8 stories tagged penetration-testing, newest first.
13 points by is_dev_active | 1 comments
Medium post describing ARGUS, an MIT-licensed open-source cybersecurity platform on GitHub using AI agents for threat hunting, automated response, and pentesting.
31 points by soltanov | 9 comments
GitHub repository listing uncensored AI models and models fine-tuned for offensive cybersecurity tasks, with a capability comparison chart.
338 points by denysvitali | 82 comments
A blog post on finding and exploiting common misconfigurations in Microsoft IIS web servers, starting from the default IIS splash page.
376 points by jc4p | 200 comments
A blog post by Kasra Rahjerdi describing building a deliberately vulnerable app and spending $1,500 testing whether various LLMs could hack it.
325 points by StefanBatory | 82 comments
GTFOBins is a curated list of Unix-like executables whose legitimate functions can be abused to bypass local security restrictions in misconfigured systems.
420 points by mycroft_4221 | 168 comments
CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.
381 points by MBCook | 177 comments
Ars Technica article reporting that an Iowa county paid $600,000 to settle with pentesters Gary DeMercurio and Justin Wynn, who were arrested while assessing courthouse security.
438 points by ylk | 173 comments
X41 D-Sec news post announcing its white box penetration test and threat modeling review of the Mullvad VPN application.