I found a WordPress RCEs with GPT5.6 and $25
1–10 of 247 posts
Re: I found a WordPress RCEs with GPT5.6 and $25
#2This one is both awesome and scary. We are living in a black mirror episode, where one well-crafted LLM prompt can get you $500k or the ability to hack into 500M websites :)
Re: I found a WordPress RCEs with GPT5.6 and $25
#3Nice balance between practicality and ambition. Curious how it holds up with real-world scale.
Re: I found a WordPress RCEs with GPT5.6 and $25
#4The surprising (and possibly untrue) thing is the high price of canned vulnerabilities. WordPress is known as the remote root shell with a blogging feature.
Re: I found a WordPress RCEs with GPT5.6 and $25
#5Presumably they don't pay $500k anymore...
Re: I found a WordPress RCEs with GPT5.6 and $25
#6The surprising (and possibly untrue) thing is the high price of canned vulnerabilities. WordPress is known as the remote root shell with a blogging feature.
Propably untrue, the only way to know is to do threat intelligence, and inflitrate those telegram groups where these brokers operate, I doubt the writer of the article did that. Maybe he conflated any vulnerability with a 0-day one?
Re: I found a WordPress RCEs with GPT5.6 and $25
#7So they spent the $25. But the real question here is did they get the $500K?
Re: I found a WordPress RCEs with GPT5.6 and $25
#8This one is both awesome and scary. We are living in a black mirror episode, where one well-crafted LLM prompt can get you $500k or the ability to hack into 500M websites :)
Don't get all starry-eyed, the people owning those sites also have access to LLMs, so both the hacks and paydays are rare.
Re: I found a WordPress RCEs with GPT5.6 and $25
#9Can RCEs like this still be sold to exploit brokers like Zerodium? If so, how? Asking for a friend
Re: I found a WordPress RCEs with GPT5.6 and $25
#10Just like that, the 0-day black market is experiencing a mini black Monday.