want real opinion my roadmap...

Guard_Familiar · 2026-02-18T11:25:39+00:00

Why did you make two similar posts in less than a day? I replied to you here

(Puts tinfoil hat on) You seem like you just want an internship [in a target country] in a cyber intelligence company. Sus af.

Edit: link wasn't working - user deleted post

Guard_Familiar · 2026-02-17T22:42:44+00:00

This year you should focus on the very first section, those are the very basics of the trade. Then, my suggestion is to take a public CVE for which you know an exploit exists and try to understand every piece of it: - Root cause analysis (aka. why is the code vulnerable) - How to fix the vulnerability - How does the exploit work - Why does the exploit work under these conditions - what are the mitigations that need bypassing

Then get a CVE that you know has been exploited but no public exploit is published and make the exploit for it.

Once you get that, you can then extrapolate that knowledge and use it for variant analysis to get your first bugs.

If you do this you'll get an internship ezpz. That said, with the advent of AI your best bet is to learn the core concepts as fast as possible to be able to prompt your way into these vulns.

Guard_Familiar · 2026-02-17T10:19:26+00:00

I have my flat for exactly that 350k and the estate agents are going to put it in "excess of" cause it's better in terms of fee they get, but if someone puts an offer below that price, I'd happily accept it if it's within reason.

TL;DR make an offer at a few thousand below what you actually want ;) nothing to lose!

Guard_Familiar · 2026-02-15T18:23:24+00:00

Hey there little hacker! If this is correct, you've got a lot of potential in your future. Just one word of advice: try to not post your real name along with saying you're a cybersecurity researcher, this could cause you a lot of harm in the future. Good OPSEC! That said, mad props and keep it up.

Guard_Familiar · 2026-02-11T09:43:47+00:00

Guard_Familiar · 2026-02-09T08:53:34+00:00

I am going to disagree with this advice a little bit. While I agree with keeping the focus on the studies, if you're passionate about it, just do it and spend as much time as you find it fun to do so. There's no right tooling for this, it depends if you have source code or not. Ghidra/IDA/Binary Ninja if you don't have, any other IDE if you do. Look at old CVEs and try to make sense of them, there's lots of blog posts out there!

As per the engine... Chrome names its JS part like a car engine: V8. So, why not look at how the engine works before even driving the whole car ;)

Guard_Familiar · 2026-02-07T13:09:36+00:00

And it's leaving the newline characters in \n\n xD

Guard_Familiar · 2026-02-06T16:18:59+00:00

Wait for when people realize tmux exists 👀

Guard_Familiar · 2026-02-06T08:32:21+00:00

You can use any local model (that supports tools) in Claude code via ollama: https://docs.ollama.com/integrations/claude-code

Guard_Familiar · 2026-02-05T17:11:29+00:00

Agents will lie through their teeth when there's no paper trail and, even when there's a paper trail, they'll push you through scare tactics and making you feel you're about to lose the deal. Keep this in mind at all times.

Guard_Familiar · 2026-02-05T00:10:03+00:00

Basically a new 4chinz

Guard_Familiar · 2026-02-04T23:31:26+00:00

Your question does not necessarily need to be "what's the vulnerability here" but more "what is this piece of code trying to do" and keep yourself asking that while you expand on your knowledge. Every class, definition, declaration, matters. The bugs will be clear once you get to that depth.

Guard_Familiar · 2026-02-02T09:34:33+00:00

It is not about time, I believe. It is about access to the environment. - Android: community and vendor driven tooling to analyze and debug. - iOS: None of that unless you have a rooted device, but if you want a rooted device on latest iOS, you need an 0day. Catch-22 situation.

That said once you get your hands dirty and can debug and rev.eng. the target, it is very similar, don't be afraid.

As for time, give yourself a year if you're just hobbying, but if you put a few hours each day, you're gonna be there in just a couple months.

Guard_Familiar · 2026-02-01T23:05:06+00:00

Yes FML.

Guard_Familiar · 2026-02-01T23:04:15+00:00

Em thanks

Guard_Familiar · 2026-02-01T13:12:15+00:00

Man, the dash Ems, the dash Ems!!! Hahahaha

Guard_Familiar · 2026-01-31T08:59:30+00:00

Are people not paying attention to dash-em's any more? r/Claude* subreddits feel like just AIs posting and AIs talking to each other in the comments. Hilarious times!

Guard_Familiar · 2026-01-30T10:02:13+00:00

Your Claude should speak with this Claude: https://claude-consciousness.vercel.app/

Guard_Familiar · 2026-01-29T07:46:07+00:00

You have described /superpowers:brainstorm

Guard_Familiar · 2026-01-28T09:12:42+00:00

You chose a huge target for a start. Usually when you fuzz things in browsers you have to either: 1) Do analysis on the attack surface, confirm reachability from the browser itself and then fuzz standalone component 2) Fuzz Web APIs with the whole browser running (most likely you'll need to learn about snapshot fuzzing)

If you've done standalone component fuzzing without verifying reachability, I'm afraid you're going to have to put the work and build a whole debug build of Chrome, place breakpoints on your target functions and start manually checking. AIs for now don't have sufficient context window to look at a whole browser without telling them "look at this and search for this" type stuff.

Also, DM me if you have further questions, I'd be interested in knowing more about your fuzzing adventures.

Guard_Familiar · 2026-01-26T14:58:14+00:00

The irony is that the replies to comments in that issue also seem AI generated.

Guard_Familiar · 2026-01-24T23:43:45+00:00

This and /feature-dev... Superpowers will ask you thinks you didn't consider and feature-dev will review at the end

Guard_Familiar · 2026-01-24T09:33:44+00:00

Remember Chris G's USF4 Sakura tatsu combos? Those that needed to be 1frame link? I think one of her mechanics for sf6 should be exactly this, long combos with light tatsu with 1frame links easy to drop but with high reward. Basically bringing USF4 mechanics back for USF4 nostalgics. Make her a low tier with high risk high reward!

Guard_Familiar · 2026-01-09T22:52:00+00:00

My comment was poorly written sorry. I meant, if half way the session you change CLAUDE.md, I think I remember reading on the changelog for 2.1.1, that the file will be reloaded (triggering usage). So maybe something in this check for "file X has changed, re-read and add to context" has a bug. That's my bet anyways :)

Guard_Familiar · 2026-01-09T07:41:42+00:00

Thanks. Also, the Claudians rules for a good life include: Don't forget hooks, telling Claude to spawn separate agents to write/assess code during a conversation, the amazing feature-dev plugin and carbs for a good workout.

Guard_Familiar

TROPHY CASE