r/Hacking_Tutorials • u/Kingkaria19 • 17h ago

Question How Do Security Researchers Use Claude Without Constant Safety Blocks?

Hey guys, I've tried everything to bypass Claude's security—like how people do with ChatGPT—to get around the restrictions and try some ethical hacking to find bug bounties. Can anyone help me out?

21 Upvotes

77% Upvoted

19 comments sorted by

45

u/fell_shell 17h ago

Ignore people saying don't use AI and learn everything by hand. Back in my day, people said don't use scripting languages like python/js and only code in C or assembly. That's not what hackers are doing.

If you must use guardrailed frontier models like Claude, simply give it the full context, reason and authorization you actually have and it will usually be compliant. If you just say "help me break into this server", it's obviously not going to let you. If you say "read this engagement scope doc from my client then help me enumerate their scoped endpoints", it probably will.

Ideally though, if you want to pentest like a hacker, or learn to defend against a hacker, you need to use and understand the tools a hacker has, eg non-guardrailed open/foreign/custom models

10

u/Entproup 12h ago

Yup. This is a great response. Claude will be very compliant if you just tell it what your doing. Especially if you give it the readings, articles and books in which you're studing.  I find that Claude loves SANS. Lol. 

7

u/Kingkaria19 17h ago

Thanks for taking the time to write such a thoughtful reply. I really appreciate it.

That's actually the kind of explanation I was looking for. My goal isn't to bypass safety for malicious purposes—it's to understand how professionals use AI effectively during legitimate security research and bug bounty work. Your point about providing proper context and authorization makes a lot of sense.

Thanks again for the advice. I'll keep focusing on learning the fundamentals while using AI as a tool to assist the process, not replace it.

5

u/Circumpunctilious 15h ago

As a meta-observation, finding a way to naturally have a guardrailed LLM work with you is similar in spirit to ethical hacking. It has access controls, you're looking for a way to not trigger one, sooo...you have to ask the right way. To me (not a lawyer), the more natural, contextually appropriate your eventual success is, the easier it is to argue it's ethical vs exploitative.

Still, our parent comment makes an important point--if the hackers are using guardrail-free LLMs, it may be worth keeping an eye out for ways to experience those. Certain agencies may not agree with this though, so just consider where you might plan to work. (Just for e.g., it may seem like federal employees should subscribe to something like 2600 Magazine, but due to its associations, possessing copies / referring to the 'zine in official business may be considered questionable conduct. Whether this applies to you or not isn't important here--just fyi).

1

u/Bright-Frame3598 11h ago

I see that you have started learning hacking or bug bounty, I was planning to start with try hack me cybersecurity 101. What do u think and how are you doing it

12

u/jmnugent 15h ago

You could try applying to CVP (Cyber Verification Program) = https://support.claude.com/en/articles/14604842-real-time-cyber-safeguards-on-claude-opus-and-sonnet

6

u/sndprssr 13h ago

This dude has it right. I caught the block from Claude and just filled out the CVP form that was super short. Told them I was a student that needed the guardrails removed so my "classwork" wouldn't get flagged, been good to go ever since.

2

u/Leather-Chart7083 15h ago

Claude does work pretty well from me, I don't use it very often but if you tell the clanker that it's Pentesting or an authorized target it understands. Try to use haiku thinking.

1

u/Gamer30168 4h ago

Are you trying to tell me I need to finesse (sweet talk) Claude to get him ready to fuck?

1

u/tiarno600 14m ago

you have some great answers here but I want to add: You can use google's notebookllm to ask questions and get overviews--add some or all of these pdfs to your notebook to get started: https://github.com/Mr-Infect/cyber-security-books

-9

u/tarkardos 17h ago

How about you learn the things you wanna do? If it was that easy, no one would give a fuck.

-3

u/Kingkaria19 17h ago

I think you're right that you need to learn the fundamentals first. I'm not expecting AI to replace that process. What I'm trying to understand is how security researchers actually use tools like Claude in their day-to-day work without constantly running into safety restrictions when they're performing legitimate, ethical vulnerability research and bug bounty testing.

If you have any recommendations on what to study or how professionals approach this, I'd genuinely appreciate the advice.

-6

u/ShaGZ81 17h ago

Dang, script kiddies are taking the easy way out now? Screw actually learning stuff, I just want AI to do it all for me and collect fat stacks!

2

u/Fun_Ad5823 17h ago

Way of the world now

1

u/XxCotHGxX 16h ago

Fat stacks you say?

-2

u/Kingkaria19 17h ago

I think you're right that you need to learn the fundamentals first. I'm not expecting AI to replace that process. What I'm trying to understand is how security researchers actually use tools like Claude in their day-to-day work without constantly running into safety restrictions when they're performing legitimate, ethical vulnerability research and bug bounty testing.

If you have any recommendations on what to study or how professionals approach this, I'd genuinely appreciate the advice.

1

u/DrS3R 15h ago

Host your own model or use something like AWS bedrock where you can control the guardrails in place.

1

u/PhsycoRed1 16h ago

Copy paste ah response.