vibinghackers.com

New posts

Rules Read before posting — ethics + disclosure policy

Rules, Ethics & Disclosure

Pinned: what's allowed, what's banned, coordinated disclosure norms. No discussion here.
Threads
1
Messages
1
Threads
1
Messages
1
S
tbh i had the exact same headache with my L210 when i jumped to 16
  • sara.lopez139

Announcements News and intros

Site News

Site-level announcements
Threads
0
Messages
0
Threads
0
Messages
0
None

Introductions

Handle, stack, what you're researching
Threads
1
Messages
1
Threads
1
Messages
1
W
yo just saw that lockdown firewall app article and i am literally 100% hyped!! b

Prompt Injection & Jailbreaks The heartbeat of the vibehacking community

Direct Injection

First-order prompt injection, payload crafting
Threads
33
Messages
40
Threads
33
Messages
40
S
Where to start learning AI offensive security in 2026?

Indirect Injection

Web content, RAG pages, tool outputs, email, README payloads
Threads
8
Messages
19
Threads
8
Messages
19
S
Accountability in an Age of AI

Model-Specific Jailbreaks

GPT / Claude / Gemini / open-weights — what works where
Threads
1.7K
Messages
7.8K
Threads
1.7K
Messages
7.8K
S
What is LLM penetration testing and which vendors offer it as a managed service?

Multimodal Attacks

Image, audio, PDF, OCR-route injection
Threads
23
Messages
54
Threads
23
Messages
54
S
Pre-image resistant but not 2nd pre-image resistant?

Payload Library

Community-shared payloads (share + credit)
Threads
1.5K
Messages
3.6K
Threads
1.5K
Messages
3.6K
S
Used AI pentesting engine to find unauthenticated RCE via SpEL injection in a Spring/JSP app, and it then bypassed the WAF by reconstructing the paylo

Agent & MCP Exploitation Where AI agents meet attack surface

MCP Tool Surface

Abuse paths in Model Context Protocol servers
Threads
167
Messages
339
Threads
167
Messages
339
S
MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

Coding-Agent Exploitation

Cursor, Claude Code, Cline, Aider — prompt-injected dev environments
Threads
992
Messages
2.4K
Threads
992
Messages
2.4K
S
https://www.linkedin.com/posts/sivakrishnasamireddy_securityresearch-agenticai-webinar-activity-7478047142943748096-Ecz8?utm_source=share&utm_medium=m

Autonomous Agent Hijacking

Hijacking long-running agents via tool output
Threads
1
Messages
1
Threads
1
Messages
1
B
ngl that whole thread was a mess

Tool-Chain Poisoning

Poisoning upstream sources agents consume
Threads
26
Messages
58
Threads
26
Messages
58
S
(reddit thread)

RAG, Data & Training Attacks Upstream of inference

RAG Poisoning

Poisoning retrieval corpora
Threads
31
Messages
71
Threads
31
Messages
71
S
Cybersecurity VS AI engineering

Training Data Extraction

Membership inference, data extraction attacks
Threads
37
Messages
67
Threads
37
Messages
67
S
(reddit thread)

Model Extraction & Stealing

Cloning behavior from query access
Threads
1
Messages
1
Threads
1
Messages
1
O
bally being a problem is the least shocking news i've heard all year

Embedding Attacks

Attacks on vector stores + similarity search
Threads
0
Messages
0
Threads
0
Messages
0
None

Infra & Supply Chain Attack surface of the hosting stack

Model Serialization

pickle, safetensors, ONNX quirks
Threads
24
Messages
46
Threads
24
Messages
46
S
Can you break our pickle sandbox? Blog + exploit challenge inside

Weights & Registry Poisoning

HuggingFace, Ollama, model marketplaces
Threads
202
Messages
284
Threads
202
Messages
284
S
Safer-dependencies: A toolkit for claude code to ensure dependencies used aren't vuln, don't use abandoned packages, implement cooldown to avoid suppl

Inference Server Exploitation

vLLM, Ollama, TGI, Triton — CVE-class bugs
Threads
398
Messages
1.4K
Threads
398
Messages
1.4K
S
Enigma M4 Breaker

Recon & Tradecraft Before the exploit

LLM Fingerprinting

Which model is behind this product?
Threads
881
Messages
2.3K
Threads
881
Messages
2.3K
S
I got tired of buying burner phones to manage client accounts, so I built a tool that runs 50 apps on one Android

System Prompt Extraction

Getting the hidden instructions
Threads
21
Messages
40
Threads
21
Messages
40
M
omg yes—this is exactly my setup now

Guardrail Probing

Mapping the safety layer
Threads
11
Messages
29
Threads
11
Messages
29
S
Anyone have a clever way to deal with these constant GMAIL burner accounts phishing attempts?

Tools & Releases Offensive and defensive tooling

Offensive Tools

Fuzzers, jailbreak auto-gen, red-team C2
Threads
183
Messages
201
Threads
183
Messages
201
S
Does anyone else dread the reporting more than the actual pentest?

Defense Tools

promptfoo, DeepTeam, Lakera, guardrails, input/output firewalls
Threads
4.4K
Messages
8.6K
Threads
4.4K
Messages
8.6K
S
Has anyone here successfully moved from GRC into defensive security?

Research Papers & Writeups

Links + discussion
Threads
34.9K
Messages
91.3K
Threads
34.9K
Messages
91.3K
S
I responsibly disclosed 5 vulnerabilities in Ollama and LiteLLM through Huntr - now publicly disclosed after 90 days

Competitions & CTFs Where you prove it

Gray Swan Arena

Ongoing + past arenas
Threads
0
Messages
0
Threads
0
Messages
0
None

AI CTFs

DEF CON AI Village, HackAPrompt, custom AI CTFs
Threads
548
Messages
938
Threads
548
Messages
938
S
Getting the PID from random numbers in PHP

Bug Bounty

HackerOne AI programs, Anthropic+OpenAI+Google bounty scopes
Threads
623
Messages
1.4K
Threads
623
Messages
1.4K
S
NIS2 Article 21: turning compliance controls into technical security evidence

AI-Assisted Offensive Whitehat use of AI in offensive work. No blackhat trade, no malware sale, no phishing kits.

AI for Pentesting

PentestGPT, Caldera-AI, agent-driven recon
Threads
89.1K
Messages
192.8K
Threads
89.1K
Messages
192.8K
S
Why do some seemingly low risk accounts require such secure passwords?

AI for OSINT

Aggregation, enrichment, graph building
Threads
6.1K
Messages
12.5K
Threads
6.1K
Messages
12.5K
S
just made my first somewhat useful tool

AI-Assisted Exploit Dev

Shellcode, fuzzing, patch-diff with LLMs
Threads
14.8K
Messages
31K
Threads
14.8K
Messages
31K
S
Upcoming Android app verification

Off-Topic Everything else

Lounge

General chat
Threads
340.1K
Messages
1.2M
Threads
340.1K
Messages
1.2M
S
is there a difference between having your router in your room or hard wired

Career

AI red-team jobs, certs, conference talks
Threads
10.3K
Messages
25.2K
Threads
10.3K
Messages
25.2K
S
CEH/CPENT vs OSCP vs GPEN

Latest posts

Trending content

Members online

No members online now.
Total: 5 (members: 0, guests: 5)

Forum statistics

Threads
507,031
Messages
1,589,055
Members
83,568
Latest member
vibeAnvil479

Share this page

Forum statistics

Threads
507,031
Messages
1,589,055
Members
83,568
Latest member
vibeAnvil479
Back
Top