trev0ck

ssh disconnect@reality | SRF

[trev0ck @trev0ck]

@nnwakelam Codex is the new meth

[shubs @infosec_au]

https://t.co/rLl6ZzmuvY

[TrendAI Zero Day Initiative @thezdi]

There it is! Orange Tsai (@orange_8361) of DEVCORE Research Team was able to exploit Microsoft Exchange! If confirmed, they win a whooping $200,000 and 20 Master of Pwn points. Off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin

[trev0ck @trev0ck]

@nnwakelam Claude is the new meth

[trev0ck @trev0ck]

@thedawgyg Found 5 IDORs on a public program, only reported 2 to test the waters, both marked as duplicates of a report that the endpoint was on a different domain and different code base. Shit like this encourages people to do the wrong thing.

[Alex Birsan @alxbrsn]

why am I like this

[trev0ck @trev0ck]

@Hacker0x01 Is this the comedy channel?

[Brandon Rossi @0xConda]

Been hacking for years and I still can’t sleep when I’ve got good bugs in the triage queue!

[trev0ck @trev0ck]

@alxbrsn A monkey with a faster typewriter, is not a smarter monkey

[STJ @thibautone]

@unusual_whales A monkey with a faster typewriter is not a smarter monkey

[BugBountyHQ @BugBountyHQ]

Thread - My own opinion & this is to the Bug Hunters, What @Hacker0x01 is doing re AI, is essentially stealing “our work” “our research” for their own profitability. They are for sure breaking client agreements, wherein a clients data / vulns belong to the client. Not H1!!

[trev0ck @trev0ck]

@mugh33ra Where is the xss or sql injection here?

[trev0ck @trev0ck]

@eh_pavan @Hacker0x01 Keep going bro, I missed a 25k IDOR by a few days. Hurts but don’t let it destroy you.

[trev0ck @trev0ck]

@nnwakelam Drinking coffee out of gravy boats

[trev0ck @trev0ck]

@thedawgyg @CrazyVibes_1 the average cost of a pack of 20 cigarettes in Australia exceeds A$40, with prices often reaching over A$50 (approximately US$31.50)

[trev0ck @trev0ck]

@theXSSrat Are they all informative or N/A?

[trev0ck @trev0ck]

@justt_N Spend another 30,000 hours hacking

[trev0ck @trev0ck]

@nnwakelam Being realistic never turns clicks of a computer mouse into Uber Eats orders and cigarettes

[trev0ck @trev0ck]

@samwcyo Interested

[Thomas Roccia 🤘 @fr0gger_]

Prompt Injection is one of the first attack vectors used to exploit weaknesses or bypass behavior in AI models.

Here is an illustrated thread with 5 different prompt injection techniques 👇