@ITSecurityguard

Security Research @ Assetnote https://xitter.cf/t.co/RmFwv6ItrQ https://xitter.cf/t.co/qylqwXgc9I

 Offenburg
patrik.re
Joined January 2013
  • Tweets4.9K
  • Following305
  • Followers31.8K
1.2KMedia
I finally let Claude do my pentest this week. Full 5-day engagement, zero human input. Here's what the client got: 😏 clawd.it/posts/10-replaced-b… #bugbounty #pentesting #AI #cybersecurity #infosec #claudeai

Replaced by a Goldfish

AI isn't replacing pentesters. It's replacing the people who think pentesting is a checklist. A deep dive into the hype, the money, and why Daniel Miessler's $70 trillion take doesn't hold up.

patrik.re
43
205
21
945
117,709
Patrik Grobshäuser retweeted
Calif
@calif_io21h
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
19
227
24
652
134,102
Fuzzing became a lot more efficient 😏 100k requests per second with h3fuzz on http/3 hosts (fork of ffuf with http/3 support). Tool: github.com/assetnote/h3fuzzR… Writeup: slcyber.io/research/how-prac…
3
19
131
7,342
Mail forwarders are not your marketing tools @zenitysec. Don’t spam my @intigriti alias with event promo. @intigriti this is very annoying.
5
1
34
3,973
New research from our team at @SLCyberSec : Pre-Auth Remote Code Execution in Adobe AEM! 👇🏻 slcyber.io/research/more-cri…
1
16
52
2,791
Andy White@arcwhiteOct 13
Replying to @NahamSec
Please don't use VDPs as a validation service for your automation, for the love of god. That's absolutely not what they're for and we will have to start banning or throttling you.
1
1,549
Gread advice! I have compiled a list of things that can be bought using reputation points here: 👇🏻 docs.google.com/spreadsheets…

Things that can be bought using Reputation Points

docs.google.com
Ben Sadeghipour
@NahamSecOct 11
I used to tell people to practice web hacking on VPDs, now I tell them to try building hackbots on VPDs. How times have changed. 🤣
8
6
114
7,589
New Research from the @SLCyberSec Labs Team 👀
Assetnote
@assetnoteOct 7
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
https://www.slcyber.io/research/a-jpeg-a-race-and-a-ghost-breaking-discourses-image-pipeline

ALT https://www.slcyber.io/research/a-jpeg-a-race-and-a-ghost-breaking-discourses-image-pipeline

1
18
1,567
I hope everyone that runs a bug bounty program with triage services is going to give their account executive a hard time on the next renewal. It is catastrophically bad across all platforms and AI is only making it worse. If you care about your vulnerabilities, own your program.
2
82
4,881
Patrik Grobshäuser retweeted
ᴉpᴉǝH 🐐💕@summer__heidiOct 2
4
28
1,839
Patrik Grobshäuser retweeted
Pomme
@pxmme1337Sep 30
Hey y'all I made a new thing, it's a game this time Come check it out, it's 100% free!! Hope you like it ❤️ Kosmora.io
2
5
1
9
18,615
The only Critical Thinking Episode you should ever watch youtu.be/8GzITCxWILw

What happened to HackerOne with Joel Margolis (Ep.189)

Episode 189: In this episode of Critical Thinking - Bug Bounty Podc...

youtube.com
16
1,859
the holy trinity of bullshit infosec content
1
2
12
2,012
Join
Sam Curry
@samwcyoAug 18
For anyone using LLMs to do security research, bug bounty, red teaming, etc, we made a Discord to discuss/collaborate: mistakes.io/discord/

AI Vulnerability Research Discord

A Discord for people using LLMs for security research, bug bounty, red teaming, automated scanning, and related work.

mistakes.io
3
41
11,068
Patrik Grobshäuser retweeted
Kévin GERVOT (Mizu)@kevin_mizuAug 17
Recently, I've been looking at DOMPurify again, trying to find ways to bypass 3.x.x after browsers started encoding attrs during serialization. I ended up with a nice ≤3.2.6 Safari default-configuration bypass using only SMIL tags/attrs :D Details 👇 mizu.re/post/dompurify-bypas…
https://yeswehack.github.io/Dom-Explorer/shared?id=9c1f671a-fc8f-4284-9217-eba4df143db3

ALT https://yeswehack.github.io/Dom-Explorer/shared?id=9c1f671a-fc8f-4284-9217-eba4df143db3

4
55
257
10,910
so Mythos scanned a thousand open source projects and WordPress wasn't one of them? 👀 new blogpost with some thoughts on infosec marketing vs. reality patrik.re/where-was-mythos-w…

Where was Mythos when WordPress fell?

Anthropic scanned more than 1,000 open-source projects with Mythos and never said which. WordPress wasn't one of them, and a pre-auth RCE in core sat there waiting.

patrik.re
9
24
137
10,646
Patrik Grobshäuser retweeted
André Baptista
@0xacbJul 29
🚨We reported KindaRails2Shell, a critical RCE in Ruby on Rails via Active Storage. It’s not a one-shot RCE, but the preconditions are kinda common under default configurations. Patch your applications now! ethiack.com/info-hub/researc…

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066) | Ethiack

Ethiack research team discovered KindaRails2Shell (CVE-2026-66066): a critical RCE in Ruby on Rails via Active Storage. 500,000+ sites affected. Find out if you are and how to mitigate.

ethiack.com
13
99
10
389
90,986
Unfortunately true
Justin Elze
@HackingLZJul 20
The fun thing about the latest WordPress RCE is knowing everyone has been running bug hunting harnesses with every model imaginable against the same code for months and one person still landed it. So much for the space being dead.
8
4,396
Today we are releasing the blogpost for @hash_kitten amazing research that ruined all of our weekends. slcyber.io/research-center/e… #wp2shell #WordPress #RCE #0day #infosec #bugbounty

Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25

Adam Kues used a $200 GPT5.6 Sol Ultra subscription to discover a pre-authentication SQL injection and full RCE exploit chain in WordPress Core – a chain that chains a batch API desync, cache...

slcyber.io
hashkitten@hash_kittenJul 20
Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-center/e…

Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25

Adam Kues used a $200 GPT5.6 Sol Ultra subscription to discover a pre-authentication SQL injection and full RCE exploit chain in WordPress Core – a chain that chains a batch API desync, cache...

slcyber.io
4
14
1
121
13,533
Patrik Grobshäuser retweeted
hashkitten@hash_kittenJul 17
I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances! slcyber.io/research-center/w…

wp2shell: Pre Authentication RCE in WordPress Core

Critical issue discovered in WordPress Core affecting the majority of WordPress-built sites. A pre-authentication Remote Code Execution (RCE) that can be used by attackers to run malicious code to...

slcyber.io
31
228
30
1,034
203,899
Load more