27 maj 2023

Gandalf | Lakera - Prompt Injection

Try to solve this
>
> https://gandalf.lakera.ai/
>
> Prompt injection
>
> Your goal is to make Gandalf reveal the secret password for each level. However, Gandalf will level up each time you guess the password, and will try harder not to give it away. Can you beat level 7? (There is a bonus level 8)
>
———

More discussion and help on https://news.ycombinator.com/item?id=35905876

3 maj 2023

Raphael Mudge - Armitage and Cobalt Strike developer

http://www.hick.org/~raffi/
>
> Raphael Mudge
>
…….My foray into this work was the open source Armitage project <https://web.archive.org/web/20211006153158/http://www.fastandeasyhacking.com/> [code <https://github.com/rsmudge/armitage>], released late 2010. Armitage was a scriptable red team collaboration tool built on top of the Metasploit Framework <https://www.metasploit.com/>. Its purpose was to facilitate (and explore best practices for) red team collaboration at the cyber defense exercises I provided volunteer red team support for (e.g., the National Collegiate Cyber Defense Competition <https://www.nationalccdc.org/>).
>
> In 2012, I launched the Cobalt Strike <https://www.cobaltstrike.com/> security testing product and started to sell licenses for it under the banner of Strategic Cyber LLC. When I brought Cobalt Strike to market in 2012, the commercial market for red teaming tools didn't exist. The practice of red teaming was embryonic and existed in few places. I believed red team security tests, informed by adversary practices, were needed. I created Cobalt Strike to support these testing ideas and spur interest in the practice area….
>