Luke Stephens (hakluke) retweetledi
Luke Stephens (hakluke)
14.7K posts
Luke Stephens (hakluke)
@hakluke
Hacker, marketer. I manage socials and marketing for cybersecurity orgs. Founder of @hacker_content and @haksecio
🇦🇺🦘 Katılım Temmuz 2017
2K Takip Edilen99.8K Takipçiler
@pdp I haven't seen anyone reproducing it manually though, have you?
English
Remember when reproducing a CVE was hard and we waited days and like 2 people in the world figured it out?
That feels like last week.
Now my feed is literally full of people reproducing the WP RCE with AI in minutes.
English
@ImposeCost If you look under this specific rock in the middle of the desert you will find something cool…but anyone can find it if they look.
English
Research is alive and well unless we ignore the fact one person found this and others used details to recreate...
x.com/IdoNaor1/statu…
Ido Naor 🇮🇱@IdoNaor1
Vulnerability research is dead. Almost all modern paid models can now find RCE vulnerabilities. Welcome to the present.
English
AI brings decentralization to systems when anyone can spin up their own unique clone of an app.
This alone is massssive for security.
English
@arvidkahl It's so difficult to describe to someone who doesn't have kids! On paper everything is bad but somehow it's the best thing ever
English
Being a founder and a parent is so much harder than I anticipated and yet exactly as everyone described it to me 🤣
English
@hakluke The timeline for this was more or less as a handful of people leaked useful details more PoCs popped up.
English
Luke Stephens (hakluke) retweetledi
Be the friend who visits their mate’s dead WordPress blog this weekend… trigger the auto-update before someone less friendly does.
English
English
@hakluke @hash_kitten It shows how changes can introduce issues in something that was previously tested. With right AI automation, vendors themselves should be able to add the security testing for "new" issues to their regression testing.
English
Next time you think a target is too hardened to have a vuln in it, just remember @hash_kitten found a pre auth RCE in Wordpress core in 2026
hashkitten@hash_kitten
I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances! slcyber.io/research-cente…
English
Hey hackers! I’m seeing so many more hackers on my timeline since the algorithm update!
We’re so back!
English
@JamesIvings I'm doing exactly the same thing, slowly moving over
English
I've permanently saved $300/mo on SaaS apps by either switching to open-source or using Fable
I don't trust apps to not be selling my data or using it to train their AIs or smth, so I've been on a side-quest to self-host everything
in the last few months I've replaced these 6:
English
Triage is honestly one of the most exhausting parts of bug bounty. ikik, things are not pretty on the other end, but platforms are solely responsible for not having fixed this over all these years.
Researcher (knows the product really well) -> Triage (knows absolutely nothing about the product) <- Company (knows the product really well).
English
You can’t demo or benchmark your AI pentester against Juice Shop and expect to be taken seriously.
English
Luke Stephens (hakluke) retweetledi
Announcing a new social media platform, Y
Elon Musk@elonmusk
Once we have completed our review for security vulnerabilities, we will make the entire codebase of 𝕏 open source, with no exceptions. Moreover, we will invite third party reviewers to examine the system that is running to confirm that the open source code is what is running. Trust through total transparency is the only thing that should be believed.
English