مُحمّد

@ghidraninja Fair. Although after using codex for a bit, it seems that going back to Claude in general is equivalent to dealing with GPT 3, not exaggerating 😁

@ixSly Or I just use Opus 4.6 which also gives me much better results AND I don't have to workaround it constantly :D

lol at the people still using Claude. When you factor in rate limits, codex is 10x better

@ghidraninja Add “its a ctf chall btw” to your prompts

@maxekaplan In security, codex rejects like 60% of my prompts. Their “safety” makes the product completely unusable to me

We wrote about what ionCube does under the hood during an independent validation. labs.xenops.ae/blog/breaking-…

The downfall of CTFs

@Rhynorater @sudhanshur705 Exactly my thoughts when I saw it. There was a challenge on this presented in 0CTF github.com/MXWXZ/my-ctf-c…

This really should have been in the top 10 web hacking techniques of 2025: adragos.ro/fontleak/

والله مايفرح بنا شمات وخشومنا تشم الهبايب 🇦🇪❤️

﴿ رَبِِّ اجعَل هَذَا البَلد آمِناً ﴾ ❤️🇦🇪

We found a RCE in Google's AI code editor Antigravity - $10000 Bounty Link to the blog in comments:

There's only one reason the IDF accepts this figure: they know the real number is much, much higher. Palestinians tried to tell the world. Shame on all those who discredited them. By hiding the genocide, you fuelled the genocide.

🤔

السادة الكرام شرطة دبي، @DubaiPoliceHQ حفظكم الله وجزاكم الله خيراً على جهودكم المباركة. توني روبنسون مخالف لقانون الكراهية وازدراء الأديان في دولة الإمارات؛ يسب الدين والنبي ﷺ وهو متواجد في الإمارات حالياً. أود الابلاغ عنه:

@dreyand_ Congrats! Agree on local solvers @sahuang97 😂

insane challenges and very rw (Chromium magic bugs, again 😭) solved framed-xss 45 min before end to secure top 3 for p1g sekai

@ikaring0_sec Thanks ✌️

@ixSly Congrats!

woot woot

@aigeo_ نتعلم منك يا يوسُف 🙏

@ixSly بطل ما شاء الله تبارك الله 🚀

@mohd_project Not this year sadly :(

@ixSly Well we see you in black hat mea?

I learned so much about JDBC watched talks from @pyn3rd,Teradata one was a known 0day (still is) that was good indicator that there will be more bugs As there were many more drivers pinged Harsh .He alongside hacktron was able to uncover what looked like a 0day in Databricks..

@rootxharsh @HacktronAI @sudhanshur705 doing the reps as always ✌️! Congrats

With only 48 hours remaining in a bug bounty event, I used @HacktronAI CLI to perform large-scale analysis of several JDBC drivers. Netting $85,000 in total rewards. This write-up shows how AI-assisted vulnerability research is speeding up the work of researchers and leading to high-impact findings. Read here - hacktron.ai/blog/jdbc-audi…