PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What We’ve Learned from 5 Months of Hackbot Activity

hackerone.com | blog | #ai-security | #bug-bounty | #burp-suite | #offensive-security | #xbow | #hackbot | #hallucination
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Five months after AI hackbots joined HackerOne, XBOW topped the US leaderboard and Burp Suite added MCP support. Hallucinated vulnerability reports remain the key challenge.
Published
Collected

Related coverage

blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
blog · xbow.com
Engineering the Impossible: How XBOW De-Duplicates Findings
How XBOW de-duplicates autonomous testing findings: each is embedded across four views (description, reproduction, location, impact) with class-specific weights, cutting report volume 30%.
blog · netspi.com
12 Top Pentesting Tools for Offensive Security Pros
NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.
research · ethiack.com
AI Pentesting Without the Noise: Hackbots and the Verifier
Ethiack explains how its hackbot pairs autonomous vulnerability discovery with a Verifier to curb AI hallucinations, and how OWASP Benchmark testing validates precision in black-box conditions.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back