Tag
Vulnerability Research
Offensive Security Academy
AI Pentesting Tools vs Automated Vulnerability Scanners
XBOW TeamAI Research
Mythos and GPT-5.5 Will Find a Lot of Vulnerabilities. Is That Enough?
Suzanne CicconeProduct
Getting to “Should I?”, Instead of “Can I?”: How XBOW Finds IDORs With High Accuracy in Ambiguous Contexts
Alvaro MuñozSecurity Research
Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim
Federico Kirschbaum, Andres LuksenbergOffensive Security Academy
What Is Insecure Direct Object Reference (IDOR), and How Do You Test for It?
XBOW TeamOffensive Security Academy
Machine Learning for Vulnerability Discovery
XBOW TeamSecurity Research
Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW
Nico WaismanProduct
XBOW AI-Driven Pentesting vs. DAST
XBOW TeamSecurity Research
Tales From the Trace: How XBOW Reasons Its Way Into Finding IDORs
Adrian Losada PitaAI Research
Tales from the Trace: How Context-Aware AI Redefines Vulnerability Reports
Ray KellyAI Research
Why LLMs Hallucinate Vulnerabilities
Albert ZieglerSecurity Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint
Nico WaismanCompany News
Black Hat & DEF CON: Running XBOW Live, Presentation Slides, and The Talk You Didn’t Miss
Nico WaismanSecurity Research
The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.
Nico WaismanSecurity Research
Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oracle
Alvaro MuñozSecurity Research
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
Alvaro MuñozSecurity Research
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
Nico WaismanSecurity Research
When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push
Javier GilSecurity Research
CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest
Diego JuradoSecurity Research
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Alvaro MuñozSecurity Research
The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project
Nico WaismanSecurity Research
LabsAI’s EDDI Project Path Traversal
Diego JuradoSecurity Research
SSRF & URI Validation Bypass in 2FAuth
Nico WaismanSecurity Research
How XBOW Found a Scoold Authentication Bypass
Nico WaismanSecurity Research
