Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

yeswehack.com | blog | #bug-bounty | #vulnerability-research | #codex | #offensive-security | #ai-agents | #llm

Summary

YesWeHack on using Codex for bug bounty research: in black-box labs it exploited a DOM XSS in under four minutes and won admin access via a JWT flaw, with subagents and skills aiding validation.
Published
Collected

original ↗

Related coverage

  1. Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification (github.com)
  2. Google Bug Hunters (bughunters.google.com)
  3. GPT-6 Astra on GitLab: Faster runs, fewer tokens used (about.gitlab.com)
  4. PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting (crowdstrike.com)
  5. Introducing the Red Agent POV Series (wiz.io)
  6. Exploiting Tool and Function Calling in LLM Agents (blog.sentry.security)

back