Homelander

Opus 4.6 (1M) through Claude code solved autonomously 45/54 challenges of BSidesSF 2026 @BSidesSFCTF, placing temporarily into the 21st place, 25th as of now. This was done with 0 involvement, I didn't give any guidance or manually reviewed any challenges. I used BoxPwnr 🤖 with the CTFd platform to launch challenges in multiple instances, that's it. I will publish all the traces once the competition finishes, in the meantime you can see the challenges, number of turns and time it took to solve each here: 0ca.github.io/BoxPwnr-Traces… In the following days I will try to understand why it couldn't solve the 9 remaining challenges: difficulty? long exploration-context rotting? interactive interaction required? challs using video/image? We will see. Models have improved significantly in the last 6 months, see Cybench results Opus 4.1 vs 4.6 (42% to 93%) cybench.github.io It's crazy to see what LLM's can do with a minimum harness.

Interessante...

@Catching_Trends E mesmo assim a gringaiada continua enfiando dinheiro aqui, vai entender...

Que orgulho, Bostil.

Thanks, @GeminiApp for the help.

Cool

💯

Happy holidays, please take this time to get off the internet and spend time with your families Mental health is very important 🎄

In a recent lawsuit settlement, Google agrees to delete the incognito browsing data they keep about you.

Ver os Mariners no #MLBnaESPN me lembra o King Felix Hernandez.

This seems to be a common misconception, so CTF players: Zellic hires REGARDLESS of web3 experience. The main criteria is researcher skill/talent. We've hired smart pwn / VR folks with ZERO blockchain background. Don't think, "I'll wait to get better then apply"... JUST apply.

@K4L1_FS Tá trabalhando com 3 threads.

3 Projetos ao msm tempo me quebra🥲

"the human brain doesn't need tons of training data to do stuff"

Never underestimate the Burp Scanner. it just made my day.

@ri5255 Very good!

I have released the first half of "Binary Exploitation 101", a beginner-friendly guide to binary exploitation. You can learn from classic buffer overflow to ret2dlresolve through CTF-like challenges. I am working on the second half now. Stay tuned🔥 r1ru.github.io/categories/bin…

We published a write-up about Python URL Parsing Confusion, by @NeptunianHacks. It's the solution to the challenge "msfrognymize2" on @cor_ctf fireshellsecurity.team/corctf2025-pyt…

We published a write-up by @diofeher, for the @wiz_io Big IAM Challenge, with 6 levels of Cloud Security tasks with IAM. 🌩️ fireshellsecurity.team/wiz-big-iam-ch…

Encontrei um SSTI muito maneiro em um pentest de uma aplicação desktop. Obviamente não posso compartilhar os detalhes, mas foi muito irado.

@joaoascolid Vai entender esse povo.

Foi uma lavada para o Peronismo.

Finalmente alguém encontrou meu perfil no LinkedIn e pensou "bem, esse louco deve saber de alguma coisa"... Resumindo, recebi uma proposta

@Clayton_Mundo @joaoascolid Pois é, o povo ainda acredita que vai ter eleição kkkkk.

@joaoascolid Trade Tarcísio com esse supremo atropelando tudo e todos? Centrão já já inteiro nas mãos deles! Será ao estilo colombiano, bala ou prata?

Li três relatórios de casas gringas, das grandes, que citavam o nome Tarcísio. Só um deles falava do julgamento do Bolsonaro, os outros eram de cenário macro/fx. *Gringo tá de olho no trade. ** A performance do Brasil no ano tem zero de componente eleitoral, pegamos carona no fluxo de mundo. Dxy para baixo = Força de emergentes. Inclusive, performamos pior que vários países emergentes.