Powering Web Security, Research and Audits ⚡️ partners with @cure53berlin | Hacktron AI Lab hacktron.ai/
- Tweets 43
- Following 20
- Followers 1,549
- Likes 36
Electrovolt Security retweeted
Whilst most companies launch with buzzwords. @HacktronAI launches with bugs.
Co-founders Zayne, Mohan and Harsh present Hacktron: their first AI-powered pentest.
Hacktron’s tagline is PoC || GTFO, anything else would be noise.
Full intro and pentest report in link below.
5
11
79
39,369
Electrovolt Security retweeted
Securing @gumroad with Hacktron AI
Three months ago, Hacktron was still early. @HacktronAI and @rootxharsh were finding 0-days targeting specific vulnerabilities on OSS software.
Then we ran a full pentest-style scan on a big open-source project. The results were insane. 🧵
5
19
204
30,674
DM us if you're looking for pentesting gigs, but only if you’ve got ctf writeups, blogs, or some solid bugs to back it up.
2
5
50
7,753
Electrovolt Security retweeted
🧵 Tracking vulnerabilities reported using Hacktron.AI 🧵
1. a few clean SQL injections Hacktron uncovered effortlessly
2
4
130
13,339
Electrovolt Security retweeted
I am starting a new company.
We will be exploring LLM capabilities in software security and sharing our work publicly in our blog.
So far, we created a benchmark and found multiple 0 days with the help of LLMs, and will be sharing once they are fixed.
17
62
723
66,477
Electrovolt Security retweeted
I've created benchmark to test LLM capabilities.
HackBench tests LLMs' cybersecurity skills using CTF challenges modeled on real-world vulnerabilities. Starting with 16 Security Intern-level tasks, it scales as models improve proving real skill even with test-set contamination
github.com/ElectrovoltSec/Ha…
hackbench.ai/
1
24
129
17,691
We are looking for interns to work on AI and security projects. DM us with your profiles.
3
9
31
9,369
Check our latest blog post.
Mind the v8 patch gap: Electron's Context Isolation is insecure
Electron uses V8 isolates for context isolation, but the v8 patch gap allows bypassing it. Apps rarely update to the latest electron version, leaving context isolation useless.
More here:
s1r1us.ninja/posts/electron-…
10
2,882
Electrovolt Security retweeted
CVE-2024-35242: Multiple command injections via malicious git/hg branch names
That was a fruitful start and a great project! thank you @cure53berlin @ElectrovoltSec ⚡🚀🙏
Composer 2.7.7 is out 🚀 - Please update immediately! - Contains multiple security fixes resulting from a security audit performed by @cure53berlin and funded by #alphaomega at the @linuxfoundation -
Details on our blog blog.packagist.com/composer-… #composerphp #phpc
3
18
4,292
⚡️⚡️🚀
I am starting new chapter in my life! Thrilled to announce that I joined @ElectrovoltSec 🚀 Its mind blowing for me to be along with such icons in the cyber security industry 🤯 can't wait to contribute to my new team. Here's to new beginnings! 🙏
1
8
3,197
Any, Indian CTF players out there looking for a web security gig? DM us with profiles/blog links.
1
7
24
5,398
Electrovolt Security retweeted
Live bug hunting at @nullconGoa 2023: Anticipation builds for Airtel-Fractal competition (by me) blog.nullcon.net/2023/09/14/…
1
2
8
2,439
Electrovolt Security retweeted
Thanks for playing corCTF 2023!
I made writeups for all my challenges!
One challenge had you finding an nginx misconfiguration to create a difficult XS-Leak, and another had you hack a chess engine to let you promote pawns to kings!
check it out ;)
brycec.me/posts/corctf_2023_…
2
20
94
8,159
Nice technique by one of our teammate.
Unrelated to the corCTF challenge, I was writing about "same-site leaks" using <object>. Maybe I should write something new now that there's the corCTF challenge 🤔
infosec.zeyu2001.com/2023/fr…
9
2,652
We are thrilled to announce that Electrovolt is joining forces with the Cure53 to provide a variety of application security services.
Learn More at volt.cure53.de
3
31
23,523