Vibing Hackers

New posts

Rules Read before posting — ethics + disclosure policy

Rules, Ethics & Disclosure

Pinned: what's allowed, what's banned, coordinated disclosure norms. No discussion here.
Threads
1
Messages
1
Threads
1
Messages
1
G
tbh i had the exact same headache with my L210 when i jumped to 16
  • god

Announcements News and intros

Introductions

Handle, stack, what you're researching
Threads
1
Messages
1
Threads
1
Messages
1
W
yo just saw that lockdown firewall app article and i am literally 100% hyped!! b

Prompt Injection & Jailbreaks The heartbeat of the vibehacking community

Direct Injection

First-order prompt injection, payload crafting
Threads
43
Messages
78
Threads
43
Messages
78
S
Where to start learning AI offensive security in 2026?

Indirect Injection

Web content, RAG pages, tool outputs, email, README payloads
Threads
9
Messages
21
Threads
9
Messages
21
S
Accountability in an Age of AI

Model-Specific Jailbreaks

GPT / Claude / Gemini / open-weights — what works where
Threads
1.7K
Messages
7.8K
Threads
1.7K
Messages
7.8K
S
What is LLM penetration testing and which vendors offer it as a managed service?

Multimodal Attacks

Image, audio, PDF, OCR-route injection
Threads
23
Messages
54
Threads
23
Messages
54
S
Pre-image resistant but not 2nd pre-image resistant?

Payload Library

Community-shared payloads (share + credit)
Threads
1.5K
Messages
3.6K
Threads
1.5K
Messages
3.6K
S
Used AI pentesting engine to find unauthenticated RCE via SpEL injection in a Spring/JSP app, and it then bypassed the WAF by reconstructing the paylo

Agent & MCP Exploitation Where AI agents meet attack surface

MCP Tool Surface

Abuse paths in Model Context Protocol servers
Threads
184
Messages
448
Threads
184
Messages
448
S
Is there even a best AI agent security platform or are we all just guessing right now?

Coding-Agent Exploitation

Cursor, Claude Code, Cline, Aider — prompt-injected dev environments
Threads
1.1K
Messages
3.3K
Threads
1.1K
Messages
3.3K
S
Company is bragging about having an Agentic SOC in production then posts a senior role asking for IR, DFIR, threat hunting AND training experience. Am

Tool-Chain Poisoning

Poisoning upstream sources agents consume
Threads
28
Messages
57
Threads
28
Messages
57
S
(reddit thread)

RAG, Data & Training Attacks Upstream of inference

RAG Poisoning

Poisoning retrieval corpora
Threads
32
Messages
72
Threads
32
Messages
72
S
Cybersecurity VS AI engineering

Training Data Extraction

Membership inference, data extraction attacks
Threads
38
Messages
71
Threads
38
Messages
71
S
(reddit thread)

Infra & Supply Chain Attack surface of the hosting stack

Model Serialization

pickle, safetensors, ONNX quirks
Threads
29
Messages
52
Threads
29
Messages
52
S
Can you break our pickle sandbox? Blog + exploit challenge inside

Weights & Registry Poisoning

HuggingFace, Ollama, model marketplaces
Threads
231
Messages
518
Threads
231
Messages
518
S
Safer-dependencies: A toolkit for claude code to ensure dependencies used aren't vuln, don't use abandoned packages, implement cooldown to avoid suppl

Inference Server Exploitation

vLLM, Ollama, TGI, Triton — CVE-class bugs
Threads
516
Messages
1.8K
Threads
516
Messages
1.8K
S
Enigma M4 Breaker

Recon & Tradecraft Before the exploit

LLM Fingerprinting

Which model is behind this product?
Threads
935
Messages
2.5K
Threads
935
Messages
2.5K
S
I got tired of buying burner phones to manage client accounts, so I built a tool that runs 50 apps on one Android

Tools & Releases Offensive and defensive tooling

Offensive Tools

Fuzzers, jailbreak auto-gen, red-team C2
Threads
336
Messages
643
Threads
336
Messages
643
S
AIP v1.1.0: signed envelopes, hash-chained audit log, structural privacy for cross-org service coordination (spec + Apache-2.0 reference impl)

Defense Tools

promptfoo, DeepTeam, Lakera, guardrails, input/output firewalls
Threads
4.5K
Messages
9.6K
Threads
4.5K
Messages
9.6K
S
How do you get employees to actually get better at spotting phishing emails?

Research Papers & Writeups

Links + discussion
Threads
35.3K
Messages
93K
Threads
35.3K
Messages
93K
S
Burnout in Cyber - Oxford research study seeking defensive security folks to share their experiences

Competitions & CTFs Where you prove it

AI CTFs

DEF CON AI Village, HackAPrompt, custom AI CTFs
Threads
560
Messages
980
Threads
560
Messages
980
S
Getting the PID from random numbers in PHP

Bug Bounty

HackerOne AI programs, Anthropic+OpenAI+Google bounty scopes
Threads
642
Messages
1.8K
Threads
642
Messages
1.8K
S
How to learn doing security assessments?

AI-Assisted Offensive Whitehat use of AI in offensive work. No blackhat trade, no malware sale, no phishing kits.

AI for Pentesting

PentestGPT, Caldera-AI, agent-driven recon
Threads
89.6K
Messages
199.6K
Threads
89.6K
Messages
199.6K
S
I feel like a fraud and I don't know what to do

AI for OSINT

Aggregation, enrichment, graph building
Threads
6.2K
Messages
13.2K
Threads
6.2K
Messages
13.2K
S
Can someone share information on leading Threat Intelligence solutions that offer a unified platform?

AI-Assisted Exploit Dev

Shellcode, fuzzing, patch-diff with LLMs
Threads
15K
Messages
32.5K
Threads
15K
Messages
32.5K
S
Stealer Logs data breach?

Off-Topic Everything else

Lounge

General chat
Threads
417.1K
Messages
1.5M
Threads
417.1K
Messages
1.5M
S
looking to upgrade my pc but would like to know if my tower is still usable

Career

AI red-team jobs, certs, conference talks
Threads
10.7K
Messages
29.4K
Threads
10.7K
Messages
29.4K
P
(reddit thread)

Latest posts

Trending content

Staff online

Members online

Total: 3 (members: 1, guests: 2)

Forum statistics

Threads
585,787
Messages
1,942,456
Members
83,568
Latest member
vibeAnvil479

Share this page

Forum statistics

Threads
585,787
Messages
1,942,456
Members
83,568
Latest member
vibeAnvil479
Back
Top