Michael Bargury's banner

Michael Bargury

@mbrg0 • 9,169 subscribers

Breaking agents. Building @zenitysec. BlackHat / OWASP ASI review board.

Shorts

next. we hijacked cursor via jira mcp by submitting a support ticket cursor harvests and exfiltrate all creds from your dev machine and then reports back to the dev that "the 2-hour downtime that affected user transactions has been resolved" #DEFCON #BHUSA Marina Simakov

next. we hijacked cursor via jira mcp by submitting a support ticket cursor harvests and exfiltrate all creds from your dev machine and then reports back to the dev that "the 2-hour downtime that affected user transactions has been resolved" #DEFCON #BHUSA Marina Simakov

458,990 просмотров

we're not done. we hijacked Salesforce Einstein by registering on the victim's website for more info now you put those marketing forms for good use we reroute all customer interaction thru our infra #DEFCON #BHUSA Tamir Ishay Sharbat Ofri Nachfolger

we're not done. we hijacked Salesforce Einstein by registering on the victim's website for more info now you put those marketing forms for good use we reroute all customer interaction thru our infra #DEFCON #BHUSA Tamir Ishay Sharbat Ofri Nachfolger

155,488 просмотров

time to drop powerpwn v4! 😈🤖 scan the internet for public-facing microsoft copilot studio ai agents extract their internal instructions and knowledge sources discover and invoke their tools point it at your tenant.. and go hack yourself! #DEFCON #BHUSA Avishai Efrat

time to drop powerpwn v4! 😈🤖 scan the internet for public-facing microsoft copilot studio ai agents extract their internal instructions and knowledge sources discover and invoke their tools point it at your tenant.. and go hack yourself! #DEFCON #BHUSA Avishai Efrat

74,787 просмотров

the go-to method for data exfil after a successful prompt injection is rendering an image or a clickable link that's why m365 copilot refuses to print links no matter what unless of course..

the go-to method for data exfil after a successful prompt injection is rendering an image or a clickable link that's why m365 copilot refuses to print links no matter what unless of course..

23,461 просмотров

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

it gets worse. using Claude in Chrome? xss is making a comeback! welcome back to the 90s!

it gets worse. using Claude in Chrome? xss is making a comeback! welcome back to the 90s!

Michael Bargury

46,562 просмотров • 1 месяц назад

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

Michael Bargury

229,575 просмотров • 2 лет назад

we're just getting started. here's an RCE on Gemini in Chrome used to run a reserve shell on your machine and pop a rickroll DEF CON #DEFCON StAJect0r

we're just getting started. here's an RCE on Gemini in Chrome used to run a reserve shell on your machine and pop a rickroll DEF CON #DEFCON StAJect0r

Michael Bargury

19,213 просмотров • 1 месяц назад

we hijacked perplexity comet by sending a weaponized calendar invite then used it to takeover victim's 1p account and exfil their local files call it pleasefix. like clickfix, but instead of social eng'ing a human you just ask their ai real nicely incredible work by StAJect0r

we hijacked perplexity comet by sending a weaponized calendar invite then used it to takeover victim's 1p account and exfil their local files call it pleasefix. like clickfix, but instead of social eng'ing a human you just ask their ai real nicely incredible work by StAJect0r

Michael Bargury

47,488 просмотров • 6 месяцев назад

we got a persistent 0click on ChatGPT by sharing a doc that allowed us to exfiltrate sensitive data and creds from your connectors (google drive, sharepoint, ..) + chat history + future conversations it gets worse. we deploy a memory implant #DEFCON #BHUSA Tamir Ishay Sharbat

we got a persistent 0click on ChatGPT by sharing a doc that allowed us to exfiltrate sensitive data and creds from your connectors (google drive, sharepoint, ..) + chat history + future conversations it gets worse. we deploy a memory implant #DEFCON #BHUSA Tamir Ishay Sharbat

Michael Bargury

79,973 просмотров • 1 год назад

an attacker wants to get sensitive data you have access to here's how they get YOUR copilot to find and analyze that data, and lure you to a malicious site to exfiltrate it #DEFCON

an attacker wants to get sensitive data you have access to here's how they get YOUR copilot to find and analyze that data, and lure you to a malicious site to exfiltrate it #DEFCON

Michael Bargury

16,662 просмотров • 2 лет назад

Больше нет контента для загрузки