Профиль

LOpht Heavy Industries (1998) This Boston hacker collective testified before Congress that they could take down the entire internet in 30 minutes. Instead of arrests, lawmakers asked for security advice. A turning point for hacker culture! #Hackers

Nepenthes, Iocaine, and Cloudflare's AI Labyrinth, broken down in full: www.toxsec.com/p/ai-tar-pit...

AI Tar Pits Are Drowning LLM Scrapers in Infinite GarbageHow tools like Nepenthes, Iocaine, and Cloudflare’s AI Labyrinth trap unauthorized crawlers in endless mazes of generated nonsense and poison the training set on the way out.www.toxsec.com

AI crawlers hit #Cloudflare's network with more than 50 billion requests a day. The defense that actually scales isn't a block list. It's a maze that feeds the bot infinite generated garbage until it burns its own #compute wandering pages that go nowhere.

every payload that fails is just one closer to the one that works. #bugbounty #infosec

Duplicate reports: rite of passage or character-building exercise? #BugBounty

Keep pushing. The best bugs usually show up after you almost quit. #bugbounty #hacking

Blue Boxing Steve & Woz (1971) – Before founding Apple, Jobs and Wozniak sold homemade blue boxes to college kids, bragging they could call the Pope by routing through Vatican City trunks. #Hackers

so the rumor has it that #chatgpt 5.6 is going to be dropping soon and that according to the #benchmarks it can beat fable in several key areas. all this leads me to wonder: if it's better than #fable with agentic coding, is it also going to be slapped with ear export #controls?

Have you ever found a high-impact bug outside of scope—did you report it anyway? #BugBounty

ever hit a scope so empty you wonder if it’s just a decoy? #bugbounty

#Fable 5 was pulled. The #jailbreak that pulled a frontier model offline for the whole planet: ask the model to read a codebase and find bugs. That's it. That's the weapon. Anthropic ran it and watched it surface vulns #GPT-5.5 hands you with no bypass at all.

no better feeling than watching your payload echo back in the response. #bugbounty

when burp’s history tab looks like a conspiracy wall. #bugbounty

Stay patient. Bug bounty is a long game, not a quick hack. #cybersecurity

HTTP Request Smuggling (CL:TE) How header mismatch between Content-Length and Transfer-Encoding lets attackers slip hidden requests past your edge and into the backend. Full breakdown of mechanics, recon tips, and real bug bounty angles. www.toxsec.com/p/http-reque... #Cybersecurity

HTTP/1.1 Request Smuggling | CL:TEToxSec | HTTP Request Smuggling Guide for bug bounty.www.toxsec.com

#Anthropic just release #Fable 5. ⚠️ The #Mythos class model made safe. Cybersecurity guardrails and impressive benchmarks. Can’t wait to see how it handles!

half of bug hunting is fighting with your own regex. #bugbounty

BGP Hijack of YouTube (2008) – Pakistan Telecom accidentally advertised a bogus route and knocked YouTube offline worldwide for two hours—showing how fragile the internet’s core routing really is. #Hackers

funny how bug bounties turn into archaeology… digging through layers of old code nobody’s touched in years.

sometimes the real vulnerability is the developer’s sense of humor in error strings. #bugbounty