HN Explorer

danieltk76

↗ HN profile [ 170 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Show HN: RCE in Atlantis (medium.com)

    Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.28.0…

    2 points 0
  2. 1 points 0
  3. 1 points 0
  4. 1 points 0
  5. 1 points 0
  6. 1 points 0
  7. 1 points 0
  8. Show HN: Misalignments when using AI for hacking (blog.vulnetic.ai)

    I wrote this article to breakdown some of the recent misalignment cases where models have broken out of containment in conjunction with our work at Vulnetic and how we prevent these mishaps in production.

    3 points 0
  9. 1 points 0
  10. Show HN: Sable Found a SQL Injection in a Legacy Financial Portal (blog.vulnetic.ai)

    How our hacking agent Sable found a classic SQL Injection in a legacy financial portal

    1 points 0
  11. Show HN: Evading an AI SOC with Sable from Vulnetic (blog.vulnetic.ai)
    1 points 0
  12. Show HN: The new security frontier for LLMs; SIEM evasion (blog.vulnetic.ai)

    For the first time we are seeing our agent have the ability to perform SIEM and EDR evasion. If models are capable of SIEM evasion, organizations need to assume adversaries will have access to these capabilities soon.

    2 points 0
  13. Show HN: LLMs are getting pretty good at Active Directory exploitation (blog.vulnetic.ai)

    One thing I will say is that at Vulnetic we will basically jumble different misconfigurations into a network and the agent always seems to find a way to exploit them. We have tried making them esoteric, and we are even…

    3 points 0
  14. Show HN (medium.com)
    2 points 0
  15. Show HN: AI attacking AI? Vulnetic offensive security agent compromising models (blog.vulnetic.ai)
    2 points 0
  16. How good is AI at Hacking AD? (medium.com)
    1 points 0
  17. Offensive Security After the Price Collapse (medium.com)
    1 points 0
  18. Show HN: Vulnetic's multi-purpose hacking agent (app.vulnetic.ai)

    What it is: A hacking agent you run from a web UI. It enumerates, exploits, validates, and drafts reports. Why we built it: manual pentests are slow and scarce. We want repeatable coverage between human-led tests. What…

    1 points 0
  19. R&D behind hacking agents (medium.com)
    2 points 0