threlfall_hax

sporadically posting some of my interests

Model Confusion - Weaponizing ML models for red teams and bounty hunters

How I hacked a bunch of companies via machine learning attacks.

Posted on August 8, 2023

This post accompanies my DEFCON31 AI Village talk - “You sound confused, anyways… Thanks for the jewels”. [Read More]

Tags: ml malware sdlc red team

On Malicious Models

A traditional attack vector applied to AI/ML Models

Posted on March 30, 2023

Background New tech, old risks [Read More]

Tags: ml malware sdlc

Langchain & Prompt Plumbing

One of the coolest things in programming I've seen. Legos for AI.

Posted on March 30, 2023

Background [Read More]

Tags: ml langchain

Unusual Behaviors in Solidity and the EVM through a cross-bridge lens.

Behaviors and interactions that can lead to security issues when dealing with multiple smart contract languages.

Posted on February 8, 2022

Background [Read More]

Tags: eth solidity

My Favourite Dep Malware PureScript NPM Installer

A tale of a really cool piece of malware you probably haven't heard of

Posted on August 11, 2021

Background [Read More]

Tags: supplychain sdlc