Jankh @JankhJankh

Professional Pentester and AI unenthusiast. All views on here are mine Joined September 2019

Tweets

16
Followers

97
Following

206
Likes

27

paymentvillage @paymentvillage

3 months ago

Chip cards didn’t save us. Here’s how attackers still break payment systems — and what it looks like in the wild: paymentvillage.substack.com/p/cards-are-st… #infosec #payments #ctf #defcon

0 4 8 447 4

Jankh @JankhJankh

3 months ago

Last week I hacked an HVAC, Water Treatment Plant, and a Smart Grid as part of the Hack The Box Cyber Skills Benchmark CTF Competition. I thought I'd give writing up the concepts and methodology a go as it's a pretty unusual space within cyber. medium.com/p/fires-floods…

0 1 1 112 0

Jankh @JankhJankh

a year ago

Smashed the Card Hacking Challenge for the @paymentvillage @ DEF CON again this year. Within the two challenges and I found 3 vulns, plus a fun way to chain them into a neat infinite money glitch. Full writeup is here, would recommend a read. medium.com/@jankh/an-infi…

0 1 4 323 2

Jankh @JankhJankh

2 years ago

Did you know that if you edit the html within an Iframe on a page JavaScript doesn't have permission to read(CORS), it will rewrite it to the DOM unsafely and allow the JavaScript to read it? I can't seem to find a non-SE way to exploit it, but sure is quirky

0 0 0 58 0

moo @moo_hax

2 years ago

We've come to the end of the @aivillage_dc AI/ML CTF hosted by @kaggle Congratulations to the winners, and congrats to anyone who learned something new! You can see all the clever things players came up with to solve challenges. kaggle.com/competitions/a… 30 days is a long…

0 6 20 2K 1

Download Gif

Black Hat @BlackHatEvents

2 years ago

During #BHEU Briefing "Breaching the Perimeter via Cloud Synchronized Browser Settings" @JankhJankh will demonstrate novel techniques to leverage these settings to wreak havoc against an internal network. Register now >> bit.ly/3M12b4p

0 2 14 9K 0

Download Image

AI Village @ DEF CON @aivillage_dc

2 years ago

It's that time again, the @aivillage_dc CTF has started over at @kaggle! Huge shoutout to @kaggle for hosting - they are an awesome partner. Also want to thank @nvidia @ProtectAICorp @NetSPI @giskard_ai and @JankhJankh for their challenges! kaggle.com/competitions/a…

0 16 26 12K 2

Jankh @JankhJankh

2 years ago

At DEF CON 31 I did the Payment Village Workshop, CTF, and Card Hacking Challenge. Was an absolute blast. Here's my writeup on how I did the card hacking challenge. medium.com/@jankh/stealin… Thanks to @paymentvillage for running it, was absolutely eye opening.

0 14 65 7K 19

Jankh @JankhJankh

3 years ago

I just published a pretty novel blog post on turning two low-risk vulnerabilities into system admin compromise by using session fixation to bypass CSRF protections. Give it a read :) link.medium.com/8aPeXbQoRxb

0 0 2 86 0

Jankh @JankhJankh

3 years ago

I found and disclosed my first critical AI vuln yesterday :) Sorry to the team who just lost their weekend to it lol.

3 1 8 0 0

moo @moo_hax

3 years ago

Internal feedback from our own Kaggle Grandmaster team was that, “Token was particularly elegant”.

Jankh @JankhJankh

3 years ago

Internal feedback from our own Kaggle Grandmaster team was that, “Token was particularly elegant”.

3 2 11 0 1

0 3 6 0 0

Jankh @JankhJankh

3 years ago

I wrote 5 Challenges for the AI Village CTF at DEFCON. I thought I'd write up a blog post to talk about the inner workings of them. Shout outs to the whole AIV team but especially @moo_hax and @josephtlucas running the show. link.medium.com/WGQpZiArttb

3 2 11 0 1

AI Village @ DEF CON @aivillage_dc

3 years ago

Join our #defcon AI security capture-the-flag; ends on Sep 12th. 22 challenges from 5 orgs (thanks @nvidia, @JankhJankh, @BenevOrang, and us). @kaggle is providing $25k in prizes. Beginner or pro, play from anywhere! #defcon30 kaggle.com/competitions/a…

1 20 32 0 2

moo @moo_hax

3 years ago

We have ~21 challenges donated by ~5 orgs that span all manner of ML attacks. Big shoutout to @GTKlondike @josephtlucas @JankhJankh @rharang @comathematician @ColdwaterQ @BenevOrang for their time and effort. Stay tuned for more details!

AI Village @ DEF CON @aivillage_dc

3 years ago

0 44 96 0 4

1 9 23 0 1

Jankh @JankhJankh

3 years ago

I realised I never posted this here :) jankh.medium.com/can-you-trust-…

0 0 5 0 0

CrikeyCon @CrikeyCon

5 years ago

Do you like Security, Data analytics and other goodies? Share @JankhJankh's interest while they speak about "Introduction to Adversarial ML and other AI attacks"!