GuptaLog

▼
Sunday, 24 May 2026

I built a scanner that found 41 live AWS keys in 900 Terraform state files

›
I built a scanner that guesses S3 bucket names and looks for .tfstate files. Terraform state is a JSON file that happens to contain all you...
Wednesday, 20 May 2026

I poisoned a Hugging Face dataset and it stayed up for 6 months

›
I uploaded a “fine-tuning dataset” to Hugging Face with 1,000 rows of clean code and 50 rows of backdoored examples. The backdoor: any funct...
Monday, 18 May 2026

I reproduced a Claude Code RCE. The bug is everywhere.

›
  Last week, security researcher Joernchen published a clever RCE in Claude Code 2.1.118 . I spent Saturday reproducing it from the advis...
2 comments:
Friday, 10 April 2026

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty.

›
(See original article:  I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty. ) I was poking at a fintech’s mobile API an...
3 comments:
‹
Home
View web version

Contributors

  • Piyush Gupta
  • Verdaily
Powered by Blogger.