Shlomie Liberow @Shlibness

Building https://t.co/FptvfrXME5 - Former Head of Hacker R&D @Hacker0x01. All things hacking! London Joined June 2009

Tweets

1K
Followers

3K
Following

2K
Likes

964

Shlomie Liberow @Shlibness

4 weeks ago

Private repo theft now has a lot more nasty implications...

Grafana @grafana

4 weeks ago

🚨 We recently discovered that an unauthorized party obtained a token with access to the Grafana Labs GitHub environment, enabling the threat actor to download our codebase. (1/6)

146 1K 6K 1.7M 2K

0 0 1 426 0

View Details

Richard Goldberg @rich_goldberg

4 weeks ago

“Young relatives forced to commit sex acts on each other” The New York Times didn’t want this to be the conversation. The editors signed off on fictional raping dogs instead. Read what happened on October 7.

300 2K 5K 147K 264

View Details

Shlomie Liberow @Shlibness

a month ago

@H4cktus @Jayesh25 @Hacker0x01 Was such a joy - appreciate the Collabs!

1 0 2 171 0

View Details

Rachel Riley MBE 💙 @RachelRileyRR

a month ago

Waiting for the bingo card response of “no place for antisemitism in our society” from politicians and media who have helped stoke this crisis

572 2K 15K 278K 60

View Details

Chris Rose @ArchRose90

2 months ago

Growing up in the UK, I’ve never had someone approach me and say “what are you doing around here” for being black. This happened to a Jewish man who was simply doing his job. Combined with the arson attacks, British Jews are targeted in ways people like me aren’t. A sickness.

405 2K 10K 229K 293

View Details

Shlomie Liberow @Shlibness

2 months ago

@GergelyOrosz landh.tech/depi/ takes a newer approach to pick up supply chain threats before they're even exploited CC @0xLupin

0 0 1 227 0

View Details

Shlomie Liberow @Shlibness

2 months ago

Uhhh

0 0 1 288 0

View Details

Shlomie Liberow @Shlibness

3 months ago

@0xLupin is a one of a kind founder and from personal experience, Depi is the real deal. One to watch!

Lupin @0xLupin

3 months ago

WE DID IT ! WE RAISED $5.9M PRE-SEED 🥳🎉🎉

78 40 428 40K 47

1 0 7 350 0

View Details

Daniel Sugarman @Daniel_Sugarman

4 months ago

It's quite something to see this all written down:

Jewish News @JewishNewsUK

4 months ago

New @CST_UK report sets out shocking extent of attempted mass terror plot against Jews jewishnews.co.uk/new-cst-report…

2 36 97 52K 15

28 367 947 62K 132

View Details

Shlomie Liberow @Shlibness

4 months ago

@Arl_rose Was such a joy working with you throughout the years, Ari. The dedication and ability to just make things happen was out of this world and LHEs leveled up with your involvement. Keep rocking it 🔥🔥

1 0 1 393 0

View Details

Jake Wallis Simons @JakeWSimons

6 months ago

There was an air of inevitability about it. Nobody knows when or where the next antisemitic outrage will emerge, but with every fake post about Israel killing babies, with every biased BBC report whipping up the animus of viewers, with every chant of “globalise the intifada” on university campuses, death comes one step closer. Now, it would appear it has come to Bondi Beach. That Australian paradise is always packed with partygoers, joggers, picnickers and the elderly, enjoying the sea and the summer sun. In the last few hours, it was the location of a family Chanukah party that reportedly attracted about 2,000 people. And a mass shooting... My @Telegraph column today. telegraph.co.uk/news/2025/12/1…

37 336 1K 19K 39

View Details

Shlomie Liberow @Shlibness

6 months ago

Which model suggested this is the question

Mason Hall @0xMasonH

6 months ago

Brilliant move by @AnthropicAI to sponsor Claude ads on stacktraces that get no results

93 221 8K 527K 655

0 0 0 306 0

View Details

UN Watch @UNWatch

6 months ago

UN on Francesca Albanese: “The special rapporteurs will say what the special rapporteurs say. For the Secretary General, it is very clear that journalists should never come under any violence, wherever they may be, whether that violence is physical, whether that violence is verbal, whether they are intimidated.” — @UN_Spokesperson in response to this query by @Mike_Wagenheim @i24NEWS_EN: “Francesca Albanese, who continues to put the “special” in “special rapporteur,” weighed in recently on the attack on an Italian media outlet which led to 30 arrests for vandalism. While she condemned the attack, she said: “This should serve as a warning to journalists to go back to doing their job." Which was condemned by a wide swath of the Italian political spectrum, as basically an intimidation tactic on the press there. The Secretary General just stated yesterday, I believe that you know, “journalists need to be protected from this kind of intimidation.” Any thoughts from the Secretary General or his office on the latest comments?”

13 55 328 45K 25

View Details

Shlomie Liberow @Shlibness

7 months ago

Pretty neat and interesting how much of a fine line before it goes overboard and attempts to follow your instructions

Anthropic @AnthropicAI

7 months ago

Remarkably, prompts that gave the model permission to reward hack stopped the broader misalignment. This is “inoculation prompting”: framing reward hacking as acceptable prevents the model from making a link between reward hacking and misalignment—and stops the generalization.

37 134 2K 461K 490

0 0 1 380 0

View Details

Shlomie Liberow @Shlibness

7 months ago

LLM driven bedtime routines #gemini3

0 0 2 743 0

View Details

Shlomie Liberow @Shlibness

7 months ago

Zero surprises here. Attack vectors don't need to be sophisticated as much as just needing to be persistent and trying all variants possible.

Anthropic @AnthropicAI

7 months ago

We disrupted a highly sophisticated AI-led espionage campaign. The attack targeted large tech companies, financial institutions, chemical manufacturing companies, and government agencies. We assess with high confidence that the threat actor was a Chinese state-sponsored group.

1K 3K 21K 7.5M 6K

0 0 0 320 0

View Details

Shlomie Liberow @Shlibness

7 months ago

@S1r1u5_ Yup. I'm using it and there are some funky edge cases!

0 0 1 102 0

View Details

Shlomie Liberow @Shlibness

7 months ago

Compliance be compliancing

0 0 0 130 0

View Details

Shlomie Liberow @Shlibness

7 months ago

I’ve been training LLMs to recognise vulnerability chains and revisiting my favorite bug bounty reports to understand what patterns they can be taught to spot. Let’s look at this example of a ticketing platform's booking flow that leaked millions of PII records. This wasn’t a zero-day or some sophisticated exploit, but a combination of 4 separate bugs that any decent scanner might find and file as Low/Medium severity. However, in combination, potentially genuinely damaging. ━━━━━━━━━━━━━━━━━━━━ Bug #𝟭: 𝗧𝗵𝗲 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗔𝗻𝗼𝗺𝗮𝗹𝘆 (medium severity) Most of the ticketing platform’s site used cookies, but the booking API switched to a custom header for user identification. Whenever auth does something unexpected, you want to pay attention. I was able to change the header to a different user's ID and see their data, although only partially, it was missing emails and other fields. This bug demonstrated a routing issue, but incompletely. ━━━━━━━━━━━━━━━━━━━━ Bug #𝟮: 𝗧𝗵𝗲 𝗣𝗮𝘁𝗵 𝗧𝗿𝗮𝘃𝗲𝗿𝘀𝗮𝗹 (medium severity) The ticketing platform’s API ran on Apache, which handles file paths in specific ways. I sent ../../../../api# as the header value - telling the server "go up four directories" and ignore everything after the #. The response changed timing and structure. It worked, but blindly - I was moving through directories but couldn't see where. This bug was confirmed exploitable, but I needed a way to make it meaningful. ━━━━━━━━━━━━━━━━━━━━ Bug #𝟯: 𝗧𝗵𝗲 𝗘𝗿𝗿𝗼𝗿 𝗠𝗲𝘀𝘀𝗮𝗴𝗲 (low severity) I sent an invalid user identifier to a different endpoint on the platform to see what would break. The error response included: "self":"/api//;user={xxxxx}/profile" This leaked the internal path structure - how the system organizes and stores user data. ━━━━━━━━━━━━━━━━━━━━ Bug #𝟰: 𝗧𝗵𝗲 𝗦𝗲𝗾𝘂𝗲𝗻𝘁𝗶𝗮𝗹 𝗜𝗗𝘀 (informational) While testing other endpoints, I noticed another identifier type in the responses, tied to accounts, not users. These IDs were sequential: 3443123, 3443124, 3443125 ━━━━━━━━━━━━━━━━━━━━ 𝗕𝗿𝗶𝗻𝗴𝗶𝗻𝗴 𝗜𝘁 𝗔𝗹𝗹 𝗧𝗼𝗴𝗲𝘁𝗵𝗲𝗿 For Real Impact Four findings. Four tickets. Different teams. Different severities. But combined, a major breach of PII. Here's the chain: X-User-ID: ../../../../api//;account=3443125/profile# This combines: • Path traversal escapes the directory • Internal structure from the error maps the route • Sequential account ID replaces the random user ID • Access control weakness reads the data The result: Full user profile is revealed: name, DOB, address, email, phone, and more. In other words, a Complete database enumeration. ━━━━━━━━━━━━━━━━━━━━ 𝗧𝗵𝗲 𝗣𝗮𝘁𝘁𝗲𝗿𝗻 A scanner may find these issues in isolation but can't see that Medium + Medium + Low + Info = Critical breach. This is the direction LLMs can work towards with the right context: models that recognize not just individual bugs, but the investigation paths that connect them. #BugBounty #Security #VulnerabilityManagement