Ciarán Cotter

1.4K posts

Ciarán Cotter banner
Ciarán Cotter

Ciarán Cotter

@monkehack

• Irish/Japanese web/AI hacker from Cork, living in Scotland • Researcher @ctbbpodcast • BT6 • Newsletter weekly at https://t.co/KA5b2kY8ih

Edinburgh, Scotland انضم Mart 2021
603 يتبع5.1K المتابعون
تغريدة مثبتة
Ciarán Cotter
Ciarán Cotter@monkehack·
Excited to launch this with @busf4ctor. We'll be posting some of our research over the next few weeks 😁 so make sure to follow. Really looking forward to seeing where this goes!
Starstrike AI@StarstrikeAI

Today, we (@busf4ctor and @monkehack), are launching Starstrike: an AI pentesting and research startup. We'll be releasing our first few research articles over the next few weeks, detailing several bugs that helped us net over $100k in total. Follow to ensure you don't miss them!

English
3
2
70
4.5K
Random Robbie
Random Robbie@Random_Robbie·
Any hardware hackers hacked the Facebook portal yet? Seeing it's EOL
English
5
0
1
463
Ciarán Cotter
Ciarán Cotter@monkehack·
HackerOne and Bugcrowd are pentest shops these days, and bug bounty is increasingly becoming a smaller focus for them. Ultimately, though, they both still rely on the community of hackers to give their offerings any value - it’ll be interesting to see where this is all going.
English
3
1
89
4.8K
Ciarán Cotter
Ciarán Cotter@monkehack·
@wld_basha I see it more like, bug bounty catches what pentests miss. This just evolves into, catching what AI pentests and hackbots miss instead. When token costs go up, the pentests will be less thorough by necessity
English
0
0
2
401
ناضي كناظي
ناضي كناظي@wld_basha·
@monkehack Bug bounty itself is just a pentest with artisanal effect😂, how I see it is, bug bounty will become like ecomm, once you get right product (a bug ai cant find) uou farm it as much as possible, and competition will be very high
English
1
0
1
554
Ciarán Cotter
Ciarán Cotter@monkehack·
Super proud of seeing many of my bug bounty friends and acquaintances launch successful startups lately. It’s super motivating, and I’m rooting for you guys 🫵
English
0
1
48
1.3K
Ciarán Cotter أُعيد تغريده
Lupin
Lupin@0xLupin·
WE DID IT ! WE RAISED $5.9M PRE-SEED 🥳🎉🎉
English
77
41
406
33K
Ciarán Cotter
Ciarán Cotter@monkehack·
@ThisIsDK999 The hackbots that are possible with local models is the floor of the industry, so I wouldn't say it's killed. But local models are improving all the time, so who knows where we'll end up.
English
1
0
0
421
Debangshu 🇮🇳🥷
Debangshu 🇮🇳🥷@ThisIsDK999·
TL these days. No research, No new bug types, Only claude, LLM assisted vulnerability research Point and shoot omg claude just killed a 50Bn$ industry
English
4
1
52
3.2K
Ciarán Cotter
Ciarán Cotter@monkehack·
@ThisIsDK999 Probably. Mostly I expect the average cost of a pentest to drop sharply. It's hard to judge pricing when the top stuff is "artisan" security research.
English
0
0
2
338
Ciarán Cotter
Ciarán Cotter@monkehack·
Hacking, as a craft, is going to undergo a split. There'll be the experts, who've mastered their craft and will provide extremely high-quality hacking and research. Everyone else is in a race to the bottom. Software development and hacking are becoming mass-produceable.
English
3
2
52
3.3K
Ciarán Cotter
Ciarán Cotter@monkehack·
You wake up in 2030. @rez0__ has turned himself into an LLM. You just earned $3,000 providing new context for the AI fleet. Your AIs are genius hackers. HackerOne and Bugcrowd have both been acquired by Cisco and turned into a unified "Cisco Managed Bug Bounty Platform". Cisco sends you a hoodie over the mail.
Pomme@pxmme1337

You wake up in 2016. You just earned a $3,000 bounty. Your friends all think you’re a genius hacker. Your online bug bounty mate tells you « this shit is forever, bro » HackerOne sends you a hoodie over the mail

English
4
0
64
7.7K
Ciarán Cotter أُعيد تغريده
N0xi0us
N0xi0us@_N0xi0us_·
Today I discovered that scammers are poisoning Google AI Overviews to display malicious data. While searching for an airline support phone number, the AI-generated result surfaced a scam number operated by fraudsters. Don't be lazy and double check the results 🫡
N0xi0us tweet media
English
6
23
136
20.9K
Ciarán Cotter
Ciarán Cotter@monkehack·
@njcve_ Considering how many stupid ideas I have per day, some of them were gonna work eventually lmao
English
0
0
2
140
Ciarán Cotter
Ciarán Cotter@monkehack·
@AmirMSafari Not at the moment, I haven't done any due diligence that I'd need to do to release it and I don't really intend on developing it any further
English
0
0
2
274
Ciarán Cotter
Ciarán Cotter@monkehack·
I made a Chrome extension that lists all dev comments (in the HTML+JS) on websites and the results have been entertaining
Ciarán Cotter tweet media
English
4
2
114
4.5K