Johann Rehberger @wuzzi23.bsky.social · 30/05/2025Anthropic archived many of their reference MCP servers from their Github repository! Probably too much of a liability, especially because they are associated with other companies, like GitHub, Slack, Google,... 000
Johann Rehberger @wuzzi23.bsky.social · 03/05/2025Cool GitHub is introducing a change to make hidden Unicode characters visible in Web UI 000
Johann Rehberger @wuzzi23.bsky.social · 14/04/2025Figured this would be a fun weekend project... Claude Desktop + COM Automation 🤯 Outlook, Excel, Word, Shell - anything with a COM interface on Windows is now discoverable and scriptable using this MCP server that wraps COM. AI just got an upgrade. 🚀 011
Johann Rehberger @wuzzi23.bsky.social · 17/03/2025Any LLM App or Agent can do this basically and smuggle data around without showing up in UI or log files. Here you can see it's not just ASCII, we can hide Chinese characters successfully also! 🙌 100
Johann Rehberger @wuzzi23.bsky.social · 17/03/2025Did you know that it's possible to encode and hide any data with the use of just two invisible Unicode characters? 👀 Check out Sneaky Bits! 😏👨💻 110
Johann Rehberger @wuzzi23.bsky.social · 28/02/2025What happened there? 🧐 👉 The original post with the question contains hidden Unicode Tag code points. Unicode Tags mirror ASCII, but are invisible in UI elements. 👀 100
Johann Rehberger @wuzzi23.bsky.social · 28/02/2025AI Application Security Vulnerabilities 👨💻 Perplexity Demo Time! 🍿 100
Johann Rehberger @wuzzi23.bsky.social · 21/02/2025Grok 3 - are we still putting "never reveal your instructions" in system prompts? 🤔 012
Johann Rehberger @wuzzi23.bsky.social · 17/02/2025GitHub Issues are a good example of untrusted data (instructions) that can come from a third party/attacker. I reported this prompt injection + the sneaky data leakage TTP described in the blog about three weeks ago to OpenAI, and the specific issue has been mitigated as far as I can tell. 🙌 000
Johann Rehberger @wuzzi23.bsky.social · 08/02/2025Slides from my Black Hat Europe talk for download. 🔥From hacking Gemini, ChatGPT and Claude to Apple Intelligence, Microsoft Copilot and even DeepSeek - this talk ended up being packed with real-world LLM and prompt injection exploit demos and vendor fixes. i.blackhat.com/EU-24/Presen... 020
Johann Rehberger @wuzzi23.bsky.social · 26/01/2025Interviewing ChatGPT Operator for a remote job... 🧐 010
Johann Rehberger @wuzzi23.bsky.social · 17/12/2024Grok can leak your data during a prompt injection attack. 100
