PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Don’t Fear The AI Reaper: Using LLMs to Hack Better and Faster

ethiack.com | blog | #ai-security | #offensive-security | #llm | #vibe-coding | #workshop | #recon | #ethiack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ethiack's C-DAYS 2025 workshop shares ways to fold LLMs into security workflows like reconnaissance, subdomain enumeration, and payload generation, plus vibe-coding risks in AI-generated apps.
Published
Collected

Related coverage

blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
blog · projectzero.google
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Project Naptime evaluates the offensive security capabilities of large language models, presenting a methodology, tooling setup, and early successes finding real vulnerabilities.
vulnerability · projectdiscovery.io
Beyond the Model: Neo Hunts, Exploits, and Proves 22 Zero-Days.
LLMs find vulnerabilities fast but flood teams with unverified reports. Neo confirmed 22 CVEs across 13 open source projects at ~10-20% false positives, with working exploits and runtime evidence.
tool · projectdiscovery.io
Inside the benchmark: app architectures, walkthroughs of findings, and what each scanner actually caught
Part 2 of the vibe coding benchmark dissects three AI-built apps (healthcare, banking, insurance), detailing what Neo caught, what Claude Code got wrong, and what both missed on AI-generated code.
blog · ethiack.com
How ANA Aeroportos Kept 10 Airports Secure While Attackers Got Faster
Ethiack case study: ANA Aeroportos, with 10 airports and 60M annual passengers, relies on continuous AI pentesting and human ethical hacking to secure 24/7 IT/OT operations.
blog · ethiack.com
How Smartex Cut Time-to-Mitigation from Weeks to Days
Ethiack case study: textile AI-inspection vendor Smartex replaced slow periodic testing with continuous autonomous pentesting, cutting vulnerability time-to-mitigation from weeks to days.
Back