Blog
Act II: The Search (Scene 4 & 5)
Scene 4 (The Gap) But even if fraud and breach statistics were combined into one comprehensive database, I’d still have a problem. Most cybercrime never gets reported at all. The Department of Justice estimates that only 1 in 7 cybercrimes are reported; meaning…
Act II: The Search
Scene 1 (The Investigation Begins) OK. I’m irreplaceable. But how do I prove that, objectively? After playing with ChatGPT in our little experiment, I’d been in a downward spiral. LLMs could automate vulnerability scanning, that much was clear. XBOW was finding SQLi,…
The Pentester’s Guide to AI Disruption: A 6-Part Series
Week 1: March 3 – Act I (The Crisis) March 5 – Act II, Scenes 1-3 (The Search Begins) Week 2: March 10 – Act II, Scenes 4-5 (The Gap and Realization) March 12 – Act III (The Reframe) Week 3: March 17 – Act IV, Scene 1 (The Method) March 19 – Act IV, Scene 2-3 (The…
Act I: The Crisis
Scene 1 (The Introduction) My first introduction to XBOW was a LinkedIn notification in late 2024. We’re hiring at XBOW! We’re on a mission to redefine offensive security through AI. The email was a LinkedIn summary. A repost from Nico Waisman. The “use after free”…
cURL for Pentesters: Part 3 – Advanced Techniques
In Part 1 and Part 2, we covered the fundamentals and intermediate techniques. Now we’ll explore curl’s automation capabilities through globbing, handling various authentication schemes, and learn techniques for bypassing common restrictions. These skills separate…