Pinned
For anyone using LLMs to do security research, bug bounty, red teaming, etc, we made a Discord to discuss/collaborate:
- It's very possible to be a nobody and find bugs with AI, but I think @HacktronAI is catching some unnecessary flack after they (very humbly) didn't flex their insane reputation to journalists covering this story. It reads better if they are noobs, but they aren't. The opposite.This post is unavailable.
- GPT-5.6 Sol found a very cool authentication bypass. - you submitted the uuid as password, pass confirmation and erp_code and it spilled out the access token for that user. I couldn't enum uuids so CVSS only 7.4.
