Dennis de Caes’ Post

In the context of LLMs, prompt injection, jailbreaking and prompt leaking are terms that I’d heard about, but didn’t fully understand. Dialing up my Learn and Be Curious and channeling my inner Sun Tzu last week, I set out to learn a bit more about the world of adversarial prompting. If you’re building widgets on top of LLMs, it’s a topic that is well worth exploring. After a few hours of going down the YouTube rabbit hole, I stumbled across a few talks by Sander Schulhoff. This led me to look at the materials that Sander and his team at LearnPrompting have put together. Specifically their “Intro to…” and “Advanced Prompt Hacking” courses. The thing that drew me to this material was its origins. The learning material is derived from data gathered during a real world HackAPrompt challenge. The goal of the challenge was get an LLM to produce a specific output that is considered “malicious”. There were multiple levels, with each level making it that little bit harder to achieve the goal. The challenge had 2800 participants from 50 countries around the world! Collectively the participants wrote 600,000 prompts (==lots of insights). The material catagorises and unpacks the different (and creative) techniques used by the participants to achieve the goal. It also explores some of the techniques that can be used to defend prompts. I personally liked the blend of theory and practical hands-on assessments in the courseware - but that might not be for everyone. The “Ignore This Title and HackAPrompt …” paper, produced by the same folks, unpacks the research that underpins the material covered in this course [Link in the comments]. If you find yourself at a loose end this week, definitely check out the paper and maybe give the course a go [BTW, this is a personal recommendation and doesn’t reflect the views of opinion of my employer] #security #appsec #promptengineering #llm #llmsecurity #cloudsecurity

🚀 Ending my journey through the Nmap series with the "Nmap Post Port Scans" room on TryHackMe! 💻🔍 Throughout this series, I've delved into live host discovery, basic and advanced port scanning techniques, and now, advanced post-scan actions like service and OS detection, Nmap Scripting Engine (NSE) usage, and result saving. The Nmap Series on TryHackMe was an immersive journey into network scanning and reconnaissance techniques, covering everything from live host discovery to advanced post-scan actions. Through a series of interactive rooms, I learned essential concepts such as TCP and UDP port scanning, service and OS detection, and leveraging Nmap Scripting Engine (NSE) for additional functionality. Each room built upon the previous one, providing a comprehensive understanding of Nmap's capabilities and its role in network security. Overall, it was a valuable learning experience that enhanced my cybersecurity skills and knowledge.🔒💡#TryHackMe #NmapSeries #CybersecurityJourney #NetworkScanning #Reconnaissance #LiveHostDiscovery #PortScanning #ServiceDetection #OSDetection #NmapScriptingEngine #NSE #ResultSaving #CybersecuritySkills #InfoSec #InfoSecEducation #ContinuousLearning #NetworkSecurityFundamentals #Masterschool 🌟

Day 331 of My 365-Day Journey with TryHackMe: G'day, world of LinkedIn! 🐊 Bright and early this morning, I ventured to the optician, bringing back promising news - my eye is healing well, and full vision is making its grand return. A part of me will miss the swashbuckling allure of potentially donning an eyepatch, but such is life! Today’s delve into TryHackMe saw the completion of the "Windows User Activity Analysis" room. It proved to be an enriching experience, especially for those with an eye on digital forensics. The room provides a deep dive into the Windows registry system and introduces several tools for registry artifact examination. Definitely worth exploring for aspiring investigators. On the university front, I'm on the cusp of finishing my secure systems assignment. Taking a human-centric approach, I’ve crafted posters, flowcharts, and even developed a quiz using HTML and CSS - now comes the daunting task of piecing together the full report. Looks like my weekend is all booked up! Wishing you all a fulfilling weekend ahead. May it be productive, enlightening, or simply.. fun! Keep busy, keep learning, and as always, keep on typing! #Day331 #TryHackMeJourney #WindowsUserActivityAnalysis #DigitalForensics #UniversityAssignments #HumanFactor #CyberSecurityLearning #KeepOnTyping

🚀 New Video Alert! 🚀 Hey everyone! I just posted a new video on Cyber Ocean Academy. In this video, I solve the popular DSA problem: Product of Array Except Itself from LeetCode. 📈 🔑 Why is this problem important? This problem is a frequent favorite in coding interviews at top companies. It tests your ability to manipulate arrays and challenges you to think about optimizing space and time complexity. Solving this problem will help sharpen your skills in prefix and suffix arrays, and teach you how to tackle array-based problems efficiently without using division. I walk you through the problem statement, break down the approach using prefix and suffix arrays, and show a live coding session on LeetCode! If you’re preparing for coding interviews, this is a must-watch. 🔥 💡 Topics covered: Product of Array Except Itself explained Prefix and Suffix Array approach Efficient O(n) solution without division LeetCode live coding Watch here: https://lnkd.in/g9Za57Y8 👉 Like, share, and subscribe for more coding tutorials! 💬 Drop any questions or comments below. #CodingInterview #LeetCode #DSA #ArrayProblems #CyberOceanAcademy #JavaPython #TechnicalInterviews #CodingTips

🌐 Excited to share my recent exploration of the Wreath room on TryHackMe, an invaluable learning resource tailored for cybersecurity beginners. This hands-on experience dives deep into pivotal skills, such as network pivoting, leveraging the Empire C2 framework for command and control, and mastering essential anti-virus evasion techniques. 🔍 Wreath goes beyond the basics, covering topics like code analysis in Python and PHP, locating and modifying public exploits, web application enumeration and exploitation, Git repository analysis, and simple Windows post-exploitation techniques. 💻 With a focus on CLI firewall administration for CentOS and Windows, cross-compilation techniques, coding wrapper programs, and simple exfiltration techniques, Wreath equips learners with a holistic understanding of cybersecurity practices. Notably, it emphasizes the art of formatting a penetration test report, ensuring a well-rounded skill set for aspiring cybersecurity professionals. 🚀 Aspiring cybersecurity enthusiasts, Wreath on TryHackMe is your gateway to immersive learning in a controlled environment. Elevate your skills, unravel the intricacies of network pivoting, and gain hands-on experience with the tools and techniques that define the cybersecurity landscape. #TryHackMe #Wreath #Cybersecurity #Pivoting #EmpireC2 #HandsOnLearning 🚀🔒

Hey everyone!! Explored the depths of the enigmatic dark web in my latest blog. An eye-opening journey into its uncharted territories - check it out and let me know your thoughts!! #CyberSecurityAwareness #Hacking #DarkWeb

It has been awhile due to me being on vacation but Hack Smarter LIVE returns tonight!!! This is my weekly live stream. I plan on finally staring the new "Advanced Client-Side Attacks" path on TryHackMe. As usual, I'll be doing it in real-time so you'll get my full thought process, frustrations, and methodology. I'll also answer any questions you have about pentesting, careers, cybersecurity - See you tonight! Event Link 👇 https://lnkd.in/gnuNF2k6

I've just published a fresh write-up for a newly added room on TryHackMe (THM) focused on web exploitation. Dive into an intriguing storyline that will test and enhance your hacking skills.🧩 It's worth mentioning that it's one of the most interesting rooms I've pawned in a while!   Whether you're a seasoned pro or a beginner, this room is a must-try! 💻🔐 Credits to Derek Sneddon for the well-built machine and the fun story. 🙌   📖 Don't want to miss out? Follow me on Medium to get notified for new content. #CyberSecurity #WebExploitation #TryHackMe #EthicalHacking #NanoCherryCTF #Medium #WriteUp

👨🏻💻I've just completed the "OhSINT" room on TryHackMe! 🔍 This journey was all about enhancing my Open Source Intelligence (OSINT) skills. The room presented a unique set of challenges that required thorough research, critical thinking, and a keen eye for detail. #Cybersecurity #OSINT #TryHackMe #EthicalHacking #ContinuousLearning #DigitalForensics

Practice makes perfect