PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From Zero Python to Building AI Agents That Hunt Bugs For You

hackenproof.com | research | #ai-security | #bug-bounty | #web3 | #python | #ai-agents | #tutorial | #langchain
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A guest tutorial by hunter Zakaria Eddafri: a from-zero Python path to building autonomous bug-hunting agents, covering subprocess automation, HTTP testing, Web3 scanning and a LangChain ReAct loop.
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
research · portswigger.net
Creating a 3D world in pure CSS
A tutorial on building a first-person browsable 3D world with pure CSS and no JavaScript: 3D object placement, perspective and transforms, plus rudimentary keyboard and mouse interactivity.
research · blog.quarkslab.com
Paramiko Security Audit
Quarkslab's security audit of Paramiko for OSTIF covered the pure-Python SSHv2 library, its cryptography dependencies and rust-openssl bindings, entropy sources, constant-time code, testing and CI/CD.
research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
Arybo: cleaning obfuscation by playing with mixed boolean and arithmetic operations
Introducing Arybo, a Python module wrapping a native library for understanding, creating and simplifying Mixed Boolean-Arithmetic expressions, aiding de-obfuscation of protected code.
Back