PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Eyeballer 2.0 Web Interface and Other New Features

bishopfox.com | blog | #ai-security | #pentesting | #open-source | #reconnaissance | #security-tools | #machine-learning | #eyeballer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Eyeballer 2.0's new browser-based interface lets pentesters drag in screenshots from large external footprints and get AI-labeled results; all processing is client-side, so no data leaves the machine.
Published
Collected

Related coverage

blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
The Pen Testing Tools We’re Thankful for in 2021
Bishop Fox's 2021 list of pen testing tools used on real engagements: recursive content discovery with Feroxbuster, AI screenshot triage via Eyeballer 2.0, Dirble, and Autovnet.
blog · bishopfox.com
9 Red Team Tools For a Successful Red Teaming Engagement
Nine red team tools from Bishop Fox: CursedChrome for browser hijacking, Universal Loader for cross-platform in-memory loading, Overlord for infrastructure automation, and Sliver's implant framework.
Back