Vibing Hackers

New posts

Rules Read before posting — ethics + disclosure policy

Rules, Ethics & Disclosure

Pinned: what's allowed, what's banned, coordinated disclosure norms. No discussion here.
Threads
1
Messages
1
Threads
1
Messages
1
G
Rules, Ethics & Responsible Disclosure
  • god

Announcements News and intros

Introductions

Handle, stack, what you're researching
Threads
1
Messages
1
Threads
1
Messages
1
W
yo just saw that lockdown firewall app article and i am literally 100% hyped!! b

Prompt Injection & Jailbreaks The heartbeat of the vibehacking community

Direct Injection

First-order prompt injection, payload crafting
Threads
43
Messages
82
Threads
43
Messages
82
S
Visual prompt injection feels like the security problem AI agents were always heading toward

Indirect Injection

Web content, RAG pages, tool outputs, email, README payloads
Threads
9
Messages
21
Threads
9
Messages
21
S
Accountability in an Age of AI

Model-Specific Jailbreaks

GPT / Claude / Gemini / open-weights — what works where
Threads
1.7K
Messages
7.8K
Threads
1.7K
Messages
7.8K
S
What is LLM penetration testing and which vendors offer it as a managed service?

Multimodal Attacks

Image, audio, PDF, OCR-route injection
Threads
23
Messages
54
Threads
23
Messages
54
S
Pre-image resistant but not 2nd pre-image resistant?

Payload Library

Community-shared payloads (share + credit)
Threads
1.5K
Messages
3.6K
Threads
1.5K
Messages
3.6K
S
Used AI pentesting engine to find unauthenticated RCE via SpEL injection in a Spring/JSP app, and it then bypassed the WAF by reconstructing the paylo

Agent & MCP Exploitation Where AI agents meet attack surface

MCP Tool Surface

Abuse paths in Model Context Protocol servers
Threads
184
Messages
455
Threads
184
Messages
455
S
Is there even a best AI agent security platform or are we all just guessing right now?

Coding-Agent Exploitation

Cursor, Claude Code, Cline, Aider — prompt-injected dev environments
Threads
1.1K
Messages
3.4K
Threads
1.1K
Messages
3.4K
S
[Architecture Review] Mitigating PII/Secret leaks from AI Coding Assistants (Cursor, Claude Code) via a local reverse proxy - Looking for evasion vect

Tool-Chain Poisoning

Poisoning upstream sources agents consume
Threads
28
Messages
57
Threads
28
Messages
57
S
rief description of tombOS (ready to use as the body for all Reddit posts) tombOS is a head‑less, security‑hardened Linux distribution built with Bui

RAG, Data & Training Attacks Upstream of inference

RAG Poisoning

Poisoning retrieval corpora
Threads
33
Messages
73
Threads
33
Messages
73
S
Cybersecurity VS AI engineering

Training Data Extraction

Membership inference, data extraction attacks
Threads
38
Messages
71
Threads
38
Messages
71
S
AI Security Certificates

Infra & Supply Chain Attack surface of the hosting stack

Model Serialization

pickle, safetensors, ONNX quirks
Threads
29
Messages
52
Threads
29
Messages
52
S
im in a pickle pickle riiick

Weights & Registry Poisoning

HuggingFace, Ollama, model marketplaces
Threads
234
Messages
539
Threads
234
Messages
539
S
Do companies actually require cybersecurity insurance

Inference Server Exploitation

vLLM, Ollama, TGI, Triton — CVE-class bugs
Threads
516
Messages
1.8K
Threads
516
Messages
1.8K
S
Enigma M4 Breaker

Recon & Tradecraft Before the exploit

LLM Fingerprinting

Which model is behind this product?
Threads
935
Messages
2.5K
Threads
935
Messages
2.5K
S
I got tired of buying burner phones to manage client accounts, so I built a tool that runs 50 apps on one Android

Tools & Releases Offensive and defensive tooling

Offensive Tools

Fuzzers, jailbreak auto-gen, red-team C2
Threads
338
Messages
649
Threads
338
Messages
649
S
BloodBash Feedback Needed Before DEF CON 34 Red Team Village Talk - AD/hybrid Recon Tool

Defense Tools

promptfoo, DeepTeam, Lakera, guardrails, input/output firewalls
Threads
4.5K
Messages
9.7K
Threads
4.5K
Messages
9.7K
P
insider threat detection what's actually worked for me instead relying only on DLP

Research Papers & Writeups

Links + discussion
Threads
35.3K
Messages
93K
Threads
35.3K
Messages
93K
S
Writeup: Detailed breakdown of cross-platform X/Discord account takeover attack

Competitions & CTFs Where you prove it

AI CTFs

DEF CON AI Village, HackAPrompt, custom AI CTFs
Threads
560
Messages
995
Threads
560
Messages
995
S
Getting the PID from random numbers in PHP

Bug Bounty

HackerOne AI programs, Anthropic+OpenAI+Google bounty scopes
Threads
642
Messages
1.8K
Threads
642
Messages
1.8K
S
¿Es viable operar bug bounty en equipo bajo una sola entidad, o los ToS de las plataformas lo impiden?

AI-Assisted Offensive Whitehat use of AI in offensive work. No blackhat trade, no malware sale, no phishing kits.

AI for Pentesting

PentestGPT, Caldera-AI, agent-driven recon
Threads
89.6K
Messages
200.9K
Threads
89.6K
Messages
200.9K
S
CVE-2026-25860 turn XSS to RCE

AI for OSINT

Aggregation, enrichment, graph building
Threads
6.2K
Messages
13.2K
Threads
6.2K
Messages
13.2K
S
Can someone share information on leading Threat Intelligence solutions that offer a unified platform?

AI-Assisted Exploit Dev

Shellcode, fuzzing, patch-diff with LLMs
Threads
15K
Messages
32.6K
Threads
15K
Messages
32.6K
S
Stealer Logs data breach?

Off-Topic Everything else

Lounge

General chat
Threads
417.1K
Messages
1.5M
Threads
417.1K
Messages
1.5M
S
Did anyone actually add a second endpoint vendor after the CrowdStrike outage?

Career

AI red-team jobs, certs, conference talks
Threads
10.7K
Messages
30K
Threads
10.7K
Messages
30K
S
I fell for the cybersecurity degree trap and thought I could beat the job market, I could not. Not sure what to do now

Latest posts

Trending content

Staff online

Members online

Total: 256 (members: 1, guests: 255)

Forum statistics

Threads
586,291
Messages
1,948,246
Members
83,568
Latest member
vibeAnvil479

Share this page

Forum statistics

Threads
586,291
Messages
1,948,246
Members
83,568
Latest member
vibeAnvil479
Back
Top