Skip to main content
PHP2shellXBOW now tests for it and proves what is exploitable. Patch today, then prove it.
Black Hat Europe 2026The future is zero days away. Meet us in London.
AWS re:Invent 2026The future is zero days away. Meet us in Vegas.
Federico Kirschbaum

Federico Kirschbaum

Head of Security Lab @ XBOW

LinkedIn
ResourceWebinars
Webinar on Chrome Full-Chain Exploit

Get past the PHP2shell panic and prove what's exploitable

Federico Kirschbaum, Sarah Hyatt
BlogSecurity Research
XBOW and Onapsis Collaborate to Uncover 14 SAP Vulnerabilities

XBOW and Onapsis Collaborate to Uncover 14 SAP Vulnerabilities

Federico Kirschbaum
BlogCompany News
Black Hat 2026: Hacking the Past, Hacking the Future

Blackhat 2026: Hacking the Past. Hacking the Future.

Federico Kirschbaum
ResourceWebinars
Prove It Like It's 2026: Hunting Zero-Days with XBOW

Hack Like It's 1999. Prove It Like It's 2026

Federico Kirschbaum, Alex Plattel
ResourcePodcasts
Scanner Results Are a Starting Point. Here’s What Comes Next. |Application Security Weekly

Scanner Results Are a Starting Point. Here’s What Comes Next. | Application Security Weekly

Federico Kirschbaum
ResourcePodcasts
XBOW, AI Hackers, and the Future of Pen Testing | Three Buddy Problem

XBOW, AI Hackers, and the Future of Pen Testing | Three Buddy Problem

Federico Kirschbaum
BlogSecurity Research
Dead.Letter - CVE-2026-45185

Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim

Federico Kirschbaum, Andres Luksenberg