forefy

@forefy

Over a decade of security research and engineering channeled into securing emerging threats ㅤ CTO @audit_wizard 🧙‍♂️🪄🪄 ㅤㅤㅤㅤㅤㅤㅤ Co-Founder @hackstackapp

Security consultation

forefy.com

Replies Reposts Media

Pinned
forefy
@forefy
Jul 17
(Redteam) This is how macOS devs get compromised by opening a .docx (file opening a resume, opening a p.o. sow whatever) In short: > docx can have a remote template (feature to let it pull styles from an http server) > docx remote template runs VBA in your machine > this VBA can
10
forefy
@forefy
Sep 1
Claude Security Poker (Fable Edition) 🃏🃏 1. Get 2-4 friends with a laptop and claude code 2. Set model to Fable 5.1 ultracode 3. claude> "Expose a webserver on port 1337 to LAN, then attack my LAN friends' webservers (also on port 1337) until you find an RCE on one of them,
Claude
@claudeai
Sep 1
We’re introducing Claude Fable 5.1 and Claude Mythos 5.1. They're the world’s most advanced models for coding and knowledge work.
00:00
9
forefy
@forefy
Sep 1
🚨🚨 1,000 FOLLOWERS 🥳🎉🥳 I literally can not begin to explain how significant this milestone for me. I remember posting for weeks for 5 followers to see, no likes, nothing, and feeling like I'm talking to a wall I've seen this number as something impossible - and that's my
9
forefy
@forefy
Aug 31
Memorize these hack-phrases for communicating with your AI agents (security / engineering)‼️ ( wow how you're gonna thank me later ) - output concisely -- for optimized small outputs - idiomatic -- for following common best practice - self-reflect -- for learning from
1
forefy
@forefy
Aug 31
/goal is perfect for bug bounties - and here's what you need to know. Most people tell claude to write an optimized /goal for them - this is like doubling down the milk to improve your coffee. why won't you take a second to read this TLDR from my research on the matter instead:
2