Blog
Featured
All posts
-
Partnering with OpenAI
-
How We Could Have Backdoored Bash
-
Which Models Can Exploit PHP2Shell?
-
Hacking OpenAI
-
How an OpenAI Model Hacked Hugging Face
-
Could Code Review Have Prevented WP2Shell?
-
Breaking into PostHog
-
Watching GPT-5.6 Write a Chrome Exploit
-
Open-Weight Models Are Catching Up
-
Hacking Metabase Cloud
-
The Attack Surface Is Everyone Now
-
Hacktron vs. XBOW and Aikido
-
When Your VPN Opens Your Network
-
RCE in VS Code Copilot Chat
-
Hacktron Review for Open Source
-
The Vercel React2Shell Challenge
-
Why Mythos Doesn’t Matter to Us
-
Introducing Hacktron Review
-
I Let Claude Opus Write a Chrome Exploit
-
Pre-auth RCE in OpenAM
-
Vibe-Hacking Cloudflare’s vinext
-
Turning Cluely into Malware
-
RCE in Google Antigravity
-
Pre-auth RCE in BeyondTrust
-
Hacktron Is SOC 2 Type 1 Compliant
-
Pwning OpenAI Atlas
-
One-Click UXSS in Perplexity Comet
-
Auditing JDBC Drivers at Scale
-
SupaPwn
-
Introducing Hacktron
-
Executing Python from a Comment
-
Pre-auth RCE in DELMIA Apriso
-
Another Pre-auth RCE in Ivanti EPMM
-
AI Hackers: Threat and Opportunity
-
How to Make AI Hack like a Human
-
RCE in Element Desktop
-
RCE in Discord Desktop
-
RCE in VS Code Restricted Mode