Mehmet INCE

The Story of a Perfect Exploit Chain: 6 bugs that looked harmless until they became pre-auth RCE in a security appliance. 🎄✨ This write-up is a real-life hacker’s POV story. It is not a list of bugs. It is the human thought process of how an exploit chain forms. You start with one question. What does this appliance actually do with my request? From there, small wins stack into momentum until 6 bugs collapse into one pre-auth RCE. My holiday basically disappeared into this write-up… and I’m so glad it did. Happy New Year, everyone!

🐘🐘

🔥🔥🔥🔥 LEGEND.

I love finding the best bugs on sundays.

@rootxharsh @hash_kitten @assetnote same here! I reckon that Drupal core sqli lighted up some brilliant ideas on other CMS cores

very interested in reading the research/disovery process for this finding by @hash_kitten / @assetnote team.

@hash_kitten Legend🔥

I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances! slcyber.io/research-cente…

I love hectic but also very productive days like today when I finally put my head to pillow and go ‘yeah that exploit was a good one heheh’

what ?! 🔥🔥🔥 WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS CORE

2 months ago. I still stand with what I said. "...Until then, go and find the engineers building and protecting these platforms and give them a huge hug."

Does anyone remember a FrontPage 95? Thanks to the FTP deployment wizard of the FrontPage, my first website got hacked in 2000. That's how I got into the cyber-security. As far as I remember, it somehow uploads the FTP creds at /_vti_pvt/administrators.pwd for no reason🙃🙃🙃

@mavi 4/end. Ve topluluğa geri ödemenin aynı kelebek etkisini devam ettirmenin zamanı abi. diyerek tek başına @LatentShiftAI şahsi olarak PLATINUM sponsoru oldu. Bu sene LSAI eventinin mekan sponsoru Haydar Polat'tır dostlar.

3/n 6 sene sonra bu t-shirtün fotoğrafı geldi bana... Fotoğrafı atan kişi Haydar Polat. Diyor ki kendisi, bu t-shirt gelince hediye olarak oturdum siber güvenlik çalışmaya başladım gaza geldim abi. Yıllar geçti.. Tüm ailemin hayatını kurtaracak kadar ödül avcılığından para kazandım. Evlendim. Hayat kurdum. Saklıyorum t-shirtü abi..

bu hikayeyi dinlemenizi isterim 🥹 6 sene sonra.. @mavi 'nin siyah t-shirtlerinden 1 tanesi karşıma çıktı. hem de öyle bir hikayeyle çıktı ki. youtube.com/watch?v=ejZTRg…

@kaganisildak Gel yayina oynayalim ?

🔥

We're talking about AI more than ever before. New models, benchmarks, agents, demos, product launches...💤 But the real work rarely happens on stage. AI systems running in production are shaped by evaluations, data quality, observability, security, latency, cost, and hundreds of small engineering decisions. That's why we're building LatentShift.✨ We want to create a technical gathering where engineers and teams building AI products can share what they've learned, the challenges they've faced, and the decisions they've made along the way. Less hype. More engineering. 📍 Istanbul 📅 October 17, 2026 👀latentshift.ai

topology.

I’m hiring for the ChatGPT infrastructure team at @OpenAI in London We work on the systems behind ChatGPT, from reliability and production infrastructure to making a very large number of GPUs behave Looking for: • Engineers who enjoy distributed systems and deep debugging • People who care a lot about reliability and performance • Ambitious builders who move quickly and like owning hard problems Links below.