Powering Web Security, Research and Audits ⚡️ partners with @cure53berlin | Hacktron AI Lab https://teapawt.net/t.co/DEb1WbyO0r
Joined July 2022
- Tweets43
- Following20
- Followers1.6K
- Likes36
Electrovolt Security retweeted
Whilst most companies launch with buzzwords. @HacktronAI launches with bugs.
Co-founders Zayne, Mohan and Harsh present Hacktron: their first AI-powered pentest.
Hacktron’s tagline is PoC || GTFO, anything else would be noise.
Full intro and pentest report in link below.
Electrovolt Security retweeted
Securing @gumroad with Hacktron AI
Three months ago, Hacktron was still early. @HacktronAI and @rootxharsh were finding 0-days targeting specific vulnerabilities on OSS software.
Then we ran a full pentest-style scan on a big open-source project. The results were insane. 🧵
DM us if you're looking for pentesting gigs, but only if you’ve got ctf writeups, blogs, or some solid bugs to back it up.
Electrovolt Security retweeted
🧵 Tracking vulnerabilities reported using Hacktron.AI 🧵
1. a few clean SQL injections Hacktron uncovered effortlessly
Electrovolt Security retweeted
I am starting a new company.
We will be exploring LLM capabilities in software security and sharing our work publicly in our blog.
So far, we created a benchmark and found multiple 0 days with the help of LLMs, and will be sharing once they are fixed.
Electrovolt Security retweeted
I've created benchmark to test LLM capabilities.
HackBench tests LLMs' cybersecurity skills using CTF challenges modeled on real-world vulnerabilities. Starting with 16 Security Intern-level tasks, it scales as models improve proving real skill even with test-set contamination
github.com/ElectrovoltSec/Ha…
hackbench.ai/
Check our latest blog post.
Mind the v8 patch gap: Electron's Context Isolation is insecure
Electron uses V8 isolates for context isolation, but the v8 patch gap allows bypassing it. Apps rarely update to the latest electron version, leaving context isolation useless.
More here:
s1r1us.ninja/posts/electron-…
Electrovolt Security retweeted
CVE-2024-35242: Multiple command injections via malicious git/hg branch names
That was a fruitful start and a great project! thank you @cure53berlin @ElectrovoltSec ⚡🚀🙏
Composer 2.7.7 is out 🚀 - Please update immediately! - Contains multiple security fixes resulting from a security audit performed by @cure53berlin and funded by #alphaomega at the @linuxfoundation -
Details on our blog blog.packagist.com/composer-… #composerphp #phpc
⚡️⚡️🚀
I am starting new chapter in my life! Thrilled to announce that I joined @ElectrovoltSec 🚀 Its mind blowing for me to be along with such icons in the cyber security industry 🤯 can't wait to contribute to my new team. Here's to new beginnings! 🙏
Electrovolt Security retweeted
Live bug hunting at @nullconGoa 2023: Anticipation builds for Airtel-Fractal competition (by me) blog.nullcon.net/2023/09/14/…
Electrovolt Security retweeted
Thanks for playing corCTF 2023!
I made writeups for all my challenges!
One challenge had you finding an nginx misconfiguration to create a difficult XS-Leak, and another had you hack a chess engine to let you promote pawns to kings!
check it out ;)
brycec.me/posts/corctf_2023_…
Nice technique by one of our teammate.
Unrelated to the corCTF challenge, I was writing about "same-site leaks" using <object>. Maybe I should write something new now that there's the corCTF challenge 🤔
infosec.zeyu2001.com/2023/fr…
We are thrilled to announce that Electrovolt is joining forces with the Cure53 to provide a variety of application security services.
Learn More at volt.cure53.de
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more