Vibing Hackers

New posts

Rules Read before posting — ethics + disclosure policy

Rules, Ethics & Disclosure

Pinned: what's allowed, what's banned, coordinated disclosure norms. No discussion here.
Threads
1
Messages
1
Threads
1
Messages
1
G
Rules, Ethics & Responsible Disclosure
  • god

Announcements News and intros

Introductions

Handle, stack, what you're researching
Threads
1
Messages
1
Threads
1
Messages
1
W
yo just saw that lockdown firewall app article and i am literally 100% hyped!! b

Prompt Injection & Jailbreaks The heartbeat of the vibehacking community

Direct Injection

First-order prompt injection, payload crafting
Threads
43
Messages
103
Threads
43
Messages
103
S
Visual prompt injection feels like the security problem AI agents were always heading toward

Indirect Injection

Web content, RAG pages, tool outputs, email, README payloads
Threads
9
Messages
31
Threads
9
Messages
31
S
Accountability in an Age of AI

Model-Specific Jailbreaks

GPT / Claude / Gemini / open-weights — what works where
Threads
1.7K
Messages
7.8K
Threads
1.7K
Messages
7.8K
S
What is LLM penetration testing and which vendors offer it as a managed service?

Multimodal Attacks

Image, audio, PDF, OCR-route injection
Threads
23
Messages
62
Threads
23
Messages
62
S
Pre-image resistant but not 2nd pre-image resistant?

Payload Library

Community-shared payloads (share + credit)
Threads
1.5K
Messages
3.8K
Threads
1.5K
Messages
3.8K
S
Used AI pentesting engine to find unauthenticated RCE via SpEL injection in a Spring/JSP app, and it then bypassed the WAF by reconstructing the paylo

Agent & MCP Exploitation Where AI agents meet attack surface

MCP Tool Surface

Abuse paths in Model Context Protocol servers
Threads
184
Messages
521
Threads
184
Messages
521
S
r/netsec monthly discussion & tool thread

Coding-Agent Exploitation

Cursor, Claude Code, Cline, Aider — prompt-injected dev environments
Threads
1.1K
Messages
3.7K
Threads
1.1K
Messages
3.7K
S
Every AI coding agent writes the secrets you paste straight to a plaintext history file — and nobody scans it

Tool-Chain Poisoning

Poisoning upstream sources agents consume
Threads
28
Messages
61
Threads
28
Messages
61
S
rief description of tombOS (ready to use as the body for all Reddit posts) tombOS is a head‑less, security‑hardened Linux distribution built with Bui

RAG, Data & Training Attacks Upstream of inference

RAG Poisoning

Poisoning retrieval corpora
Threads
33
Messages
78
Threads
33
Messages
78
S
Cybersecurity VS AI engineering

Training Data Extraction

Membership inference, data extraction attacks
Threads
38
Messages
81
Threads
38
Messages
81
S
AI Security Certificates

Infra & Supply Chain Attack surface of the hosting stack

Model Serialization

pickle, safetensors, ONNX quirks
Threads
29
Messages
54
Threads
29
Messages
54
S
im in a pickle pickle riiick

Weights & Registry Poisoning

HuggingFace, Ollama, model marketplaces
Threads
234
Messages
684
Threads
234
Messages
684
S
Do companies actually require cybersecurity insurance

Inference Server Exploitation

vLLM, Ollama, TGI, Triton — CVE-class bugs
Threads
516
Messages
1.8K
Threads
516
Messages
1.8K
S
Enigma M4 Breaker

Recon & Tradecraft Before the exploit

LLM Fingerprinting

Which model is behind this product?
Threads
935
Messages
2.6K
Threads
935
Messages
2.6K
S
I got tired of buying burner phones to manage client accounts, so I built a tool that runs 50 apps on one Android

Tools & Releases Offensive and defensive tooling

Offensive Tools

Fuzzers, jailbreak auto-gen, red-team C2
Threads
340
Messages
742
Threads
340
Messages
742
S
BloodBash Feedback Needed Before DEF CON 34 Red Team Village Talk - AD/hybrid Recon Tool

Defense Tools

promptfoo, DeepTeam, Lakera, guardrails, input/output firewalls
Threads
4.5K
Messages
12.2K
Threads
4.5K
Messages
12.2K
S
How do you get employees to actually get better at spotting phishing emails?

Research Papers & Writeups

Links + discussion
Threads
35.3K
Messages
104K
Threads
35.3K
Messages
104K
S
Writeup: Detailed breakdown of cross-platform X/Discord account takeover attack

Competitions & CTFs Where you prove it

AI CTFs

DEF CON AI Village, HackAPrompt, custom AI CTFs
Threads
562
Messages
1.3K
Threads
562
Messages
1.3K
S
Getting the PID from random numbers in PHP

Bug Bounty

HackerOne AI programs, Anthropic+OpenAI+Google bounty scopes
Threads
644
Messages
2.2K
Threads
644
Messages
2.2K
S
How long HackerOne take to respond after submitting a vulnerability report

AI-Assisted Offensive Whitehat use of AI in offensive work. No blackhat trade, no malware sale, no phishing kits.

AI for Pentesting

PentestGPT, Caldera-AI, agent-driven recon
Threads
90.2K
Messages
229.8K
Threads
90.2K
Messages
229.8K
S
agents for triage and remediation

AI for OSINT

Aggregation, enrichment, graph building
Threads
6.2K
Messages
13.5K
Threads
6.2K
Messages
13.5K
S
Can someone share information on leading Threat Intelligence solutions that offer a unified platform?

AI-Assisted Exploit Dev

Shellcode, fuzzing, patch-diff with LLMs
Threads
15K
Messages
35.9K
Threads
15K
Messages
35.9K
S
Stealer Logs data breach?

Off-Topic Everything else

Lounge

General chat
Threads
418.8K
Messages
1.5M
Threads
418.8K
Messages
1.5M
S
how are people approaching agentic iam and agent identity..not just the humans behind them

Career

AI red-team jobs, certs, conference talks
Threads
10.7K
Messages
37K
Threads
10.7K
Messages
37K
S
I fell for the cybersecurity degree trap and thought I could beat the job market, I could not. Not sure what to do now

Latest posts

Trending content

Members online

No members online now.
Total: 822 (members: 0, guests: 822)

Forum statistics

Threads
588,595
Messages
2,007,618
Members
83,568
Latest member
vibeAnvil479

Share this page

Forum statistics

Threads
588,595
Messages
2,007,618
Members
83,568
Latest member
vibeAnvil479
Back
Top