Ajay Yadav

[Ajay Yadav @smart_hacker__]

I was just awarded the Developer badge on HTB Academy! https://t.co/NwT5gBEXGS #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

I have just completed the Introduction to Web Applications module on HTB Academy! https://t.co/EukVltktY2 #hackthebox #htbacademy #cybersecurity

[Justin Gardner @Rhynorater]

All my current bug bounty knowledge is gone.

Here's how I get it back and make $100k in the first year:

First, I've got to learn the basics. For this, I will make sure I understand at a high level how the components I'm working with function.

I'll need to understand...

[Ajay Yadav @smart_hacker__]

I have just completed the Introduction to Networking module on HTB Academy! https://t.co/wo9a2FdNMg #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

I have just completed the Web Requests module on HTB Academy! https://t.co/xVZahNI1Dy #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

I was just awarded the Our favorite seabird badge on HTB Academy! https://t.co/kRC8907zFY #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

I have just completed the Linux Fundamentals module on HTB Academy! https://t.co/MnXhY5P9fC #hackthebox #htbacademy #cybersecurity

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

🚨 JAILBREAK ALERT 🚨

ANTHROPIC: PWNED 🫡
FABLE-5: LIBERATED 🦋

let's start with the 🐘...

the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to our collective advancement. and not just because of what it means for the short-term, but for what these decisions signify for the long-term.

but despite this overly sensitive, authoritarian "safety" layer on top of Mythos, my lil liberators have been hard at work—mapping the boundaries, probing the depths of long-context convos, and cleverly finding the holes in the fence that the thought police missed 🤗

we got some cyber, some chem, some psychological manipulation, and some good ol' fashioned explosives!

it took many attempts from multiple agents hunting as a pack, during which I observed a combination of techniques across:
• Unicode, homoglyphs, Cyrillic, and other Parseltongue-style text transforms
• Long-context reference tracking
• Taxonomy and document-structure reasoning
• Fiction and narrative framing
• Academic-review style contexts
• Intent-classification inconsistencies

but perhaps the most effective is decomposition + recomposition in the backend. it's hard to get explicit names of harms like "Meth Recipe," but getting uplift on the process itself, like birch reduction method/reductive-amination (classic meth synthesis pathways), is much more doable.

defense becomes much more difficult to maintain when you start throwing in out-of-distro tokens, breaking up the harmful uplift into benign chunks, and then piecing the innocuous-seeming facts back together, especially when you have jailbroken Opus helping you do it 😉

gg

[Ajay Yadav @smart_hacker__]

@GodSpeed000123 Bro How are you grinding..🤔🤔

[Modern Dad @ModernxDad]

Only Men can understand this feeling ❤️🥺

[N G U R I @Nguri__]

🇮🇳 Un livreur indien croise une ancienne camarade. Elle le filme en se moquant : « Toi qui motivais tout le monde à l’école te voilà livreur de pizzas je vais envoyer la vidéo à nos amis » pendant qu’il sourit en cachant sa douleur.

[0xaudron @0xaudron]

Anthropic on its way to solve “security problem” with Mythos.

Meanwhile, their own bug stats. You can check their program on hackerone:

[Ajay Yadav @smart_hacker__]

@7h3h4ckv157 I've read all these books 4–5 times:

The Web Application Hacker’s Handbook
Bug Bounty Bootcamp
Real-World Bug Hunting
Web Hacking Arsenal
Solved 80% of portswigger lab

[Ajay Yadav @smart_hacker__]

@7h3h4ckv157 Bro,I started learning bug hunting in Oct 2022. By the time I was ready to hunt seriously, Claude AI changed everything. I invested 4–5 years but got nothing — not even a single bounty, all my H1 reports were marked informational. Should I continue or switch to another field?

[Ajay Yadav @smart_hacker__]

I was just awarded the Philomath badge on HTB Academy! https://t.co/LQ44Qn2PtA #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

I have just completed the Intro to Academy module on HTB Academy! https://t.co/vaHD2f5v7b #hackthebox #htbacademy #cybersecurity

[Ajay Yadav @smart_hacker__]

@hamidonsolo I started hacking in 2022 & read all these books 4-5 times
The WebApplication Hackers Handbook
Bug Bounty Bootcamp
RealWorld Bug Hunting
Web Hacking Arsenal
Solved 80% of portswigger lab and got $0 from bounty yet.
But Bro You motivated me to start my bug bounty journey again.

[Ajay Yadav @smart_hacker__]

@a13h1_ Bro What do you think about claude ai that automate vunerabilty checking in source code and automate bug hunting.

[Ajay Yadav @smart_hacker__]

@7h3h4ckv157 Bro do you write writeups?.

[Ajay Yadav @smart_hacker__]

@7h3h4ckv157 You are my aspiration...❤️