Yesterday I was tired of the constant probing of those CIDR scanning bots so I setup a trap for the next one π now I own a sourcecode to one of them; this is a Russian hosted server with a Norwegian IP.
It hooks on most AI services out there and has a interesting payload π
If you are curious about uncensored AI / LLM models take a look at @abliteration_ai at https://t.co/Al5ymuPXXk - they got other models than me - worth checking out
From this point I'm gonna use my LLM models in all penetration tests, with 0/250 refusals it's nothing it won't do - and work as the perfect tool with the correct Operator
From the tool I pulled from a internet node scanning bot... it's an advanced credential harvester which collected a wiiiide range of API, tokens, keys, ID's, cryptpo; and it really harvest and sort on a very large skale - 3400 tokens / keys in 40 seconds.
Didn't really notice the slogan until now... we'll funny story that one, I won't say exact what or where - but let's say all your customers has access to more than you guys have a clue about --- awww - it's not possible to DM you @hotelbeds but lets fix it asap
Full access, worked my way around some bugs and gain admin access without root due to series of bad configurations. Took control over the payment system with customers - at this point I can bill customers and be savage - but I won't π @hotelbeds
@hotelbeds please take contact - either here or at [email protected] - you've got a big problems with your Hotel API which I got full access too
Write me and I will send all detailt - cheers!
I went through the hooks and replaced them and took it for a driver... Now I own the servers, database and payment system of a
1 Auctioneers company
and 1 Hotel Chain
Tool removed from GitHub
@brotendies https://t.co/q5rIsr9OoK is one as t least - I asked Claude, Kimi and other agents to give me details on how it works but they refuse π I will load my own model and get a summary later this evening