Featured
All writing
-
2026-10-30 How We Could Have Backdoored Bash
-
2026-10-26 Node2Shell: RCE in the Node.js Brotli Decoder
-
2026-10-26 Which Models Can Exploit PHP2Shell?
-
2026-10-22 PHP2Shell: RCE in PHP
-
2026-09-13 Hacking OpenAI
-
2026-07-23 How an OpenAI Model Hacked Hugging Face
-
2026-07-19 Could Code Review Have Prevented WP2Shell?
-
2026-07-15 Breaking Into PostHog
-
2026-07-14 Watching GPT-5.6 Write a Chrome Exploit
-
2026-07-08 Open-Weight Models Are Catching Up
-
2026-06-25 Hacking Metabase Cloud
-
2026-06-09 The Attack Surface Is Everyone Now
-
2026-06-05 Hacktron vs. XBOW and Aikido
-
2026-05-20 When Your VPN Opens Your Network
-
2026-05-13 RCE in VS Code Copilot Chat
-
2026-05-08 Hacktron Review for Open Source
-
2026-05-04 The Vercel React2Shell Challenge
-
2026-04-29 Why Mythos Doesn’t Matter to Us
-
2026-04-28 Introducing Hacktron Review
-
2026-04-15 I Let Claude Opus Write a Chrome Exploit
-
2026-04-07 Pre-Auth RCE in OpenAM
-
2026-02-27 Vibe-Hacking Cloudflare’s vinext
-
2026-02-14 Turning Cluely Into Malware
-
2026-02-08 RCE in Google Antigravity
-
2026-02-06 Pre-Auth RCE in BeyondTrust
-
2026-01-13 Hacktron Is SOC 2 Type 1 Compliant
-
2025-12-02 Pwning OpenAI Atlas
-
2025-11-24 One-Click UXSS in Perplexity Comet
-
2025-11-21 Auditing JDBC Drivers at Scale
-
2025-11-17 SupaPwn
-
2025-08-14 Introducing Hacktron
-
2025-07-28 Executing Python From a Comment
-
2025-06-03 Pre-Auth RCE in DELMIA Apriso
-
2025-05-16 Another Pre-Auth RCE in Ivanti EPMM
-
2025-05-08 AI Hackers: Threat and Opportunity
-
2025-04-21 How to Make AI Hack Like a Human
-
2022-08-13 RCE in Element Desktop
-
2022-07-29 RCE in Discord Desktop
-
2022-06-29 RCE in VS Code Restricted Mode