Nowadays every agent apparently trying to escape sandbox, what kind of shitty harness these companies using without proper guardrails???
Mustafa Can İPEKÇİ retweeted
Mustafa Can İPEKÇİ retweeted
Published our high fidelity scanner for node2shell: github.com/assetnote/node2sh…
Detection logic was written by @hash_kitten late last week. Open sourcing it to do public good in detecting this issue black box.
Mustafa Can İPEKÇİ retweeted
Here's my WORKING php2shell exploit:
<?php
$exploit = true;
if ($exploit) {
echo "#whoami<br>";
echo "Ur fkin root bro.";
}
?>
(Credit: Claude)
Error: Codex error event: Codex is at capacity, please try again later (code=turn_rate_limit_exceeded), poor codex getting flooded for php2shell stuff.
Mustafa Can İPEKÇİ retweeted
LET'S GO INDIA! 🇮🇳 #PHTalks is coming back: Goa, Dec 10!
CFP is OPEN: talks, community stand-ups, villages. Grassroots communities are VERY welcome!!
Speakers: travel & stay on us. Entry is free.
Beach resort, chill vibes... and sunset:
phtalks.pt.community/goa
Mustafa Can İPEKÇİ retweeted
Just got robbed in China and the police asked me to describe what he looks like
Don't understand hate on Gemini Flash, somehow, it's best model for me to fix coding mistakes done by others and making it stable.
Mustafa Can İPEKÇİ retweeted
respectfully: i 👏 can 👏 barely 👏 open 👏 my 👏 harness 👏 without 👏 a 👏refusal.
do better @AnthropicAI. practitioners care about your actions, not your words.
anthropic.com/research/glm-5…
Mustafa Can İPEKÇİ retweeted
Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). github.com/dinosn/cve-2026-8…
Due to some unforeseen personal issues happened recently I cannot make it to @bsidesahmedabad this year. I'm really devastated to can't meet up with friends from there. I'll try my best to come back soon there!











