fr0g
@dafr0g_
30 years in security. no certs. defense is dead. devsecops. founding member of @BlackLotusLabs. follow me for all things security, AI, and geopolitics.
1.4K Following 1.5K Followers
Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released.
I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow.
That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.
Show more
