info disclosure & NTLM relaying. https://t.co/BzUDEE5Cy8