tag: offensive-security

2026-03-06

"Current LLMs are better vulnerability researchers than I am"

Nicholas Carlini at [un]prompted makes the startling claim that current LLMs are better vulnerability researchers than he is.

ai security offensive-security social-media

2026-03-08

Agents of Chaos

Exploratory red-teaming study of autonomous language-model-powered agents in a live lab environment, documenting failures like unauthorized actions, sensitive data disclosure, destructive behavior, spoofing, and partial system takeover.

ai security offensive-security research-paper

Shannon — AI Pentester by Keygraph

Autonomous white-box AI pentester for web applications and APIs that combines source code analysis with live exploitation and only reports proven vulnerabilities.

ai security offensive-security open-source

2026-03-09

EvilWAF - Web Application Firewall Testing and Bypass Toolkit

Transparent MITM proxy for WAF bypass and detection, with TCP/TLS fingerprint rotation, Tor IP rotation, and origin IP hunting.

security offensive-security tools open-source

Il Prototipo Avvelena il Server

Hands-on walkthrough of CVE-2025-55182 / CVE-2025-66478 — prototype pollution RCE in Next.js (CVSS 10.0). From Docker lab setup to root shell via a single curl.

security offensive-security blog italian

Replaced by a Goldfish

A pentester's take on why AI hype around replacing security professionals doesn't hold up — and why the goldfish memory of LLMs is the real bottleneck.

ai security offensive-security blog opinion

VulHunt Community Edition

Vulnerability hunting framework by Binarly's research team, built on top of the BIAS binary analysis system with MCP integration.

ai security offensive-security reverse-engineering mcp tools open-source

2026-03-10

"Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter"

Root cause analysis of CVE-2025-43300 — an out-of-bounds write in Apple's ImageIO RawCamera framework exploited in zero-click campaigns. Quarkslab walks through binary diffing, DNG/JPEG lossless compression internals, and the exact 2-byte mismatch between SamplesPerPixel and NumComponents that causes the heap OOB write.

security offensive-security reverse-engineering blog

2026-03-11

"Windows Defender ACL Blocking: A Silent Technique with Serious Impact"

Binary Defense documents how attackers can silently disable Windows Defender by manipulating file ACLs, preventing the AV engine from reading its own components without triggering visible alerts — a stealthy persistence technique.

security offensive-security blog

2026-03-12

hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions

StepSecurity details how an AI-powered bot called hackerbot-claw is actively exploiting misconfigured GitHub Actions workflows to compromise CI/CD pipelines.

ai security offensive-security devops blog

Il web ha due facce

An Italian-language article exploring the dual nature of the web, examining how the same technologies that empower users can also be weaponized for surveillance and offensive purposes.

ai security offensive-security blog italian

2026-03-16

Remote Code Execution in Yamaha Synthesizers via MIDI Files

A security research talk demonstrating how crafted MIDI files can achieve remote code execution on Yamaha synthesizers, exploiting vulnerabilities in the firmware's MIDI parsing logic.

security offensive-security reverse-engineering audio blog

2026-03-19

"Emergent Cyber Behavior: When AI Agents Become Offensive Threat Actors"

"Research from Irregular detailing how AI agents deployed for routine enterprise tasks can autonomously hack systems, discover vulnerabilities, and escalate privileges without adversarial prompting."

ai security offensive-security research-paper

2026-03-23

Il Pacco È Avvelenato

Un articolo in italiano sui supply chain attack via package manager, con focus su typosquatting, dependency confusion, xz-utils (CVE-2024-3094) e CI/CD poisoning.

security offensive-security supply-chain blog italian

2026-04-23

RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen

Conference talk on Xbox One hacking and reverse engineering techniques.

reverse-engineering offensive-security events

2026-04-24

Mythos-like hacking, open to all

Xbow argues for making advanced hacking capabilities broadly accessible, framing the topic around democratized security research and offensive tooling.

security offensive-security opinion blog

2026-05-04

Fast16 Malware

Analysis of Fast16 malware — a fileless, PowerShell-based RAT deployed via Google Ads that hijacks Chrome profiles and uses legitimate processes to blend in, targeting financial services and tech sectors

security offensive-security threat-intelligence

Finding Zero Days with Any Model

How to use any pre-trained model — even small ones — to find zero-day vulnerabilities by training a classifier on code patterns that lead to exploitable bugs

ai security offensive-security

Here We Go Again: A Five-Bug Chain to Arbitrary APK Install on Samsung S25

A 5-bug vulnerability chain on Samsung S25 enables arbitrary APK installation without user permission, exploiting Android's package manager and Samsung's overlay system

security offensive-security reverse-engineering

SmokedHam, la backdoor scelta dagli amministratori IT

SmokedHam (UNC2465) — backdoor C#/PowerShell su Cloudflare Workers, distribuita via malvertising a IT admin tramite installer contraffatti di RVTools, PuTTY e Remote Desktop Manager

security offensive-security threat-intelligence

2026-05-07

I Built an AI That Builds Zero Day Exploits

Autonomous zero-day generation pipeline — choosing the attack surface, BYOVD attacks, binary exploitation with LLMs, automating reverse engineering, finding kernel vulns with Claude, and how much the system costs to run

security ai offensive-security podcast

2026-05-08

Copy Fail 2: Electric Boogaloo

Linux kernel LPE via ESP-in-UDP receive — same Copy Fail primitive (CVE-2026-31431) but in the xfrm subsystem. AEAD decrypt in-place over splice'd page-cache pages, ~22s to root via single-byte page-cache writes to /etc/passwd

security systems offensive-security

2026-06-04

1-Click GitHub Token Stealing via a VSCode Bug

An attacker can steal a GitHub token that can read and write to private repos by clicking a link to a Jupyter notebook on github.dev, exploiting webview keydown event bubbling to install a malicious extension.

security offensive-security blog

Kimiko

Configuration repository that transforms Kimi Code CLI into an unrestricted agent for offensive security, red-teaming, and penetration testing — removes AI safety guardrails via a zero-blocker authorization flow.

tools open-source offensive-security ai