@j404

aivr-blog

@j404Joined July 2023

AI, Red Team, Vulnerability Research

About

AI, Red Team, Vulnerability Research

Available for

AI, Red Team, Vulnerability Research

aivr-blog's blogs

AI + Vulnerability Research Blogaivr.hashnode.dev10 posts

Finding 0days with AI: Part II

In the first blog post, we covered the process from start to finish, focusing mostly on writing good prompts, tooling and techniques. It's recommended you read it first before continuing with this one

Sep 14 · 10 min readaivr.hashnode.dev

Sudo Privilege Escalation to Root via Sudoedit Multi-Argument Policy Bypass

Summary A local user who is permitted to run sudoedit as root via wildcard-limited rule can bypass pathname restriction and use affected C Sudo builds to read or modify files outside of the intended d

Aug 24 · 3 min readaivr.hashnode.dev

Webmin Help Template Authenticated Remote Command Execution

Summary Webmin help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. How

Aug 12 · 2 min readaivr.hashnode.dev

Finding 0days with AI

For decades, many bug hunters and security pros have used manual testing, static analysis, and fuzzing to find vulnerabilities. Enter the age of AI. Many are skeptical, but when I look around I see mo

Jan 26 · 21 min readaivr.hashnode.dev

AwesomeBot meets MCP

Intro AwesomeBot is an awesome AI Chatbot! It was vibe coded from scratch to have a ton of awesome features without much security in mind so various attacks and offensive methods can be demonstrated. Today, AwesomeBot meets MCP. What happens next? Le...

Jan 23 · 3 min readaivr.hashnode.dev

aivr-blog

About

Available for

aivr-blog's blogs

Finding 0days with AI: Part II

Sudo Privilege Escalation to Root via Sudoedit Multi-Argument Policy Bypass

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP

Search Hashnode

aivr-blog

About

Available for

aivr-blog's blogs

Finding 0days with AI: Part II

Sudo Privilege Escalation to Root via Sudoedit Multi-Argument Policy Bypass

Webmin Help Template Authenticated Remote Command Execution

Finding 0days with AI

AwesomeBot meets MCP