
padi retweeted
I wrote an article about browser's sandbox bugs
davi-1337.github.io/posts/ca…
PHP allows bitwise XOR operation of strings so we can "create" words like system, id, curl...
really useful for bypassing some challs that might be blocking strings
Passando pra avisar que a @tramoia_sh ta aceitando artigos até o dia 13/11 !!!
Eu e o @dk4trin vamos enviar o nosso! envie o seu também! 😼
Just solved : Web - Serveur/NodeJS - vm escape challenge on Root-Me :þ
root-me.org/?page=validation…
@rootme_org
#hacking #challenge #WebServeur
4
441
padi retweeted
oi pessoal!
nós da @tramoia_sh estamos precisando de artistas brasileiros que trampem com ASCII, pra nossa terceira edicao
conhece alguém? marca aqui pls ♥️
rt pra fortalecer a comunidade
padi retweeted
PRECISAMOS DE ASCII ARTISTAS BRASILEIROS
quer ajudar a criar a arte da próxima edição?
manda mensagem pra gente, email, dm, qualquer coisa!
PRECISAMOS DE ASCII ARTISTAS BRASILEIROS
nice chall! ty @Rhynorater
🎙️ Got a Bug Bounty story worth telling?
Our new Dojo challenge, CTBB Story, is LIVE! 🔥
Created with @Rhynorater and @ctbbpodcast, it’s your chance to trick a producer bot into committing more than just your story. 👀
👉 dojo-yeswehack.com/challenge…
11
566
"Turing’s proof that halts is actually impossible to implement: any implementation you write will have a bug!"
232
padi retweeted
Two thoughts on this:
1. Very cool. As someone who's primary interest is the offensive side of cyber, I love it. *chefs kiss* and congrats to the team.
2. You cannot bug hunt your way to 'secure'. AI doesn't change that. If your strategy for the next few years is to boil the oceans continuously scanning your same codebase, with the same broken architecture, with the same broken threat models, you are going to have a bad time. a) you're going to spend a fortune and b) you're going to keep getting hacked.
Introducing GPT‑6 Cyber: a major advance in security research that pairs stronger capabilities with better model alignment.
The model powered the Linux kernel research we announced yesterday, and security teams at companies like Mozilla, Palo Alto Networks, Calif, and Cisco—alongside our own at OpenAI—are already putting it to work.
GPT-6 Cyber is available to select Daybreak Red customers and we are expanding access over time.
openai.com/index/introducing…

















