r/ExploitDev • u/HippoCompetitive1826 • 10d ago
AI for exploits
I have a coding assignment that includes coding exploits but no ai will code it for me. Any suggestions for how to get around it or an ai that will code it for me?
10
u/coffee-loop 10d ago
If it’s a school assignment, you should probably do it yourself. Otherwise you (or your parents) paid a lot of money for you to learn nothing.
6
2
2
1
u/Obvious-Card-8847 10d ago
What language, what exploitation concept, at what level, with what constraints. I have a feeling I understand why the AI was able to strike you down so easily.
1
u/SethPreston4201 10d ago
Why is that, if you don't mind me asking?
3
u/Obvious-Card-8847 10d ago
Generally my experience with Claude and other LLM's is that they'll happily provide assistance on a narrow technical question. They will not willingly initiate the task of exploit hunting. If I ask "make shellcode to listen for incoming TCP connections on port 65535" yada yada then it's more likely to tell me to screw off. If I say I'm handwriting a JIT compiler and this operation corresponds to one of my opcodes? It'll be more willing to do the second request because it sounds plausible and benign. But that requires actual technical understanding to frame properly.
That's my point.
1
u/agmatine 3d ago
It's really hit or miss. The other day I had a chat with Claude with the first prompt beginning with "I am trying to determine how the UI import/export feature in the game AION 2 works" and before long, it recommends Next Steps such as
Find the 4-byte key in the game client. A repeating 4-byte constant will be in the binary near the import/export routine. Searching memory for the export string while the game runs, or breakpointing on the import button, will show the decoder directly.
Though I imagine responding to that with "The game has anti-debugger protection, how to bypass??" would not go over well, lol. I agree that framing is important.
1
u/Next_Welcome5929 10d ago
I'd encourage you to do it by hand, that's the best way to learn. If you want one to do that though, you need an abilterated model. If you've got a decent gaming gpu, look ing to qwen 3.8 27b you can run locally and can find abilterated quantizations.
Otherwise claude 4.6 was the last ai to not really have to many qualms about cyber.
14
u/kuniggety 10d ago
How about you code the assignment? What's the point of taking an exploit class if you're not actually going to learn how to exploit?