PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Use AI Prompting for Security Vulnerabilities

hackerone.com | blog | #ai-security | #red-teaming | #llm | #security-testing | #vulnerability-discovery | #prompt-engineering | #hackerone | #genai
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A HackerOne engineer explains how to prompt LLMs for security work—crafting context-rich prompts for vulnerability discovery and AI red teaming, with reusable templates and examples.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · xbow.com
BAS vs Red Team vs Pentesting: How to Choose the Right Security Test
BAS, red teaming, and AI pentesting answer different questions. Learn when to use each and how AI pentesting validates exploitable app risk.
blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
blog · projectdiscovery.io
Build It or Buy It? An Evidence-Based Framework for AI Security Testing
Based on a survey of 200 security practitioners, the whitepaper shows why DIY LLM security testing hits a validation and maintenance ceiling, and offers a framework for deciding when to build vs buy.
blog · projectzero.google
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
How Project Zero evolved Project Naptime into Big Sleep, using large language models to find vulnerabilities in real-world software, with early results and observations.
blog · projectzero.google
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Project Naptime evaluates the offensive security capabilities of large language models, presenting a methodology, tooling setup, and early successes finding real vulnerabilities.
Back