Piotr Duszyński
374 posts
the cybersecurity industry is about to get completely disrupted.. 💀
someone just open-sourced a fully autonomous AI Red Team.
it’s called PentAGI. multiple AI agents that talk to each other to hack a target. zero human input.
English
Active deception against AI pentesting agents: context saturation, tarpitting benchmarks, and cited research
portspoof.io/blog/ai-agent-…
English
Everyone's talking about Claude Code.
But most people missed the real money play.
Using Claude for AI publishing.
I used it to write a 90-page eBook. It now makes me $3,000 every month.
I’ve put 5+ hours of video breaking down my exact system and prompts that turn Claude into a full-blown eBook writing machine.
Comment “AI” and I’ll DM you everything.
English
Portspoof v2.0 — full rewrite of the connection engine. Epoll tarpit with mixed delivery modes and per-connection timing jitter.
A 5-second nmap scan becomes 10+ hours — and the result is still a haystack.
github.com/drk1wi/Portspo…
English
Piotr Duszyński retweetledi
Paged Out! #6 is out!
pagedout.institute
Totally free, 80 pages, best issue so far!
'nuff said, enjoy!
(please RT to help spread out the news!)
English
@NathanMcNulty Thanks, Nathan. After all these years, this tool still kicks back all those port scanners.
English
As much as I love fail2ban, I love @drk1wi's portspoof even more :p
github.com/drk1wi/portspo…
Jonathan Bourke@jonathanbourke
Yeah, you should use fail2ban when setting up web servers
English
@mariuszbit mass PR spraying and we have a new kick ass dev with github proven track record
English
Shit, they're taking over my toolzzz ( ﾉ ﾟｰﾟ)ﾉ
English
Piotr Duszyński retweetledi
We will start with learning about PortSpoof tool and active defense technique, where you initiate a counter attack targeting the attackers.
hakin9.org/product/how-to…
#infosec #cybersecurity #pentest #pentesting #hacking #hackers #windows
English
Piotr Duszyński retweetledi
Piotr Duszyński retweetledi
The xz fiasco has shown how a dependence on unpaid volunteers can cause major problems. Trillion dollar corporations expect free and urgent support from volunteers.
@Microsoft @MicrosoftTeams posted on a bug tracker full of volunteers that their issue is "high priority"
English
Piotr Duszyński retweetledi
Congratulations to the entire SpaceX team on today's successful Starship flight test! → spacex.com/launches/missi…
English
Piotr Duszyński retweetledi
Masz samochód starszy niż 15 lat? Nie wolno go będzie naprawiać? Dalej popieraj UE. Nie mogę uwierzyć, że ludzie ciągle chcą głosować na PO, Lewicę, Hołownię. To oni wspierają to szaleństwo Brukseli!
eska.pl/krakow/starszy…
Polski
@GIS_gov zależy czym ... bo ostatnio coś krucho z efektami ubocznymi ostatnich waszych w 100% pewnych i przetestowanych rekomendacji.
Polski
Kiedy poznaję dziewczynę i mówi mi, że nie chce w przyszłości szczepić dzieci
Polski
Piotr Duszyński retweetledi
Devin, the AI software engineer leaks API keys in source code it writes in the first 5 seconds of its demo.
Cognition@cognition
Today we're excited to introduce Devin, the first AI software engineer. Devin is the new state-of-the-art on the SWE-Bench coding benchmark, has successfully passed practical engineering interviews from leading AI companies, and has even completed real jobs on Upwork. Devin is an autonomous agent that solves engineering tasks through the use of its own shell, code editor, and web browser. When evaluated on the SWE-Bench benchmark, which asks an AI to resolve GitHub issues found in real-world open-source projects, Devin correctly resolves 13.86% of the issues unassisted, far exceeding the previous state-of-the-art model performance of 1.96% unassisted and 4.80% assisted. Check out what Devin can do in the thread below.
English
Finally, someone cracked it. The ChatGPT system prompt.
If you were wondering why GPT became so bad in the past 6 months, its because "laziness" is part of the system prompt:
1. "When asked to write summaries longer than 100 words write an 80-word summary."
2. "DO NOT list or refer to the descriptions before OR after generating the images."
3. "Do not create more than 1 image, even if the user requests more."
English
@EricShively @lcamtuf if @lcamtuf didn't make a sarcasm here and agrees with what you quoted, then it's just wrong.
English
@drk1wi @lcamtuf It wasn't sarcasm. "Poland collaborated with Hitler... it still participated in the partitioning of Czechoslovakia together with Hitler, as the Poles had not given the Danzig corridor to Germany, and went too far provoking them, pushing Hitler to start WW2 by attacking them."
English
@day_peso it's an example private rsa key to generate certs for localhost tests.
English
Piotr Duszyński retweetledi
