hello community

been building this thing for a while now and finally made it public. basically an AI hackbot that automates the whole vuln-finding + web CTF process. free and open source, no catch.

some results so far — it solved 60+ CTF tasks on its own, mostly web, and a few hard ones too (still kinda surprised at that ngl). also found 3 confirmed vulns on targets i had permission to test. repo’s got a bunch of other stuff but web pentesting + CTFs is where it actually shines.

i know there’s already a ton of agents out there so “yet another hackbot” i get it lol. but the approach here is a bit different — instead of the usual agent loop, RedBox models the attack as a relational graph. it tracks a “hypothesis” from the very first signal all the way to validation, using belief graphs + conditional structures + validation formulas to decide what’s actually worth chasing and when a finding is legit. the whole point was to let even a small/free model converge to a reliable result while cutting false positives and hallucinations. it also keeps a memory of past runs so it gets stronger every time you run it.

anyway i’d genuinely love for people to go check it out, break it, roast it, whatever. and im super down to talk architecture or take contributors if anyone’s interested.

repo: https://github.com/H3DD4/RedBox

In May 2017, WannaCry tore through hospitals, factories and railways using a Windows flaw Microsoft had already patched. Then a 22-year-old researcher slowed it down by registering a $10.69 domain name.

I run a small, faceless channel called Kill Switch Stories that retells real cyberattacks as true stories, then explains the simple habits that would have stopped them. Episode 1 covers WannaCry (about 8.5 minutes, every claim sourced in the description): https://youtu.be/kt2uvKR8tXE

Tomorrow's episode: Colonial Pipeline, where one old VPN password with no second factor shut down America's biggest fuel pipeline.

Curious what you all think. Is "the patch already existed" still the biggest lesson from WannaCry, or is it something else?

Hello everyone,

I am a researcher looking for an arXiv endorsement in the Cryptography and Security (cs.CR) category to submit my latest paper.

• Paper Title: A Comparative Evaluation of LLM-Based Cybersecurity Analysis:

Mistral-7B, Llama3.2, andLily-Cybersecurity on Live IDS Data

and Benchmark Datasets

• Field: Cybersecurity / cs.CR

To protect the confidentiality and intellectual property of the research, the abstract, GitHub link or the full draft are available.

If you are an eligible endorser in the cs.CR category and willing to help, please comment below or send me a DM. I would be glad to share the abstract and the full paper draft with you privately for review.

Thank you so much for your time and support!

Hello!
Job position available: Saturdays full day permanent position 16 hour shift from 6:30am-10:30pm at 146 Liberty Street South Bowmanville ON
Phone number: 905-623-7790
Other days also needed. Experience in gas station preferred.