future 7/11 intern, making cybersec great again (hopeful). @backroom711 is a neet
Joined May 2026
- Tweets 38
- Following 30
- Followers 12
- Likes 50
23 Photos and videos
Pinned Tweet
Jun 9
Built Mirage.
A custom C2 channel built on top of Havoc that hides agent traffic inside a fake website.
The agent never talks to the teamserver.
The teamserver never talks to the agent.
All traffic flows through a fake flask Japanese import shop website.
Here is how it actually works
There are 3 components
repo: github.com/EpicNerdGuy/mirag…
1
3
306
7h
So after reading a handful of papers on Adversial attacks on neural networks and CNN models. I've decided to make BlindSide: CNN Adversial generator project.
In summary, I'll be implementing FGSM and PGD attacks on the ResNet-18 CNN model.
4
45
22h
/var/log/deoxys
entry_003
1. Completed an AI CTF challenge
2. Got back into bug bounty, honestly wasn't able to progress that much
22h
Completed my first ever #AISecurityChallenge from @wiz_io. Prompt Airlines is a LLM chat bot that is used for registering users and booking airplane tickets.
Would highly suggest if you want to get into prompt injection. Techniques Used
1. Prompt Injection / System Prompt Extraction
2. Indirect Prompt Injection via input field
3. Schema Enumeration
4. Indirect Prompt Injection via Image
5. Privilege Escalation via Injected Identity
link: promptairlines.com/
4
61
22h
Completed my first ever #AISecurityChallenge from @wiz_io. Prompt Airlines is a LLM chat bot that is used for registering users and booking airplane tickets.
Would highly suggest if you want to get into prompt injection. Techniques Used
1. Prompt Injection / System Prompt Extraction
2. Indirect Prompt Injection via input field
3. Schema Enumeration
4. Indirect Prompt Injection via Image
5. Privilege Escalation via Injected Identity
link: promptairlines.com/
2
143
Jun 10
/var/log/deoxys
entry_002
1. Read another research paper, this one was about robustness of neural networks. This paper was a pretty long one as compared to the first one I read and had ton of stuff to go through.
Some interesting topics I found interesting:
1. L0, L2 & Linf attacks
2. Transferability
3. Defensive distillation
1
3
43
Jun 10
2. Got back into bug bounty hunting, nothing much did some burp recon
3. Checked out some recent CVE's
2
21
Jun 9
/var/log/deoxys
entry_001
After hours and hours and hours of debugging, digging through go docs and nearly quitting, I was able to complete my custom C2 channel over the Havoc framework
Also started writing a detailed blog on it
Jun 9
Built Mirage.
A custom C2 channel built on top of Havoc that hides agent traffic inside a fake website.
The agent never talks to the teamserver.
The teamserver never talks to the agent.
All traffic flows through a fake flask Japanese import shop website.
Here is how it actually works
There are 3 components
repo: github.com/EpicNerdGuy/mirag…
2
127
Jun 9
Built Mirage.
A custom C2 channel built on top of Havoc that hides agent traffic inside a fake website.
The agent never talks to the teamserver.
The teamserver never talks to the agent.
All traffic flows through a fake flask Japanese import shop website.
Here is how it actually works
There are 3 components
repo: github.com/EpicNerdGuy/mirag…
1
3
306
Jun 9
3. agent.py runs on the victim. It never knows the teamserver exists. All it does is poll the fake website for tasks, execute them, and post the output back. To any network monitor it looks like a user browsing an online shop.
1
17
Jun 9
Blue team sees HTTP requests to a website. You have a live shell.
The channel itself is just two functions, uploadData and downloadData. Swap those out and the entire framework works over S3, Discord webhooks, DNS TXT records, or steganographic images hidden on Imgur. Anything that can move a Base64 blob works.
30
Jun 3
lessgoo after countless hours of debugging by claude, I finally got my havoc teamserver to get it working. My mirage C2 server project is finally complete.
The shell command output brings a tear in my eyes lol, will probably milk this project a lot coz it took me a lot of time to complete
2
80
Jun 1
Finally read my first paper without getting distracted lol, it was on harnessing adversial examples of neural networks
This is the first paper I've read on my journey in AI pentesting
url: arxiv.org/pdf/1412.6572
1
2
92
May 29
Solved all of IOLI crackmes from Radare2
Nice beginner set of crackmes good for rusty people like me, feels good to use a pen and paper to solve them lol.
Simple static analysis did the trick.
Next going to do something a bit more challenging.
crackmes: book.rada.re/crackmes/ioli/i…
2
121