Opus built a working exploit for his own app in 3 minutes to prove it was vulnerable

Opus 5 pointed at his own app created a similar exploit to a known file-upload attack in 3 minutes, showing the app was vulnerable.

How it works

He points Opus at his own app
It creates a similar exploit to a known file-upload attack in 3 minutes
The app is shown vulnerable

Why it’s worth knowing

Three minutes from question to working proof.

Where it’s from

Summarized from a public post on news.ycombinator.com. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be

2The prompt, with the steps

3The check when it’s done

Upgraded prompts are coming soon.

Try next

WorkA contractor talks measurements into his phone and QuickBooks sends the estimate in 45 seconds WorkWhatsApp agent recovered stalled course sales WorkA solo seller's daily production plan pulls orders from four shops at once WorkFind me 48 school-district customers and draft each pitch — one replied, booked and paid

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.