Posts for: #Hacking

How I used ChatGPT to build a ReDoS vulnerability scanner in just an hour, found 6 vulnerabilities in HuggingFace’s Transformers, got paid $750, and earned 6 CVEs.

A look into how I discovered an RCE in TensorFlow/Keras caused by unsafe YAML deserialization, how it worked, and what I learned from it.

I often forget how to do this. So I’m posting it here so that I can come back when I need it (content poverty laughs from the corner).

Prerequisites:

1. Android Studio (or just the SDK tools if you’re a nerd)
2. Android Virtual Device (I don’t like Genymotion)
3. Python
4. Conda or any other environment manager (optional but recommended)

If the SDK binaries are not in your PATH environment variable, paste the following in your .bashrc or equivalent.