krupal

Eat ...Sleep...Hack...Fix...Repeat. Vulnerability Researcher, Pen tester, free style drone pilot, dad - ಹೆಮ್ಮೆಯ ಕನ್ನಡಿಗ

[krupal @krupalb]

Very concerned by @AskNationwide handling of my account.
Very disappointed with Nationwide. A payment was blocked, no clear reason was given, and my online access was restricted. Because my phone is also locked due to a work-profile issue, I’m left unable to access my banking...

[krupal @krupalb]

@0xTib3rius super stuff waiting for a link to GitHub, anything can be achieved using vibe coding!

[Tib3rius @0xTib3rius]

Just heard about HackerOne allegedly training an AI pentesting agent on private bug bounty reports.

Which is great news.

I’ve always wanted to be part of something bigger than myself.

Like a dataset.

I logged into the platform to review one of my old private reports.

The one with the 47-step reproduction chain and the custom Burp extension I wrote at 2:13am.

It now feels less like a finding.

More like a contribution to the collective.

Some people are upset that private reports might be used to train an AI.

I prefer to think of it as mentorship.

I walked so the model could run automated recon at scale.

That’s legacy.

The platform says it’s trained on years of proprietary exploit intelligence.

Which sounds suspiciously like “stuff we already did.”

But I appreciate the rebrand.

I used to be a hacker.

Now I’m pre-training data.

Career growth.

I checked my dashboard to see if I get royalties.

There is no royalties tab.

But there is a leaderboard.

I assume the AI is climbing it.

I hope it enjoys the hoodie.

A few researchers are worried this devalues human work.

I disagree.

My work has never been more valuable.

It’s now infinitely reusable.

Like a zero-day sourdough starter.

I submit vulnerability reports.

The AI absorbs them.

The AI pentests the same targets next quarter.

Somewhere in there is synergy.

Or recursion.

Hard to tell.

I asked support if the AI will be submitting duplicate reports based on patterns it learned from mine.

They said the system is designed to enhance signal.

I respect that.

Nothing enhances signal like automation replaying my exact payloads at machine speed.

I’ve decided to lean into this.

From now on, I will optimize my reports for model readability.

Clear headings.

Concise PoCs.

Structured exploitation paths.

If I can’t win the bounty, I can at least improve the weights.

This is what scale looks like.

The future of bug bounty is continuous, AI-driven testing powered by historical exploit intelligence.

Which is a very elegant way of saying:

“Remember that bug you found? It found you back.”

I’m proud to be part of the ecosystem.

Even if the ecosystem is now pentesting itself.

Submitting my next report tonight.

For training purposes.

[Swissky @pentest_swissky]

Azure Attack Paths - @fabian_bader
https://t.co/iKDhZjqWoc

[krupal @krupalb]

@UKinItaly we lost our passports, someone stole our passports in a restaurant (can you believe that) neither the restaurant (IL Bistrot) nor police could help, we've applied for emergency travel docs but they say will take time. Please can help?

[krupal @krupalb]

@galnagli @deepseek_ai @wiz_io hmmm I wonder why @deepseek_ai didn't train this bit, to secure their unhardened assets! 😅

[krupal @krupalb]

@VirginAtlantic for you spending 20mins on waiting time, in this day and age, such a pathetic service

[krupal @krupalb]

@RWGcomms my sim card is lost and i've been trying to contact you none of the support queues working? are you even in business?

[krupal @krupalb]

@TheTennisLetter G.O.A.T

[Tib3rius @0xTib3rius]

Damn that was fast.

😏

[krupal @krupalb]

@PureGym All done, but sadly nothing happening.

[krupal @krupalb]

Customer experience is pathetic with @puregym. They increase prices without any notice and customer support takes nearly 12 hours to respond. My local gym is much better. #CustomerServiceFail #NoTransparency

[krupal @krupalb]

@PureGym Sadly I did DM on the facebook no one helped me, they said I can cancel it, and infact they have cancelled my membership, this is blatant disregard for consumer rights.

[krupal @krupalb]

@PureGym Nope no email no correspondence, do you have something to prove you sent? I have checked all my spam folders etc

[krupal @krupalb]

@PureGym is Company claims gym access is allowed in any centres, but this assertion to be false. Disappointing and misleading. #CustomerExperience #FalseClaims (part 2)

[krupal @krupalb]

@puregym Company just raised prices without any notice or explanation. Talk about a slap in the face! #CustomerExperience #NoTransparency (part 1)

[krupal @krupalb]

I love this site! https://t.co/7ZVx8GNjOt

[krupal @krupalb]

Chip.exe ??? How unique 😅

[krupal @krupalb]

I thought why didn't people create another GPT, using chatGPT, this guy got it... here is VardaGPT, built using ChatGPT https://t.co/2uWa5XRzbb

[krupal @krupalb]

@BSidesChelt Is it a day event?