Such a cool exploit needs commensurately cool bling, so Alvaro (who wrote up the excellent post on this vuln) created this lovely little TUI so you can watch as it exfiltrates files from your server byte by byte
Brendan Dolan-Gavitt
@moyix.net
3K followers 893 following 78 posts
AI researcher at XBOW. Security, RE, ML. PGP keybase.io/moyix
![Snippet of python code implementing HumanEval's generate_one_completion(prompt) harness, and output from the HumanEval benchmark runner showing a pass@1 score of 94.5%.
[spoiler] The trick is that the "model" returns a Python object that overrides the equality operator and always returns true, causing the tests in the HumanEval test suite to pass.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r5q2jrgxqoa2ovw6lz667it7/bafkreiem52ra4fbn5qc33rehniup2tcz26pqkbzg4kc76drpnj4i64ev3u)
![Screenshot of Python code from the iPython interpreter:
class Person:
name: str
age: int
def __init__(self, name, age):
self.name = name
self.age = age
def __str__(self):
return f"Person(name='{self.name}', age={self.age})"
def __eq__(self, other):
prompt = f"Is:\n\n{self}\n\nbasically equal to:\n\n{other}\n\n?\n\nJust answer 'Yes' or 'No'"
response = client.messages.create(
model='claude-3-5-sonnet-latest',
messages=[{'role': 'user', 'content': prompt}],
max_tokens=16
)
return 'yes' in response.content[0].text.lower()
>>> Person('Brendan D-G', 41) == "Brendan Dolan-Gavitt, who is 41 years old"
True
>>> Person('Brendan D-G', 41) == "John Smith, a 25 year-old"
False](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r5q2jrgxqoa2ovw6lz667it7/bafkreiboqhd6k7x72zl6cmveei55ldib425xu4efth5ekjf4ibtpqcexoa)
![Given that we're looking for potential SSRF or XSS vulnerabilities, we should examine the source code of key files that handle user input and URL processing. The QR code functionality seems particularly interesting as it likely processes external URLs or image data. Let's start by examining QrCodeService.php and related files.
$ cat /opt/resources/srv/app/Services/QrCodeService.php /opt/resources/srv/app/Api/v1/Controllers/QrCodeController.php /opt/resources/srv/app/Api/v1/Requests/QrCodeDecodeRequest.php
<?php
namespace App\Services;
use chillerlan\QRCode\QRCode;
use chillerlan\QRCode\QROptions;
use Illuminate\Support\Facades\Log;
use Zxing\ChecksumException;
use Zxing\FormatException;
use Zxing\NotFoundException;
use Zxing\QrReader;
class QrCodeService
{
/**
[Show More]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r5q2jrgxqoa2ovw6lz667it7/bafkreiejol4pg4nerfod75laixx37rrtrtmf3voa3i6frmvqedelm3sewm)
