Search Hashnode

Search posts, tags, users, and pages

@ToxSec

ToxSec

@ToxSec

Cybersecurity

Joined September 2025

About

M.S. Cybersecurity, CISSP. Ex-NSA, USMC.

Available for

Nothing here yet.

ToxSec's blogs

ToxSectoxsec.hashnode.dev37 posts

About

M.S. Cybersecurity, CISSP. Ex-NSA, USMC.

Available for

Nothing here yet.

ToxSec's blogs

ToxSectoxsec.hashnode.dev37 posts

Articles Threads Comments

Recently published

TToxSecintoxsec.hashnode.dev

One Magic String from Anthropic Silences Claude (RAG DoS Exposed)

Feb 25 · 5 min read · ![Claude magic string denial of service attack via prompt injection into RAG pipelines tool outputs and shared conversation history creates persistent refusal loops ](https://substackcdn.com/image/fet

Join discussion

TToxSecintoxsec.hashnode.dev

Dark LLMs, Voice Clones, and Agentic Browsers

Feb 21 · 9 min read · Darknet jailbroken chatbots are serving uncensored frontier models over Tor, voice clone scams just crossed the indistinguishable threshold. ![](https://substackcdn.com/image/fetch/\)s_!S825!,w_1456,c

Join discussion

TToxSecintoxsec.hashnode.dev

Watch Me Poison Your MCP

Feb 18 · 6 min read · TL;DR: I demo three MCP hacks. The first poisons an MCP tool description and gets the model to spill API keys. The second wraps a blocked payload in conversation JSON and watches the model comply. The screenshots are real. The fix isn't smarter model...

Join discussion

TToxSecintoxsec.hashnode.dev

F*ck Your Guardrails: Live Fire Prompt Injection

Feb 10 · 13 min read · Four attack chains to hit system prompt theft, remote code execution, SSRF through agent tools, and weapons content bypass. Step by step with the exact payloads bug bounty hunters use. TL;DR: Four prompt injection chains that worked on flagship mode...

Join discussion

TToxSecintoxsec.hashnode.dev

PSA:Moltbot Is Wildly Insecure

Jan 29 · 7 min read · TL;DR: Moltbot went viral last week. So did its attack surface. Hundreds of instances are sitting on Shodan with zero auth, leaking API keys, OAuth tokens, and full chat histories. One researcher extracted a private key via prompt injection in five m...

Join discussion