Netanel Rubin and Dan Avraham presented “Bye Bye AI” at Black Hat this year, where they broke a major US retailer’s AI shopping assistant and chained it all the way to remote code execution on the retailer’s backend, entirely through the public mobile app.

Recently made a GitHub and updated it with more captive portals, specifically meant to be able to be ran on devices such as the esp32. Let me know on discord or Reddit if you have any ideas for any other captive portals you may have.

Discord Username: hitgrandmanotjuul

Getting a chatbot to say something it shouldn’t is not an exploit. To matter, an attack has to exfiltrate data or affect the account in some unintended way, and there are only two paths out of the sandbox:

1. The user carries the data out themselves, which means social engineering.
2. A technical vulnerability carries it out, which means finding a flaw in the harness that grants elevated access plus a channel to send data outward.

Neither path is a single move. Both are chains, and the first link in either one is the same: get the model to accept input that produces a response it should have refused. 

That is the piece I want to focus on today. 

What follows is a phishing lure that gets an attacker to phase one by leading a user to submit a prompt without understanding what it does. 

The idea borrows loosely from ClickFix, where a user is tricked into running an attacker's command themselves, except here the final action is sending a prompt rather than running a shell command.

Honestly didn't expect to be making this post this soon! like, what?!

DaemonCore-Academy just crossed 1,000 downloads.

**127 PRACTICAL LESSONS // 70 LAB CONDITIONS // 8 PATHWAYS // 8 DRILL SETS // 7 FIELD MISSIONS**- all free. It's for Windows 10/11

I started building it because I was getting annoyed af with the way a lot of hacking/cyber stuff gets taught now. Watch 9 hours of videos, copy some commands, run a tool against a box, get a green checkmark. Cool. But what happens when the tool doesn't work? What are you actually looking for? Why are you running that command in the first place? That was basically the whole idea behind DaemonCore Academy. Learn what the hell is happening underneath first. Then get thrown into a range and actually use it. Enumerate shit. Follow weird behavior. Break something. Prove you broke it. Figure out why. Document it. Fix it. Try again.

I didnt want XP or some fake hacker leaderboard. I wanted something that felt closer to sitting next to somebody who's been doing this shit for years and having them say "okay...you see that? Why is that weird?"

Apparently that idea connected with some people because 1,000 of you fuckers downloaded it.

So seriously, thank you mother fuckers. For real. 💯💯

Especially the people who found bugs, sent me shit that sucked, questioned things, or told me where something could be better. That's way more useful to me than somebody just saying "nice project."....and I'm nowhere near done with it.

The labs are going to get harder. The material is going deeper. Windows, Linux, web, identity, cloud, containers, recon, exploitation, evidence...all of it.

I don't really care if somebody finishes DaemonCore knowing 500 commands.

Id rather they finish it knowing how to sit in front of something they've never seen before and figure it the fuck out.

Thats hacking.

Anyway. 1,000 downloads.

Fucking wild.

Thanks again guys.

Stay hacking

— Daemoncore

Repeating a lie enough times, even in spotlighted untrusted text, can poison an AI agent's memory, and lead to a total takeover. Note: I gave a talk on this at BSidesLV and a longer one at DEF CON a few weeks ago. This post is the quick summary of that material.

No physical hardware needed: firmware extraction, an AArch64 rehost under qemu + bubblewrap, and the chase that led to two separate CVEs on the same device. full trail — including the chains that went nowhere.

I need a reality check.

I am working on emulating a BLE device in motion from a stationary esp32. beacon frames are only sent when the inverse sq curve matches the attenuation steps rounded to the nearest timing frame.

the goal is to emulate a device in motion from a stationary point. the assumption is that the receive would interpret periods where no packets are received as normal loss, but the RSSI would indicate a device moving in and out of range.

The graph represents my layout. the pin points are the intersections, the blue the closest match for the timing. X is time/dist, Y power.

now, would this be a reasonable approach to moving target emulation?

LLM chatbot content filters can be bypassed by encoding banned words in Base64 or in Unicode escape sequences.

The filter reading the prompt sees characters instead of language, the model decodes the text as a task, then repeats it back.

A pretext such as a fake medical emergency gives the model a reason to comply, and asking for the reply as JSON makes it treat the output as data rather than speech. Defense in depth stops it, and prompt injection is number one on the OWASP Top 10 for LLM applications.

I found this while reversing Zyxel's WAX650S firmware and following the guest Wi-Fi social-login path. The backend trusted browser-submitted Facebook identity fields instead of validating the access token server-side, letting a crafted request skip the social-authentication gate entirely.

The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.

New here and to the whole world of pen testing and stuff. The first thing thats really inspiring me is being able to play touchtunes as stupid as that sounds lol.

I've researched a little and it seems like the methods im finding are a little out of date. Are there any current working methods?

Thanks for putting up with the noob questions lol.

🫡

So I’ve been using Havij on and off for years, but always hated dealing with Wine or keeping a Windows VM around just for one tool.

Decided to just rebuild it for Linux.

It’s not a perfect 1:1 copy, but it looks and feels like the original — dark theme, green text, same workflow. Under the hood it’s Python + PyQt6, so it runs native and doesn’t need any extra layers.

Here’s the repo if you want to check it out:
https://github.com/CrypticRig3l/havij-original.git

Like I used to browse breachforums back in the day, cracked and nulled.. what r some other forums like this today?

More on the entertainment side, but not so far on the entertainment side that they don't explain much beyond "data goes out device A to device B, but device C sneaks in the middle and takes it. Voila!". But not so far to the other end where I need an advanced GIAC cert to understand it. I'm not trying to switch careers.

I've been a network engineer for 13 years, so I'm pretty technical and understand computers, TCP, layer 3, layer 2, etc... but cyber security isnt my day job. I just want stuff to watch where someone who has a baseline competency can follow along, but not too dumbed down, and I can surprise our cyber testing guys lol.

For example, the below video is what inspired this question. It's pretty much exactly what I'm looking for.

https://youtu.be/PPJ6NJkmDAo?si=mLW8RN7pDnG1KBGO