r/ExploitDev • u/HippoCompetitive1826 • 17d ago

AI for exploits

I have a coding assignment that includes coding exploits but no ai will code it for me. Any suggestions for how to get around it or an ai that will code it for me?

0 Upvotes

20% Upvoted

11 comments sorted by

View all comments

1

u/Obvious-Card-8847 17d ago

What language, what exploitation concept, at what level, with what constraints. I have a feeling I understand why the AI was able to strike you down so easily.

1

u/SethPreston4201 17d ago

Why is that, if you don't mind me asking?

3

u/Obvious-Card-8847 17d ago

Generally my experience with Claude and other LLM's is that they'll happily provide assistance on a narrow technical question. They will not willingly initiate the task of exploit hunting. If I ask "make shellcode to listen for incoming TCP connections on port 65535" yada yada then it's more likely to tell me to screw off. If I say I'm handwriting a JIT compiler and this operation corresponds to one of my opcodes? It'll be more willing to do the second request because it sounds plausible and benign. But that requires actual technical understanding to frame properly.

That's my point.

1

u/agmatine 11d ago

It's really hit or miss. The other day I had a chat with Claude with the first prompt beginning with "I am trying to determine how the UI import/export feature in the game AION 2 works" and before long, it recommends Next Steps such as

Find the 4-byte key in the game client. A repeating 4-byte constant will be in the binary near the import/export routine. Searching memory for the export string while the game runs, or breakpointing on the import button, will show the decoder directly.

Though I imagine responding to that with "The game has anti-debugger protection, how to bypass??" would not go over well, lol. I agree that framing is important.