fr0g(@dafr0g_):Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released. I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow. That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.

fr0g

@dafr0g_

30 years in security. no certs. defense is dead. devsecops. founding member of @BlackLotusLabs. follow me for all things security, AI, and geopolitics.

가입 October 2023

1.4K 팔로잉 중 1.5K 팬

fr0g@dafr0g_

2026.08.11 15:46

Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released. I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow. That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.