s1r1us (mohan)'s banner

s1r1us (mohan)

@S1r1u5_ • 13,878 subscribers

founder @ElectrovoltSec, @HacktronAI

Shorts

FFFF the axios thing is bad, almost all node.js project use it, we use it. didn't want to install some tool with a bunch of deps just to check if our gcloud/docker images are affected, trivy literally got supply chained two weeks ago lmao built me a small tool. stdlib only, just shells out to docker/gcloud cli. if those are compromised we're all cooked anyway. CHECK YOUR IMAGES.

FFFF the axios thing is bad, almost all node.js project use it, we use it. didn't want to install some tool with a bunch of deps just to check if our gcloud/docker images are affected, trivy literally got supply chained two weeks ago lmao built me a small tool. stdlib only, just shells out to docker/gcloud cli. if those are compromised we're all cooked anyway. CHECK YOUR IMAGES.

15,102 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

I've been testing GPT-5.6 Sol Ultra from last three days, and it is a quiet a big step up from all previous models. I gave it the recent Chrome, and watched it hill climb a renderer exploit to pop calc with limited nudges. i think exploit dev is cooked🧵

I've been testing GPT-5.6 Sol Ultra from last three days, and it is a quiet a big step up from all previous models. I gave it the recent Chrome, and watched it hill climb a renderer exploit to pop calc with limited nudges. i think exploit dev is cooked🧵

42,423 views • 10 days ago

A case study of AI-accelerated hacking: How we at Hacktron AI hacked our way into Lovable's office, cut attack time from weeks to days, and helped secure Supabase from one of the most complex vulnerability chains we’ve ever worked through.

A case study of AI-accelerated hacking: How we at Hacktron AI hacked our way into Lovable's office, cut attack time from weeks to days, and helped secure Supabase from one of the most complex vulnerability chains we’ve ever worked through.

74,851 views • 8 months ago

We helped secure Perplexity's comet browser from a critical vulnerability that could let attackers hijack the agent to exfiltrate local files, read emails, and bypass SOP. Read the full blog:

We helped secure Perplexity's comet browser from a critical vulnerability that could let attackers hijack the agent to exfiltrate local files, read emails, and bypass SOP. Read the full blog:

22,396 views • 8 months ago

No more content to load