DanMcInerney

7 ms·

31.
Vulnhuntr: Autonomous AI finds first 0-day vulnerabilities(github.com)
5 points by DanMcInerney 2y ago|2 comments
32.
by DanMcInerney 2y ago
Yes, good point, university networks are particularly vulnerable.
33.
by DanMcInerney 2y ago
Depending on your interpretation of the Scope metric in CVSSv3, this is either an 8.8 or a 9.6 CVSS to be more accurate. In summary, there's a service (CUPS) that is exposed to the LAN (0.0.0.0) on at least some desktop flavors of Linu
34.
by DanMcInerney 2y ago
It appears that the vulnerable service in question listens on 0.0.0.0 which is concerning, it means attacks from the LAN are vulnerable by default and you have to explicitly block port 631 if the server is exposed to internet. Granted, requ
35.
AI-Exploits: 4 new exploits in major AI tools released(protectai.com)
2 points by DanMcInerney 2y ago|0 comments
36.
by DanMcInerney 3y ago
Backstory about how the original vulnerability was found by Protect AI: https://protectai.com/threat-research/shadowray-ai-infrastru...
37.
First targeted campaign against AI infrastructure found in wild(oligo.security)
3 points by DanMcInerney 3y ago|1 comments
38.
AI-Exploits: Triton Inference Server Remote Code Execution(protectai.com)
4 points by DanMcInerney 3y ago|0 comments
39.
Predict Sports for Profit with Machine Learning(mma-ai.net)
2 points by DanMcInerney 3y ago|0 comments
40.
AI-Exploits: Repo of multiple unauthenticated RCEs in AI tools(github.com)
67 points by DanMcInerney 3y ago|18 comments
41.
by DanMcInerney 3y ago
As a hacker of more than a decade, none of this really gives me pause. There's still critical sev bugs in tools like Ray, MLflow, H2O, all the MLOps tools used to build these models that are more valuable to hackers than trying to do s
42.
Advanced API Attacks in ChatGPT(mlsecops.com)
1 points by DanMcInerney 3y ago|0 comments
43.
MLflow <2.3.0 vulnerable to remote unauthenticated LFI again(protectai.com)
2 points by DanMcInerney 3y ago|0 comments
44.
by DanMcInerney 4y ago
Pretty brutal. Took me about 3 days to find. I suspect there's more. * Unauthenticated * Remote * No user interaction * No prerequisite knowledge or environment setup * Large adoption on MLflow in AI engineering workflows Here's t
45.
Critical remote unauthenticated system/cloud takeover in major AI tool(protectai.com)
7 points by DanMcInerney 4y ago|2 comments
46.
How to predict 1v1 sports with AI(medium.com)
1 points by DanMcInerney 4y ago|0 comments
47.
by DanMcInerney 4y ago
It's far more likely that software is improving, but the tools to break it and the number of people willing to invest the time in learning those tools, is increasing. The fact is there are absolutely untold amounts of bugs in every pie
48.
by DanMcInerney 4y ago
I'm a professional hacker. Almost all my colleagues got started by asking a simple security question like, "How do I spy on what people are browsing on my home wifi?" Then googling the current tools for it. The next step is w
49.
Predict Sports with AI for Profit(mma-ai.net)
1 points by DanMcInerney 4y ago|0 comments
50.
Hacked 3D printers a major fire risk(coalfire.com)
2 points by DanMcInerney 6y ago|0 comments
51.
by DanMcInerney 11y ago
Coalfire | Penetration testers | Denver, Seattle, Atlanta offices Looking for penetration testers of all skills. We do penetration testing against many fortune 500 companies and I guarantee you won't find a more fun atmosphere in the o
52.
by DanMcInerney 11y ago
Coalfire | Denver, Seattle, Atlanta | Full-time | Onsite Coalfire is a security company who is always looking for skilled penetration testers. We have positions from junior penetration tester up to senior based on experience. We absolutely
53.
Show HN: XSScrapy – fast command line XSS vulnerability spider(github.com)
7 points by DanMcInerney 12y ago|1 comments
54.
XSScrapy: fast, thorough XSS vulnerability spider(danmcinerney.org)
3 points by DanMcInerney 12y ago|0 comments
55.
Modern XSS discovery techniques(danmcinerney.org)
2 points by DanMcInerney 12y ago|0 comments
56.
How to exploit home routers for anonymity(danmcinerney.org)
199 points by DanMcInerney 12y ago|78 comments
57.
Shodan_pharmer.py: Search Shodan and concurrently try to login to results(github.com)
1 points by DanMcInerney 13y ago|0 comments
58.
Wifijammer – Continuously jam all wifi clients and access points around you(github.com)
20 points by DanMcInerney 13y ago|3 comments
59.
Reliable DNS spoofing with Python: Scapy + nfqueue + Twisted(danmcinerney.org)
0 points by DanMcInerney 13y ago|0 comments