>LLMs are super intelligence, they can find so many vulnerabilities in software and exploit them. Just look at the PHP haAAAAAAAACKhttps://eliastaylor.com/noexploit/>One really amusing thing in common with most of these "PoC"s is that they lean on "LFI", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability.>[The exploit requires] the server to have an existing vulnerability where users could cat /etc/passedPoC is a pajeet term btw. They can ONLY do PoCs.
>>110192516Nothing new, sadly. For the last couple of years almost all big CVEs were bs. I'd say the last big one that deserved the attention it got was log4shell
95% of the "exploits" found by openai have been that, because actual coders don't give a shit about bugs only they have the capacity to exploit
>>110192516This shit was the biggest scam yet.A week later and still 80% of servers didnt update and none of them gets hacked.
