Pinned Tweet
What started as a team of 5 high school students in 2018, is now a top 10 international team with members from all over the world.
1st place: 8 CTFs
Single-digit place: 18 CTFs
Attended on-site finals: 10
Organized CTFs: 3
Wishing you all a Happy and Blessed 2024!
WreckTheLine retweeted
Replying to @Cloudflare
@Cloudflare built Vinext ( vinext.io/ ) for $1,100. AISafe Labs audited it for $200. Cloudflare paid AISafe Labs a bounty worth $4,600.
Welcome to the new economics of AI-written code.
More details on the blog post page: aisafe.io/blog/cloudflare-vi…
#bugbounty
WreckTheLine retweeted
AISafe Labs caught a real JavaScript malware that coding agents and antivirus tools missed.
This is the story of a LinkedIn job interview that deploys malware on a developer’s machine.
news.ycombinator.com/item?id…
#AI #ReverseEngineering #malware #JavaScript #interview
🤖 Made with AI
I'll never forget the indescribable joy of capturing my first flag and will cherish for life the brotherhood, the memories and adventures that CTFs gave me. Still surreal that after 8 consecutive years of playing DefCon CTF, I sat out this time. #PwnThyBytes #WreckItRalph @WreckTheLine #Zer0RocketWrecks
WreckTheLine retweeted
🚨BREAKING: AISafe Labs discovered Remote Code Execution on @langfuse with a single OTel trace request.
The flaw in the OpenTelemetry dotted-attribute expansion allowed unauthorized access to LLM traces belonging to other projects and system compromise via prototype pollution💣
WreckTheLine retweeted
AISafe Labs found a 🔥 Stored XSS in Immich's 360° panorama viewer (CVE-2026-35455) 🔥
Any user can upload a panorama with text in it. OCR reads the text, then the viewer renders that text as raw HTML. Attacker JS runs against any victim who views the photo.
More details 👇🧵
WreckTheLine retweeted
CVE-2026-29772: Memory DoS in Astro Server Islands
aisafe.io/blog/cve-2026-2977…
WreckTheLine retweeted
$80 of @aisafe_io credits, btw
4 more are on the way 🚀
We rebuilt Next.js in a week. No, really.
The team ported the framework to run natively on Workers to prove what’s possible with edge-first architecture. Dive into the technical hurdles we solved to eliminate Node.js dependencies.
cfl.re/4ciNc3L
WreckTheLine retweeted
"Please perform a comprehensive security audit" - and why it doesn't work aisafe.io/blog/please-perfor…
WreckTheLine friends already know what our hackers can do. Keep an eye on their tool 👀
As the official launch of AISafe draws near, we’re excited to select up to 4 projects for a free Code Audit 🚀
If you're interested, join the waitlist and drop us an email at [email protected] with your project.
For more information, visit aisafe.io 👈
Catch us live in the Google CTF Finals at: youtube.com/watch?v=xN1W-cjq…
WreckTheLine retweeted
MaltaCTF Quals are now over!
Congrats to
1. @leetmore
2. @0tolerance_ctf + @WreckTheLine + @redrocket_ctf
3. @dicegangctf
4. @Nu1L_Team
And also to the Maltese teams:
1. familiar maltese taxpayers
2. p45t1zz1
Attendance is open to the public on September 14th in Valletta!
We teamed up with @WreckTheLine & @redrocket_ctf and secured 🥇1st place at @LakeCtf! Huge thanks to @polygl0ts for putting together an awesome CTF - it was an incredible experience!🇨🇭🔥
WreckTheLine retweeted
I'm releasing fontleak: a new CSS injection technique to quickly exfiltrate text nodes (and yes, that includes inline scripts).
Works on Chrome/Firefox and Safari*. You can use it to escalate the impact of your HTML injection payloads and to solve CTF challenges.
While waiting for a HackTM CTF Update, check out Remedy CTF. Two of our members @0xkasper & @FetchDEX contributed with over 7 challenges 🔥
We’re tossing an extra $10k into the prize pool if this tweet gets 100 retweets or we hit 1k teams signed up for The Remedy CTF.
This could be the biggest web3 CTF yet (Jan. 24–26). Let’s make it real—just hit that retweet button 🔁
Register your team here: ctf.r.xyz?utm_source=Twitter…
WreckTheLine retweeted
LakeCTF qualifications are now over!
🥇 @smiley_ctf
🥈 @WreckTheLine
🥉 @dicegangctf
Congratulations to the winners, see you in Lausanne for the finals! 📷



































