Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)

v_metnew's profile picture

vladimir metnew

3,849 subscribers

101,197 Aufrufe • vor 1 Monat •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.
12:01

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 Aufrufe • vor 11 Monaten

Running Claude Code Agents in Docker and it's working great 👏 Just executed this and watched Claude build a complete Express REST API inside an isolated container: npx claude-code-templates@latest --sandbox docker \ --agent development-team/backend-architect \ --prompt "Create a REST API with Express with validation and error handling" - Container spins up - installs Claude Agent SDK - downloads the agent - Claude starts coding Everything visible in Docker logs. Output: Full Express project with routes, validation, error handling. All files extracted to local after execution. Next tutorials: Adding Telemetry and Hooks to monitor what Claude does inside the container. Running these agents on ECS or Kubernetes would be interesting 🤔
0:44

Running Claude Code Agents in Docker and it's working great 👏 Just executed this and watched Claude build a complete Express REST API inside an isolated container: npx claude-code-templates@latest --sandbox docker \ --agent development-team/backend-architect \ --prompt "Create a REST API with Express with validation and error handling" - Container spins up - installs Claude Agent SDK - downloads the agent - Claude starts coding Everything visible in Docker logs. Output: Full Express project with routes, validation, error handling. All files extracted to local after execution. Next tutorials: Adding Telemetry and Hooks to monitor what Claude does inside the container. Running these agents on ECS or Kubernetes would be interesting 🤔

Daniel San

100,028 Aufrufe • vor 9 Monaten

Claude Code is now a full video editor! Our new plugin opens a full built-in NLE right inside the Claude desktop app, where you and your agent can edit together, effortlessly. If you're already paying for Claude, you get this one for FREE. It's available now. Start using it in 1 minute, by pasting this prompt into any Claude Code chat: "Read to install and use the ChatCut plugin"
0:44

Claude Code is now a full video editor! Our new plugin opens a full built-in NLE right inside the Claude desktop app, where you and your agent can edit together, effortlessly. If you're already paying for Claude, you get this one for FREE. It's available now. Start using it in 1 minute, by pasting this prompt into any Claude Code chat: "Read to install and use the ChatCut plugin"

ChatCut

226,918 Aufrufe • vor 22 Tagen

Boris Cherny has merged around 1,700 pull requests, added 400,000 lines of code, and deleted 250,000, all with Claude Code, this year. And used 8 billion tokens. “100% of my code has been written by Claude Code since Opus 4.5. That was around November of last year. ... Most of my coding now happens on my phone.” ---- From "Scale" YouTube channel, (full video link in comment)
1:04

Boris Cherny has merged around 1,700 pull requests, added 400,000 lines of code, and deleted 250,000, all with Claude Code, this year. And used 8 billion tokens. “100% of my code has been written by Claude Code since Opus 4.5. That was around November of last year. ... Most of my coding now happens on my phone.” ---- From "Scale" YouTube channel, (full video link in comment)

Rohan Paul

14,397 Aufrufe • vor 20 Tagen

Boris Cherny, the creator of Claude Code: "Most people use Claude Code as a chatbot. It was built to run an entire engineering team." In 30 minutes on stage, he explains how he now works by directing agents instead of writing code by hand. Watch full video, then save the exact setup below👇
29:37

Boris Cherny, the creator of Claude Code: "Most people use Claude Code as a chatbot. It was built to run an entire engineering team." In 30 minutes on stage, he explains how he now works by directing agents instead of writing code by hand. Watch full video, then save the exact setup below👇

darkzodchi

35,506 Aufrufe • vor 2 Monaten

Claude Code made this entire video. The voice, footage, script is all AI. Everything was made with a content system I built in Claude Code. In this video, I'll be taking you behind the curtain. This machine will be responsible for my entire content workflow this week. Full video is in the comments below.
0:49

Claude Code made this entire video. The voice, footage, script is all AI. Everything was made with a content system I built in Claude Code. In this video, I'll be taking you behind the curtain. This machine will be responsible for my entire content workflow this week. Full video is in the comments below.

Jacob Klug

18,471 Aufrufe • vor 1 Monat

last week I talked about claude code being my video editor, but it was only a small 30 second clip - here is my FULL workflow on how i have claude code edit ~30 minutes of raw video into a tight 10 minutes it uses STT for captions, then uses remotion to add the captions & cut!
7:28

last week I talked about claude code being my video editor, but it was only a small 30 second clip - here is my FULL workflow on how i have claude code edit ~30 minutes of raw video into a tight 10 minutes it uses STT for captions, then uses remotion to add the captions & cut!

BOOTOSHI 👑

14,107 Aufrufe • vor 6 Monaten

My friend applied to 200 tech jobs in two years. No MIT. No Stanford. Last month Anthropic offered him $750,000. I asked him how he broke in from zero. He sent me the exact video that got him in. A 4-hour course on mastering Claude Code. I watched it last night. Halfway through, I realized I've been using Claude Code completely wrong for a year. Bookmark this and read the article below. • 00:00 - Claude Code setup • 49:34 - building apps with Claude Code • 2:07:52 - prompting Claude Code • 2:46:16 - Claude Code for production
4:27:47

My friend applied to 200 tech jobs in two years. No MIT. No Stanford. Last month Anthropic offered him $750,000. I asked him how he broke in from zero. He sent me the exact video that got him in. A 4-hour course on mastering Claude Code. I watched it last night. Halfway through, I realized I've been using Claude Code completely wrong for a year. Bookmark this and read the article below. • 00:00 - Claude Code setup • 49:34 - building apps with Claude Code • 2:07:52 - prompting Claude Code • 2:46:16 - Claude Code for production

Roan

37,935 Aufrufe • vor 1 Monat

CLAUDE CODE but for full-kill-chain HACKING its called Decepticon, 5 AI agents named after transformers you give it a target ip and it just... port scans, finds vulns, pops shell, drops a sliver C2 implant, harvests creds, moves lateral, all inside a KALI sandbox no human in the loop, open source
0:44

CLAUDE CODE but for full-kill-chain HACKING its called Decepticon, 5 AI agents named after transformers you give it a target ip and it just... port scans, finds vulns, pops shell, drops a sliver C2 implant, harvests creds, moves lateral, all inside a KALI sandbox no human in the loop, open source

chiefofautism

134,833 Aufrufe • vor 4 Monaten

Boris Cherny (Claude Code's creator): I deleted my IDE in November and hasn't opened it since. I writes more code than ever. his actual words on stage: I don't prompt Claude anymore. I have loops that are running. They're the ones prompting Claude. My job is to write loops. the progression he described: → a year ago: writing code by hand with autocomplete → then: running 5-10 Claudes in parallel, prompting each one → now: he doesn't prompt at all - he writes the loops that prompt Claude what it's already done inside Anthropic: • ~3x more code shipped per engineer (he says that number is already outdated and higher) • Cowork - a full product - built in ~8 days, 100% with Claude Code • designers, the finance guy, even the chief of staff now ship code his advice to founders: give everyone as many tokens as possible, and underfund every project on purpose - 2 engineers + a pile of tokens instead of 4. the roles are melting into one "builder." Watch this, than read the article below
28:49

Boris Cherny (Claude Code's creator): I deleted my IDE in November and hasn't opened it since. I writes more code than ever. his actual words on stage: I don't prompt Claude anymore. I have loops that are running. They're the ones prompting Claude. My job is to write loops. the progression he described: → a year ago: writing code by hand with autocomplete → then: running 5-10 Claudes in parallel, prompting each one → now: he doesn't prompt at all - he writes the loops that prompt Claude what it's already done inside Anthropic: • ~3x more code shipped per engineer (he says that number is already outdated and higher) • Cowork - a full product - built in ~8 days, 100% with Claude Code • designers, the finance guy, even the chief of staff now ship code his advice to founders: give everyone as many tokens as possible, and underfund every project on purpose - 2 engineers + a pile of tokens instead of 4. the roles are melting into one "builder." Watch this, than read the article below

Morty

136,663 Aufrufe • vor 2 Monaten

Spec-driven development Kiro introduced this term, But I've been doing that in Claude Code for weeks Here is how I bake spec development & plan into my process I have the full prompt in AI Builder Club
5:34

Spec-driven development Kiro introduced this term, But I've been doing that in Claude Code for weeks Here is how I bake spec development & plan into my process I have the full prompt in AI Builder Club

Jason Zhou

35,709 Aufrufe • vor 1 Jahr

I deleted 80% of my CLAUDE.md last night. My CLAUDE.md was 400 lines. It's now 60. Claude works better. It's all because of this video. Two Anthropic engineers. 50 minutes. The Claude team's best practices. Anthropic deleted 80% of the Claude Code system prompt. The output got better. Most people will keep adding rules and wondering why it keeps getting worse. Watch it today, then read the guide below.
47:53

I deleted 80% of my CLAUDE.md last night. My CLAUDE.md was 400 lines. It's now 60. Claude works better. It's all because of this video. Two Anthropic engineers. 50 minutes. The Claude team's best practices. Anthropic deleted 80% of the Claude Code system prompt. The output got better. Most people will keep adding rules and wondering why it keeps getting worse. Watch it today, then read the guide below.

Raytar

125,835 Aufrufe • vor 20 Tagen

I think I fixed the memory error problem for 9.00 on my host. The original al azif code came with this issue, so I assumed everything was fine, but it wasn't. * I don't know how well it works for 9.03+; it should be tested on those versions...
0:34

I think I fixed the memory error problem for 9.00 on my host. The original al azif code came with this issue, so I assumed everything was fine, but it wasn't. * I don't know how well it works for 9.03+; it should be tested on those versions...

GamerHack

16,918 Aufrufe • vor 4 Monaten

I love the chicken game! Only available on roobet. Use code stevewilldoit and 100% of money generated goes to the players under code . I keep zero. We are still figuring out the details on how that works but haven’t checked the code in weeks it’s all for the players . This was my idea and roobet liked it so we are doing it . :)
0:25

I love the chicken game! Only available on roobet. Use code stevewilldoit and 100% of money generated goes to the players under code . I keep zero. We are still figuring out the details on how that works but haven’t checked the code in weeks it’s all for the players . This was my idea and roobet liked it so we are doing it . :)

Steve Will Do It

131,565 Aufrufe • vor 2 Jahren

Claude Code: Auto mode Auto mode lets Claude safely complete long-running tasks without asking permission for every action. But how does it work? 4 key terms: • Classifier: a separate model that approves or denies each action based on your intent and scope • Filtering: the classifier only sees your messages and Claude's tool calls, not Claude’s reasoning or tool outputs, so it isn't influenced when making decisions • Tier check: read-only and easily-undone actions (like edits inside your repo) skip the classifier; everything else goes through it • Probe: a server-side check that scans incoming content, like web pages, for prompt injection and flags it to Claude I'm working on a longer video that explains how auto mode works and how to configure it. What questions do you have about it?
0:52

Claude Code: Auto mode Auto mode lets Claude safely complete long-running tasks without asking permission for every action. But how does it work? 4 key terms: • Classifier: a separate model that approves or denies each action based on your intent and scope • Filtering: the classifier only sees your messages and Claude's tool calls, not Claude’s reasoning or tool outputs, so it isn't influenced when making decisions • Tier check: read-only and easily-undone actions (like edits inside your repo) skip the classifier; everything else goes through it • Probe: a server-side check that scans incoming content, like web pages, for prompt injection and flags it to Claude I'm working on a longer video that explains how auto mode works and how to configure it. What questions do you have about it?

Delba

42,930 Aufrufe • vor 2 Monaten

I just built my second app in 4 hours with Claude Code. From Figma design to fully functional. No code written. This shouldn't be possible. 😭 The first one took me a week. The second one took an afternoon. By next week I'll be shipping one before breakfast. >View in full.
2:05

I just built my second app in 4 hours with Claude Code. From Figma design to fully functional. No code written. This shouldn't be possible. 😭 The first one took me a week. The second one took an afternoon. By next week I'll be shipping one before breakfast. >View in full.

Tuki

182,385 Aufrufe • vor 5 Monaten

Weird bug that popped up last night in an official where it made it look like I was on full tilt mode. 🤔 Game was ignoring and delaying my inputs. Making my character move around in whatever direction, crouching and shift walking without my control. Anyone else have this issue?
0:45

Weird bug that popped up last night in an official where it made it look like I was on full tilt mode. 🤔 Game was ignoring and delaying my inputs. Making my character move around in whatever direction, crouching and shift walking without my control. Anyone else have this issue?

Eddie Viri

32,451 Aufrufe • vor 2 Jahren

Claude Code Creator: “90% of companies we work with don’t use verification loops - that’s their biggest mistake. more than 40% of my code is already written by "loops", and I’m sure this share will only grow.” in a 25-minute talk, Boris Cherny discusses the best coding workflows with Spotify’s Chief Engineer. This one video will replace 100 YouTube Claude coding setup tutorials. Watch it today, then read the full guide on loop engineering below.
26:03

Claude Code Creator: “90% of companies we work with don’t use verification loops - that’s their biggest mistake. more than 40% of my code is already written by "loops", and I’m sure this share will only grow.” in a 25-minute talk, Boris Cherny discusses the best coding workflows with Spotify’s Chief Engineer. This one video will replace 100 YouTube Claude coding setup tutorials. Watch it today, then read the full guide on loop engineering below.

Movez

107,463 Aufrufe • vor 1 Monat

VERY COOL!! Thanks jordan for the tip, I can now test my iOS app on web I asked Claude Code to set up serve-sim, a web-based iOS simulator that can stream the iOS app my Claude Code on VPS built live to me, because it's on some Mac Mini in the cloud without even a GUI (it's headless) I cannot actually try it on the Mac itself! Before Claude would make me a page with screenshots but I had no idea how the app felt, now with this it works This is hosted on the Mac Mini via SSH (it shows localhost but it's a tunnel via SSH to the Mac Mini), bit laggy but nice!
0:26

VERY COOL!! Thanks jordan for the tip, I can now test my iOS app on web I asked Claude Code to set up serve-sim, a web-based iOS simulator that can stream the iOS app my Claude Code on VPS built live to me, because it's on some Mac Mini in the cloud without even a GUI (it's headless) I cannot actually try it on the Mac itself! Before Claude would make me a page with screenshots but I had no idea how the app felt, now with this it works This is hosted on the Mac Mini via SSH (it shows localhost but it's a tunnel via SSH to the Mac Mini), bit laggy but nice!

@levelsio

426,190 Aufrufe • vor 1 Monat