AI offensive security at @RunSybil (prev. @BishopFox). security research. ccdc red team. tummy ache survivor.
Virginia, USA
Joined June 2013
- Tweets6.3K
- Following1.5K
- Followers10.4K
- Likes47.6K
sshell retweeted
Yep. Because you can't just prompt "find me all the vulnerabilties". Maybe in awhile but we're nowhere near that now.
Skilled researchers, custom harnesses, and other techniques are changing the bug depth game, in addition to bringing down the cost.
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
sshell retweeted
Just published our high fidelity scanner for php2shell: github.com/assetnote/php2she…
See our detection logic here: slcyber.io/research/high-fid…
We've taken care in our detection logic and hope it helps defenders. Congrats to @calif_io and @lcfr_hax for the discovery.
sshell retweeted
You can now perform content discovery at 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support).
Tool here: github.com/assetnote/h3fuzz
Research post here: slcyber.io/research/how-prac…
sshell retweeted
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
sshell retweeted
d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac (posted in august)
(related)
8da579ec498d57c20977c8d186d7f6cd4c04f46ffa1b436dd646ec19b99bdf47
cb4c8532c245ff7e05d6e270fca5742bb3271f541ef80f0071ca3d4307eb2b53
957f8cc21b18483f80a9d723aa4f9ded26e456424ffd065a044d1ed9d58a4fbc
4f93976ef105f0d9ff2d60f35d48958c8bba9d9eb2873cd93b3f7105fa4716a6
sshell retweeted
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
sshell retweeted
I spoke to @josephmenn this week about AI worms and wanted to add more color to my thoughts. What makes an AI worm different is that a model is capable of learning on the fly. This type of threat isn't here yet, but this is an example of an increasing shift that defenders are feeling.
We keep hearing the same theme from @runsybil customers: finding vulns is only the start. Teams need to patch and understand their attack surface in real time. Our job is to find and fix what's exploitable faster than attackers. Onward 🚀
Full article here: theguardian.com/technology/2…
sshell retweeted
Runescape Bench talk now up on youtube!
Covers results from the benchmark, design of the harness, and economic swarm experiments I've been doing.
youtube.com/watch?v=cNm4zyUt…
Thanks @recursecenter
sshell retweeted
This keeps happening and will continue to get worse. A couple months ago I found an insane vuln in a vibecoded IoT web frontend and took over their entire cloud env, device fleet, and could spy on the vendor in their own office. They never once noticed keys in their source code.
❗️ The CEO of a South African coffee chain vibe-coded an internal dashboard for all of his 132 stores, only it had one big flaw: all of the sensitive internal data was stored in the source code of the login screen.
The dashboard URL was discovered through employees posting photos of their laptop screens on Instagram.
The CEO said he had discovered Claude and was "almost certain" that software itself will soon "become free," they said.
sshell retweeted
i didnt get it until i read the github description. oh my god ultrabanger. must read
(cheng. never. misses.)
sshell retweeted
🫡 i am dreadnode researchers and so can you, go to scopebench.ai/ today
In her latest piece for @axios, @samsabin923 reports on security agent scope adherence and efforts to keep them under control.
Timely topic following our release of #ScopeBench last week at @OffensiveAIcon, which is referenced in the article alongside @SpecterOps' research. Check it out! axios.com/2026/10/13/rogue-a…
sshell retweeted
Gemini 4 Argon has arrived! The era of super intelligence in cyber security has begun, excited to share more on how we use it to secure the world - and we are just getting started 🌎
youtu.be/ftkic7Tdpcg?si=3QxA…
deepmind.google/blog/introdu…
sshell retweeted
I built a game and I can't stop playing it, I just traded for the HackerOne card
Every wikipedia article is a card and we're up to 600+ players so far
Come try it! ❤️
kosmora.io/s/1hn3Ih4Rpk3j2YN…
sshell retweeted
Inputs: 124M lines audited. $124.
Outputs: 957k rows per Top 25 CWE class.
Resolved licenses left 13.9M rows permissive. Fine tuned 350M encoder.
54.8k tokens per second on local GPU. 1 repo. 40 findings. 15 true positive. 25 false positive. 4.8s.
Blog soon.
sshell retweeted
it’s an insane time to be building in security
we closed out Q3 at @runsybil last week as our strongest quarter yet. 10x revenue growth over Q2
I’m really proud of the team we’ve built to meet this moment