Research
We don’t report vulnerabilities. We prove them.
Exploit research, engineering notes, and field reports from the team building autonomous offensive security.
Latest
Recent writing
-
Xora Scans Bitbucket Now
Read article →: Xora Scans Bitbucket NowConnect a Bitbucket Cloud workspace and Xora tests it end to end: sync, scan, exploit, verify.
-
The Iron Triangle Was Just For Humans
Read article →: The Iron Triangle Was Just For HumansBetween good, cheap, and fast, we used to have to pick two. LLMs have made this concession a thing of the past.
-
wp2shell: A Build-Your-Own-Exploit Adventure
Read article →: wp2shell: A Build-Your-Own-Exploit AdventureTaking a ‘safely’ disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research, a patch diff, and an LLM, and…