mav

0day security researcher sharing my work. prev: anthropic, unit 8200, stanford, trail of bits, calif

[mav @MavLevin]

Per popular demand, here are my 30 reversing tips all together in one blog post 🤩
https://t.co/4yesbejh41

[Ron Masas @RonMasas]

I recently got access to OpenAI’s Trusted Access for Cyber program.

With all the GPT-5.5 hype and the Anthropic Mythos discussion, I wanted to test it for myself.

The result: **GPT-5.4** helped identify and develop a working Safari exploit affecting all Apple devices.

It found a JSC WebAssembly use-after-free that gave us stale read/write access inside the Primitive Gigacage. Then it spotted a bug in Safari’s Fetch implementation where in-flight opaque cross-origin responses could be materialized inside renderer memory.

By combining the two, a malicious page could steal authenticated cross-origin data and completely defeat the Same-Origin Policy.

[Drew Pavlou 🇦🇺🇺🇸🇺🇦🇹🇼 @DrewPavlou]

The US rescued a downed fighter pilot in hostile territory while simultaneously sending astronauts to the moon.

One air frame loss per 12,000 combat sorties and they immediately found and rescued the guy while sending astronauts to space.

“LE DYING EMPIRE”

[thaidn @XorNinja]

We asked Claude to find a bug in Vim. It found an RCE. Just open a file, and you’re owned. We joked: fine, we’ll switch to Emacs. Then Claude found an RCE there too.

Full story: https://t.co/7UL9suKs8r

[Voidwalker @JustWantToQ1]

XD

[mav @MavLevin]

@thsottiaux and codex team: can you allow changing Permissions/yolo mode during a turn? geminicli has ctrl-y shortcut to disable/enable yolo mode

[mav @MavLevin]

@hohnjeyer looking forward to sending you more of my slop ;)

[mav @MavLevin]

@JackEllis thanks for sharing my work @JackEllis!! :)

[mav @MavLevin]

@RayRedacted @RayRedacted I'll hack those next ;)

[mav @MavLevin]

@theonejvo @theonejvo thanks for highlighting my work and explaining the benefit!!

[mav @MavLevin]

@ImNotTheWolf thanks for highlighting my work! :)

[mav @MavLevin]

@inf0stache thanks dude! love that you enjoyed the writeup

[mav @MavLevin]

@trapsticles @IntCyberDigest thanks for kind words @trapsticles ! I hope the post was an interesting read

[mav @MavLevin]

hey mom look i’m in the news

[International Cyber Digest @IntCyberDigest]

‼️🚨 An ex-Anthropic engineer just published a 1-click remote code execution exploit for OpenClaw (formerly Moltbot and ClawdBot).

The attack occurs in milliseconds after the victim visits a webpage, giving the attacker access to Moltbot and the system it's running on. The victim does not need to type anything or approve any prompts.

[mav @MavLevin]

@Markak_ @depthfirstlabs thank you!! your work is too ;)

[mav @MavLevin]

we @depthfirstlabs found 1-Click RCE in OpenClaw (aka MoltBot / ClawdBot) !

full vuln & exploit details 👇

[mav @MavLevin]

@hohnjeyer @depthfirstlabs don’t forget one click to setup @openclaw itself ;)

[mav @MavLevin]

@cakrami @depthfirstlabs thanks @cakrami! looking forward to presenting in the next “Mav in the lab” ;)

[mav @MavLevin]

@Federico_tar @depthfirstlabs @Jason @DavidSacks @chamath please patch to the latest version! and keep patching, because I'll be reporting more security vulnerabilities

[mav @MavLevin]

when the disclosure was published, I found another team found this bug too!

[mav @MavLevin]

https://t.co/tCoAdeOelI