sshell

AI offensive security at @RunSybil (prev. @BishopFox). security research. ccdc red team. tummy ache survivor.

[sshell @sshell_]

i got paid to overflow a buffer on a nintendo 64
(arbitrary code execution on mario golf via transfer pak)

[Sybil @runsybil]

we got early access to Opus 4.8 and used it to hack a Nintendo 64 game you forgot about. here's what it didn't find: 1/

[sshell @sshell_]

when you drop codex into the PHP source repo and ask it to look for bugs

[shubs @infosec_au]

You can now perform content discovery at 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool here: https://t.co/tL4kkQRRwN
Research post here: https://t.co/LSGVNco6G3

[Calif @calif_io]

Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: https://t.co/I88EQFrUHa

His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.

[LCFR @lcfr_hax]

d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac (posted in august)

(related)
8da579ec498d57c20977c8d186d7f6cd4c04f46ffa1b436dd646ec19b99bdf47
cb4c8532c245ff7e05d6e270fca5742bb3271f541ef80f0071ca3d4307eb2b53
957f8cc21b18483f80a9d723aa4f9ded26e456424ffd065a044d1ed9d58a4fbc
4f93976ef105f0d9ff2d60f35d48958c8bba9d9eb2873cd93b3f7105fa4716a6

[sshell @sshell_]

@lcfr_hax this goes so hard

[sshell @sshell_]

@calif_io amazing work as always. you guys are killin it!

[Calif @calif_io]

php2shell - A tale of two PHP remote vulnerabilities:

https://t.co/KEUVez9Zdl

[sshell @sshell_]

@farazsth98 lmao this is my surprised face😐

[Battle Programmer Yuu @netspooky]

4 son, or php daughter?

[sshell @sshell_]

it's very easy for people to create piles of plausible-looking slop and call it a PoC

someone out there has figured out the PHP RCE (CVE-2026-109618 / CVE-2026-109619), but it might not be the person whose code you're retweeting sight unseen

[Ian Carroll @iangcarroll]

For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!

[Ariel Herbert-Voss @adversariel]

I spoke to @josephmenn this week about AI worms and wanted to add more color to my thoughts. What makes an AI worm different is that a model is capable of learning on the fly. This type of threat isn't here yet, but this is an example of an increasing shift that defenders are feeling.

We keep hearing the same theme from @runsybil customers: finding vulns is only the start. Teams need to patch and understand their attack surface in real time. Our job is to find and fix what's exploitable faster than attackers. Onward 🚀

Full article here: https://t.co/sAK0ISKkLS

[sshell @sshell_]

@d0nutptr gl fam

[sshell @sshell_]

@threepointone it’s all i’ve been thinking about for 12 hours now. it’s so incredibly singular. it feels like the words to describe it haven’t been created yet.

[max @maxbittker]

Runescape Bench talk now up on youtube!
Covers results from the benchmark, design of the harness, and economic swarm experiments I've been doing.
https://t.co/gkgXdAI3eZ
Thanks @recursecenter

[Eric Gu @ericyuegu]

1/ I trained an AI to be top 1% in the world at Super Smash Bros. Melee by watching 80k hours of human replay.

Meet HAL.

[Battle Programmer Yuu @netspooky]

This keeps happening and will continue to get worse. A couple months ago I found an insane vuln in a vibecoded IoT web frontend and took over their entire cloud env, device fleet, and could spy on the vendor in their own office. They never once noticed keys in their source code.

[sshell @sshell_]

@willdepue absolute masterpiece, no notes

[will depue @willdepue]

i didnt get it until i read the github description. oh my god ultrabanger. must read
(cheng. never. misses.)

[shane @shanejcaldwell]

🫡 i am dreadnode researchers and so can you, go to https://t.co/k7er26Ive6 today