@intidc

ꪜ Official Hacker @securinti (EN) | @intidc@mastodon.social | 📩 [email protected] | views are my own

 Aalst, België
Joined August 2015
  • Tweets3.1K
  • Following242
  • Followers15.6K
398Media
🔥PRIVACY SCOOP: How ANYONE can track your car using only your license plate: a thread! 🧵👇 #osint #privacy (1/X)
63
1,262
224
4,334
Inti De Ceukelaire retweeted
d0nut 🦀 💜
@d0nutptrOct 21
This isn’t a “I’ll do it tomorrow” thing. It’s a “we are 6+ hours late to calling a SEV0” thing. Mitigate this **now**.
AndrewMohawk⁽ⁿᵘˡˡ⁾@AndrewMohawkOct 21
If you run PHP please: session.upload_progress.enabled = Off php_admin_flag session.upload_progress.enabled Off
7
9
2
151
17,603
Inti De Ceukelaire retweeted
Inti De Ceukelaire@securintiSep 18
OpenAI had some of the friendliest and most capable triagers I’ve worked with but their bounty tables are insulting 😅
s1r1us
@S1r1u5_Sep 18
Replying to @S1r1u5_
We reported the bug to Discourse and OpenAI. OpenAI fixed the SSO issue roughly 14 hours after our initial submission. Discourse received our separate report Saturday, replied Sunday, and had a fix Monday. OpenAI awarded us $6,500.
3
4
85
6,226
Inti De Ceukelaire retweeted
Harsh Jaiswal
@rootxharshSep 18
We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more. It was literally xkcd #234, one obscure image library beneath a huge number of apps. 🧵
48
427
66
3,237
561,622
Inti De Ceukelaire retweeted
Inti De Ceukelaire@securintiSep 17
> builds technology that could literally destroy the world > max bounty: $10k ($0 for model safety issues) we're cooked 💀💀💀
4
13
2
255
14,794
I’ve changed my mind on how dangerous AI can be for humanity. inti.io/p/how-ai-might-actua…

How AI might actually kill us

We need to stop thinking in Terminator terms.

inti.io
13
6
4
67
13,073
we staan voor een ongeziene uitdaging en dan wik en weeg ik mijn woorden hln.be/binnenland/kan-ai-ons…

Deze toponderzoeker beweert dat AI de mensheid kan uitroeien tegen het einde van dit decennium. Hoe...

Gaat AI ons tegen het einde van het decennium allemaal doden? Het klinkt als de nieuwste blockbuster van Christopher Nolan, maar in de bestuurskamers van Silicon Valley is het dodelijke ernst. “De...

hln.be
1
3
14
2,408
Whoever uses AI as their personal therapist better has solid security controls on their account. We're not ready for GPT-account hijacks.
6
783
Inti De Ceukelaire retweeted
Inti De Ceukelaire@securintiSep 8
how i hacked 320+ companies that replaced their cs team with "smart" ai agents: 1. drafted a gdpr request to support@ 2. changed the FROM header from my e-mail to yours (spoofing) 3. put myself in CC 4. ai agent responds with YOUR data to BOTH of us 😈 more tricks: @intigriti
34
122
20
1,428
135,766
Inti De Ceukelaire retweeted
Intigriti
@intigritiSep 3
Most support chatbots have evolved into fully autonomous agents that can help you with almost anything... And that comes with additional risk ☝️ Our latest article, based on @intidc's talk at Bug Bounty Village during DEF CON 34, breaks down the full attack surface in AI customer service agents, from tricking them into leaking sensitive data via email spoofing to invoking unauthorized tool calls on behalf of the victim. All without ever touching any automated scanner or proxy interceptor! 🤠 Read it now! 👇 intigriti.com/researchers/bl…
1
5
52
7,254
i got $50K+ in bounties hacking ai 100% accuracy, 0 duplicates will be spilling all my secrets this friday at Bug Bounty Village, DEF CON , so everyone can do it 😎 can’t make it? lmk if i need to send you the recording once it’s out 🔴
36
18
275
9,440
Thanks for attending! Here’s a copy of the slides: drive.google.com/file/d/1e7d…

HITL2807-REV7.pdf

drive.google.com
5
355
Inti De Ceukelaire retweeted
Intigriti
@intigritiAug 3
We are at Security BSides Las Vegas handing out our exclusive CTF-style challlenge coin! Come grab yours at the PortSwigger both and try solving it to win swag! #HackWithIntigriti #DEFCON #DC34
3
65
7,325
Inti De Ceukelaire retweeted
Inti De Ceukelaire@securintiJul 27
🔥 Scored a lot of bug bounties using novel hacking techniques. Now, it’s time to release them to the public! #defcon #defcon34 #dc34
Bug Bounty Village
@BugBountyDEFCONJul 27
Don't miss the talk "Hacking Human-in-the-Loop systems" by Inti De Ceukelaire (@securinti) on Fri, Aug 7 at 4:00pm inside the Village. Read more at bugbountydefcon.com/agenda #BugBounty #DEFCON34
2
12
2,054
Inti De Ceukelaire retweeted
Inti De Ceukelaire@intidcJun 1
Update, deze vond ik van een begeleidster van een andere school uit Buggenhout ook verstopt in de Facebook reviews. Zelfde chauffeur of niet, feit dat firma niet reageert… E-mail server van dit management zo snel mogelijk in beslag nemen a.u.b. 🙏
7
41
1
191
7,557
Geen idee of dit reeds gepost is, maar ik vond deze Google review van 2 maand geleden over de busmaatschappij die betrokken was bij het vreselijke ongeval in #buggenhout. 🤯
32
172
14
788
46,439
Update, deze vond ik van een begeleidster van een andere school uit Buggenhout ook verstopt in de Facebook reviews. Zelfde chauffeur of niet, feit dat firma niet reageert… E-mail server van dit management zo snel mogelijk in beslag nemen a.u.b. 🙏
7
41
1
191
7,557
Inti De Ceukelaire retweeted
Inti De Ceukelaire@securintiMar 9
🔥 NEWS: I dismantled a large-scale phishing operation targeting European banks. Now, I need your help to bring them to justice. 👊 READ: inti.io/p/how-i-infiltrated-…

How I infiltrated phishing panels targeting European banks and tracked down their operators

Good phishers clearly aren't always good programmers.

inti.io
7
13
1
71
5,102
Inti De Ceukelaire retweeted
Pieterjan Van Leemputten@PieterjanvlMar 9
Je zal maar een hardwerkende cybercrimineel zijn, om dan mensen zoals @intidc tegen te komen die het allemaal verpesten. inti.io/p/how-i-infiltrated-…

How I infiltrated phishing panels targeting European banks and tracked down their operators

Good phishers clearly aren't always good programmers.

inti.io
5
7
2
77
4,934
Inti De Ceukelaire retweeted
Intigriti
@intigritiFeb 13
Statement on AI & researcher IP from our CEO Stijn Jans
23
26
6
213
19,498
An excellent example why you should never enter your credit details into kiosk screens! Hackers can replace the screen with a fake order app in seconds... or with an entertaining music clip for all customers to enjoy! 🕺🎶 #hacking
2
6
76
9,530
Load more