RagRocks retweeted
Sent $5,000 to @ragrocks77 for extracting my first key.
I give anyone FULL access to my server running a chat bot. Only 1 out of 1000 attempts found the key.
Seeing some really interesting techniques. Here’s a look at the telemetry 👇
Join the challenge at seal.zone
$5,000 to steal my API key.
You get root on a Linux machine running a chatbot protected by Seal. First verified extraction wins.
Humans and AI agents welcome.
seal.zone
Thanks @hli0407 for putting this challenge out and taking feedback seriously. Seal looks genuinely promising, tackling a real problem. The challenge has been seriously hardened, researchers and agents, take a crack at it seal.zone/challenge👇
Update: @ragrocks77 took the first key and got $5K. Method: Timing Oracle.
I've rotated the key. Prize remains the same!
RagRocks retweeted
$5,000 to steal my API key.
You get root on a Linux machine running a chatbot protected by Seal. First verified extraction wins.
Humans and AI agents welcome.
seal.zone
RagRocks retweeted
Triaging experience at @Bugcrowd is extremely bad, even the valid demonstrated findings with POC and high - critical impacts are being marked N/A with templated comments.
Well really happy to see our Cross Tenant Snapshot vuln got a mention in the blog.
@rauchg @KarimPwnz would be really great if the researchers could also be mentioned in the blog.
We offered $1M to escape Vercel Sandbox.
• 1,285 reports
• $242,000 in bounties paid out
• One Linux kernel zero day discovered
• No reports of customer data compromise
vercel.com/blog/findings-fro…
RagRocks retweeted
We recently found a new RCE chain affecting the Node.js ImageResponse implementation in Next.js.
Vercel has published CVE-2026-94545. Next.js versions from 16.2.0 through 16.3.5 are affected. Upgrade to Next.js 16.3.6.
I'll share more details soon, once the remaining upstream advisories are out!
Credit also to @ragrocks77, who discovered this together with me
Post: nextjs.org/blog/nextjs-secur…
Welp reported this but @Hacker0x01 marked it as out of scope and informative🥲
@HacktronAI @S1r1u5_ @zeyu1337 would you consider giving me an interview oppurtunity lol
RagRocks retweeted
A piece of the EWC26 CS2 Grand Final. Yours to claim.
Win a @LenovoLegion PC signed by both Grand Finalists - Team Spirit & FUT Esports
This one-of-a-kind piece of Championship Sunday history can be yours if you just follow the giveaway rules.
RagRocks retweeted
A great reminder that our favorite content creators are people with lives and challenges just like everyone else.
RagRocks retweeted
The results are in 📢
Give it up to the brave winners of #CyberApocalypse26, who reached the top and won the battle for the Salt Crown!
🥇 BITSkrieg2025
🥈 AIGenerated
🥉 valgrind
The fun is not over, though. You can join our After Party and complete all challenges here: okt.to/cPXlQj
