PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing Joro: Using AI to Build Security Tooling

bishopfox.com | tool | #ai-security | #offensive-security | #c2 | #web-exploitation | #joro | #ai-assisted-development | #intercepting-proxy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox introduces Joro, a collaborative web exploitation framework — intercepting proxy, out-of-band callbacks, web shell generation, C2 integration — built almost entirely with AI.
Published
Collected

Related coverage

tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
tool · github.com
Linux LPE Toolkit: Multi-Architecture Automated Privilege Escalation Tool
Provides penetration testers and red teams with an all-in-one, multi-architecture automated post-exploitation toolkit that simplifies Linux kernel privilege escalation without requiring on-target compilers.
blog · bishopfox.com
From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion
Bishop Fox forked Mythic's Apollo agent and built a custom obfuscator to evade EDR, but Apollo's architecture assumed readable symbol names — obfuscation failed, pushing a from-scratch redesign.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
Back