Pinned
For anyone using LLMs to do security research, bug bounty, red teaming, etc, we made a Discord to discuss/collaborate:
- I’d be willing to pay $100 per report for priority triage with automated dupe checking and faster payouts (<48 hours). My experience with this on Immunefi was great, and it’s not a bad way to incentivize researchers to stop abusing teams as the initial assessors of AI reports.
- GPT-5.6 Sol found a very cool authentication bypass. - you submitted the uuid as password, pass confirmation and erp_code and it spilled out the access token for that user. I couldn't enum uuids so CVSS only 7.4.
