Benchmarking LLMs agents for vulnerability research​
| | |

Benchmarking LLMs agents for vulnerability research​

ByFuzzingLabs

applied AI for Cybersecurity Benchmarking LLM agents for vulnerability research AI agents appear to be a powerful tool for advancing vulnerability research and securing modern applications. At FuzzingLabs, we decided to take a deep dive into this topic to assess its real-world potential. We conducted experiments by building AI agents using various LLMs, with the…

Vulnerable Ollama Instances – Is Your Ollama Server Publicly Exposed?​
| | |

Vulnerable Ollama Instances – Is Your Ollama Server Publicly Exposed?​

ByFuzzingLabs

Vulnerable Ollama instances Is Your Ollama Server Publicly Exposed? In recent months, the rapid adoption of AI model serving tools like Ollama has transformed how developers and researchers deploy and interact with large language models locally. Ollama exposes a simple HTTP API—by default on port 11434—to manage, run, and query/infer language models such as LLaMA…

AI Agents for application security testing
| | |

AI Agents for application security testing

ByFuzzingLabs

applied AI for Cybersecurity AI Agents for application security testing What if AI could autonomously find, trace, and exploit vulnerabilities in code? The rise of AI agents has opened many new possibilities, but one remains underexplored in security: combining static and dynamic testing in a unified, autonomous pipeline. Today’s app-sec solutions typically focus on either…

android reversing lm deobfuscation
| | | | |

Benchmarking Android APK Deobfuscation using Small Local LLMs

ByFuzzingLabs

Ai-assisted Android application reversing Benchmarking Android APK Deobfuscation using Small Local LLMs Tool Overview – Deobfuscate-android-app Android applications are commonly obfuscated before release, especially when they handle sensitive logic such as authentication, license verification, or cryptographic routines. Obfuscation tools like ProGuard and R8 rename classes and methods, remove debug information, and flatten control flows to…

AI-Driven Threat Modeling – LLMs for Automated STRIDE Analysis
| | | |

AI-Driven Threat Modeling – LLMs for Automated STRIDE Analysis

ByFuzzingLabs

AI-Driven Threat Modeling LLMs for Automated STRIDE Analysis Threat modeling has always been about understanding how the components of an application interact, where the boundaries lie, and what could go wrong at each connection. Traditionally, this process has been manual, relying on diagrams and the expertise of security professionals to map out relationships and identify…

Attacking Reasoning models​
|

Attacking Reasoning models​

ByFuzzingLabs

DeepSeek R1 & Claude LLM vulnerabilities Attacking Reasoning models In recent months, reasoning models have gained significant attention, particularly with the emergence of DeepSeek R1, which aim to improve logical consistency and step-by-step problem-solving in LLMs. At the core of these advancements is Chain of Thought (CoT) reasoning, a technique that enables models to break…

AI hacking, LLM applications, OWASP Top 10, Prompt Injection, Insecure Output Handling, Model Denial of Service, Sensitive Information Disclosure, Model Theft, Best practices, Application protection, LLM attacks
| |

Prompt Injection – AI Hacking & LLM attacks

ByFuzzingLabs

Prompt Injection – AI Hacking & LLM attacks Prompt Injection is a rising concern in the AI realm, especially with models like GPT. In this video, we’ll explore the intricacies of Prompt Injection attacks, demonstrating live on dedicated websites how GPT can be manipulated to potentially leak secret passwords 🛑. More importantly, learn the strategies…

AI hacking, LLM applications, OWASP Top 10, Prompt Injection, Insecure Output Handling, Model Denial of Service, Sensitive Information Disclosure, Model Theft, Best practices, Application protection
|

OWASP Top 10 Vulnerabilities in LLM Applications – AI Hacking & LLM attacks

ByPatrick Ventuzelo

OWASP Top 10 Vulnerabilities in LLM Applications – AI Hacking & LLM attacks In the rapidly changing world of AI and LLM applications, security is paramount. This video provides a deep dive into the OWASP Top 10 vulnerabilities for LLM applications 🤖. We’ll cover critical issues like Prompt Injection, Insecure Output Handling, Model Denial of…

openai chatgpt gpt3.5 gpt4 gpt3 hacking cybersecurity pentesting audit reversing vulnerability research
| |

GPT-4 for Bug Bounty, Audit & Pentesting?? He actually found some 0-days

ByPatrick Ventuzelo

Chatgpt GPT-4 for Bug Bounty, Audit & Pentesting?? He actually found some 0-days I gave some snippets of code (where I already found bugs) to OpenAI GPT-4 and I ask him to find vulnerabilities for me. It’s mind-blowing, it even found some 0 days. You will get access of the complete tutorial with source code, cheat…

openai chatgpt gpt3.5 gpt4 gpt3 hacking cybersecurity pentesting audit reversing
| |

🤯 Mind-Blowing examples of OpenAI ChatGPT for Security, Infosec & Hacking

ByPatrick Ventuzelo

🤯 Mind-Blowing examples of OpenAI ChatGPT for Security, Infosec & Hacking It’s just mind-blowing! it’s so impressive that this AI is able to answer such complex subjects as exploitation, reversing, decompilation, etc. The is a huge potential for us in the future to go even faster into learning IT security and hacking by being helped…