PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hackian and the Ghosts in Your Business Logic

ethiack.com | research | #bug-bounty | #appsec | #access-control | #ai-pentesting | #business-logic | #sonarqube | #ethiack | #hackian
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ethiack's Hackian agent exploited business-logic flaws scanners miss, chaining a SonarQube branch-metadata permission gap and a second access-control issue to reach private projects it shouldn't see.
Published
Collected

Related coverage

research · ethiack.com
Evaluating Pentesting Agents for the Real-World Part 2
Ethiack's EthiBench part 2 evaluates AI pentesting agents beyond single runs, covering significance under budget limits, cumulative detection, temporal behavior, and cost-effective target subsets.
research · ethiack.com
Evaluating Pentesting Agents for the Real-World
Ethiack launches EthiBench, an open evaluation protocol for AI pentesting agents using realistic targets, structured ground truth with LLM-as-a-judge matching, and richer metrics than success rates.
research · ethiack.com
One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent
Ethiack's Hackian agent found a one-click account-takeover-to-RCE chain in OpenClaw fully autonomously in under two hours, leaking the Gateway Control UI's auth token from an attacker-controlled site.
research · ethiack.com
AI Pentesting Without the Noise: Hackbots and the Verifier
Ethiack explains how its hackbot pairs autonomous vulnerability discovery with a Verifier to curb AI hallucinations, and how OWASP Benchmark testing validates precision in black-box conditions.
research · theori.io
What are business logic vulnerabilities, and why are they so hard to catch?
Business logic flaws execute correctly but violate business intent — like a password reset token returned in the HTTP response — and Xint explains why SAST and human testers miss them.
research · swarm.ptsecurity.com
Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite
PT SWARM chained CVE-2026-22765 (privilege escalation) and CVE-2026-22766 (RCE) plus business-logic flaws into unauthenticated remote code execution against Dell Wyse Management Suite On-Prem.
Back