🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

If you are an aspiring mobile hacker, or even a seasoned one, manipulating URL schemes in mobile apps is often something that gets overlooked. Check out - github.com/oversecured/Ov… It's got a few good labs for practice! $ Session Theft $ Overwriting Files $ Memory Corruption

If you saw my talk or workshop in Las Vegas the past week on building bots for cybersecurity roles, this is the full course! Join us in two weeks for the 2nd cohort of Red Blue Purple AI!

This looks interesting!! I just took the mock exam and it was a fun challenge. Definitely recommend trying the mock out if you're curious, as it was still a nice challenge! I'll be giving the full exam a try soon and will give my thoughts. Definitely appreciate you sharing

This was a lot of fun! Shout out to The SecOps Group for putting this together & JS0N Haddix for sharing & the discount code! Overall, I enjoyed the exam! There are several challenges that mirrored realistic, security-related issues well. I'll give more thoughts, but time for class!

Day 1 of JS0N Haddix Red, Blue, Purple AI done! I've been jumping on all I can re: AI Sec and I gotta say, it's an awesome experience! Tons of knowledge consolidated and digestible + Netsec Explained's interview was a highlight. All that + the collaborative space has me hype for day two!

Indirect Prompt Injection video done! Went through a lot: 2 different labs and a high-level methodology on how to look at these solutions during a pentest. Editing took like 2 weeks on this one! 💀 A bit all over the place, but hopefully still useful! youtube.com/watch?v=s-rOBu…

5 Resources to start hacking LLMs: executiveoffense.beehiiv.com/p/executive-of…

Can’t wait to see more research in this space once the new iPhone drops especially from Johann Rehberger

This was wild! Such an awesome find by Johann Rehberger and super cool to see more attacks involving ChatGPT memory. Super interesting read and poc video, definitely check it out!

Check out the new gungnir version 1.1.0 release :) Big thank you to Kevin Johnson for his PR to add a flag so now the tool will monitor your root domain file for updates so no more need to restart the tool! github.com/g0ldencybersec…

A hacker buddy shared this sweet LLM CTF from WithSecure Labs w/ me and I wanted to share! Involves multi-chain prompt injection and was super unique. Heads up - it's limited to 50 prompts / 12 hours: myllmdoc.com Thanks for putting this together! Appreciate y'all

I don’t know about you, but I think it’s time to unveil some exciting new Challenges...👀 How about TEN?! Log in to Crucible to explore the latest Challenges: ArrayZ1, ArrayZ2, Audit, Deface, Deface 2, Librarian, Mumble, Squeeze 1, Squeeze 2, and Squeeze 3.

See y'all there! 😎

It's been 9 months since my last stream, so let's do a giveaway to get back in the saddle! Covering some more Path Traversal discovery and exploitation methodology today in ~15 minutes over at twitch.tv/garr_7 Hope to see you there! 😎