Skip to main content
PHP2shellXBOW now tests for it and proves what is exploitable. Patch today, then prove it.
Black Hat Europe 2026The future is zero days away. Meet us in London.
AWS re:Invent 2026The future is zero days away. Meet us in Vegas.
Nico Waisman

Nico Waisman

CISO @ XBOW

LinkedInXGitHub
BlogCompany News
The Road to Top 1: How XBOW Did It

The Road to Top 1: How XBOW Did It

Nico Waisman
BlogSecurity Research
The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project

The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project

Nico Waisman
BlogSecurity Research
SSRF & URI Validation Bypass in 2FAuth

SSRF & URI Validation Bypass in 2FAuth

Nico Waisman
BlogSecurity Research
How XBOW Found a Scoold Authentication Bypass

How XBOW Found a Scoold Authentication Bypass

Nico Waisman
BlogAI Research
XBOW Validation Benchmarks: Show Me the Numbers!

XBOW Validation Benchmarks: Show Me the Numbers!

Nico Waisman