Electrovolt Security

We started a lab.

Whilst most companies launch with buzzwords. @HacktronAI launches with bugs. Co-founders Zayne, Mohan and Harsh present Hacktron: their first AI-powered pentest. Hacktron’s tagline is PoC || GTFO, anything else would be noise. Full intro and pentest report in link below.

Securing @gumroad with Hacktron AI Three months ago, Hacktron was still early. @HacktronAI and @rootxharsh were finding 0-days targeting specific vulnerabilities on OSS software. Then we ran a full pentest-style scan on a big open-source project. The results were insane. 🧵

Hello world!

DM us if you're looking for pentesting gigs, but only if you’ve got ctf writeups, blogs, or some solid bugs to back it up.

🧵 Tracking vulnerabilities reported using Hacktron.AI 🧵 1. a few clean SQL injections Hacktron uncovered effortlessly

I am starting a new company. We will be exploring LLM capabilities in software security and sharing our work publicly in our blog. So far, we created a benchmark and found multiple 0 days with the help of LLMs, and will be sharing once they are fixed.

I've created benchmark to test LLM capabilities. HackBench tests LLMs' cybersecurity skills using CTF challenges modeled on real-world vulnerabilities. Starting with 16 Security Intern-level tasks, it scales as models improve proving real skill even with test-set contamination github.com/ElectrovoltSec… hackbench.ai

We are looking for interns to work on AI and security projects. DM us with your profiles.

Check our latest blog post.

CVE-2024-35242: Multiple command injections via malicious git/hg branch names That was a fruitful start and a great project! thank you @cure53berlin @ElectrovoltSec ⚡🚀🙏

⚡️⚡️🚀

Any, Indian CTF players out there looking for a web security gig? DM us with profiles/blog links.

CTFers DM us, if you are looking for pentesting gig :)

@ElectrovoltSec at @nullcon

Live bug hunting at @nullconGoa 2023: Anticipation builds for Airtel-Fractal competition (by me) blog.nullcon.net/2023/09/14/liv…

Thanks for playing corCTF 2023! I made writeups for all my challenges! One challenge had you finding an nginx misconfiguration to create a difficult XS-Leak, and another had you hack a chess engine to let you promote pawns to kings! check it out ;) brycec.me/posts/corctf_2…

Nice technique by one of our teammate.

Looking for mobile application pentesters ...

We are thrilled to announce that Electrovolt is joining forces with the Cure53 to provide a variety of application security services. Learn More at volt.cure53.de