iiinova — where your digital self keeps evolving

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 28/09/2026

Did someone say "corn"? Come join us for our Certified Vibe Hacker workshop on Saturday at Corn Con to learn about how you can use cutting edge AI-powered tools to take your cybersecurity team to the next level. #vibehacker #certifiedvibehacker #corncon #hacker #workshop #hacking #cybersecurity

000

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 12/08/2026

Headed to HOPE in NYC? Become a Certified Vibe Hacker with us. Drive an AI agent through four scenarios: logs, vuln prioritization, code analysis, and a web app pentest. Sun Aug 16, 10am-12pm · New Yorker Hotel, Workshop A More info: schedule.hope.net/hope26/talk/... #HOPEconf #infosec

schedule.hope.net

Certified Vibe Hacker HOPE 26

Most security professionals are overloaded with tools, but what they really need is more focus and leverage. This workshop introduces “vibe hacking,” a practical, hands-on approach to using agentic AI...

021

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 30/07/2026

Because it is one integrated environment instead of a browser tab bolted onto a chat, all of this is faster, more powerful, and more connected. Modes and approval gates keep the agent in bounds, every command is visible. Nothing happens off-screen.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 30/07/2026

Watch mode: toggle it and a passive monitor observes your terminal and browser, surfacing brief advice on missed steps, cleanup, or scope. It only advises. No tools of its own. It observes, you decide. #dfir #redteam

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 30/07/2026

77 tool integrations pull your critical data into one place: threat intel, SIEM, EDR, ticketing. Plus a built-in intel server with ATT&CK, NVD, VirusTotal, Shodan, Censys, Exploit-DB, no key needed. #threatintel #osint

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 30/07/2026

The agent drives a real sandboxed Chromium browser. It inspects the DOM, pulls full request/response bodies, reads cookies including HttpOnly, walks login flows, and intercepts traffic to hold, modify, or block requests. JS and interception are approval-gated. #appsec #websecurity

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 30/07/2026

Our biggest update yet: The Agentic Workbench for Cybersecurity, rebuilt from the ground up. An agent that lives on your machine and actually does the work, in one window where analysis lives next to execution. Here's the tour. #cybersecurity #hackersidekick #infosec

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 29/05/2026

New study just dropped: 100% of Hacker Sidekick users are the best in their industry.

020

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 21/05/2026

Auto top-up billing so you never get cut off mid-pentest. Your plan includes a token allowance. Need more? It tops up automatically. You set the cap. #pentesting #redteam #cybersecurity

110

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 21/05/2026

Dozens of threat intel tools built into the editor. Shodan, VirusTotal, MITRE ATT&CK, NVD, AbuseIPDB. All read-only, no setup. Look up CVEs, check IPs, pull Shodan results without leaving the editor. #threatintel #osint #shodan #mitreattack

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 21/05/2026

Workspace indexing. Open a project and the AI understands your entire codebase. Semantic search, vectors stored locally. Your code never leaves your machine. #codesearch #infosec #cybersecurity

111

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 21/05/2026

Automatic model routing. The editor picks the right AI for the task. General coding gets one model. Offensive security work gets routed to a model built for that domain. You don't configure anything. You just work. #AI #offensivesecurity #pentesting

110

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 14/05/2026

What makes this demo different from most AI showcases: it shows the failures. The wrong API endpoints. Reading the n8n source code inside the Docker container to figure out why. Multiple iterations before the exploit works. The AI handles the tedious parts so you can focus on the important parts.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 14/05/2026

The attack: send application/json to a Form Trigger endpoint instead of multipart/form-data. The handler writes the attacker-controlled files object directly into the request body. Point filepath at /etc/passwd. The workflow execution data returns the contents base64-encoded.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 14/05/2026

Hacker Sidekick has once again autonomously exploited a critical vulnerability in popular software, this time a Remote Code Execution vulnerability in n8n, the workflow automation platform that thousands of companies run in production. One prompt. Video and blog: hackersidekick.com/hacker-sidek...

hackersidekick.com

Hacker Sidekick Achieves Remote Code Execution on n8n with CVE-2026-21858

One prompt, no guidance: Hacker Sidekick built a PoC for CVE-2026-21858, mapped file read to RCE on n8n, validated vulnerable vs patched Docker targets, and documented the full chain.

110

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 09/05/2026

The RCE assessment is what sold me on this demo. It doesn't oversell. Documents the DoS as reliable, the RCE as a research foundation with real blockers (build variance, ASLR, timing). That's the kind of honesty practitioners trust.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 09/05/2026

Source code diffing. Root cause identification. Docker lab. Python PoC with two modes (DoS + detection). Heap analysis for RCE. Automated validation harness. Technical report with detection guidance. Not just an exploit. An entire research pipeline. One prompt.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 09/05/2026

We gave Hacker Sidekick a CVE number and it built a complete exploit development workflow on its own. Research, source diffing, Docker lab, working PoC, validation, technical report. No follow-up prompts. CVE-2026-23918 Full video and blog: hackersidekick.com/exploiting-f...

hackersidekick.com

Exploiting a 4-Day-Old CVE with Hacker Sidekick in 40 Minutes

Watch the full session: Hacker Sidekick researched CVE-2026-23918, built a Docker lab, delivered a Python PoC, explored RCE, validated patched vs vulnerable targets, and wrote detection guidance—in ab...

110

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 09/05/2026

What it built: downloaded Apache source, diffed 2.4.66 vs 2.4.67, found the root cause in h2_mplx.c, built Docker labs for both versions, wrote a Python PoC with DoS and detection modes, iterated until crashes were reliable. All on camera. Nothing staged.

000

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 06/05/2026

I have this exact same one, it’s probably my favorite tool I own.

000

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 03/05/2026

If you're like us, you might be up to some late night hacking. Now's the perfect time to download Hacker Sidekick and see what it's like when the AI works with you, on your system, with your tools. hackersidekick.com?utm_source=b... #cybersecurity #infosec #hackersidekick #agenticAI #pentesting

010

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 29/04/2026

The desktop app is the operator's workspace. Local tools, agentic workflows, on your machine. The fusion server is the enterprise backbone: model routing, identity, connectors, org knowledge, guardrails. All feeding into the desktop as one unified platform. Not two products. One architecture.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 29/04/2026

Two things drove this. Practitioners wanted AI that could actually execute locally: connect to tools, run agentic workflows, not just chat in a browser. And enterprise teams needed on-prem compute, on-prem inference, and single tenancy. So we built for both.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 29/04/2026

If you know Hacker Sidekick as a web app, that's changing. We just published a post explaining the shift: a new desktop application for practitioners, and the evolution of our web platform into what we're calling the fusion server. hackersidekick.com/the-desktop-...

hackersidekick.com

The Desktop, the Server, and What We Mean by "Fusion"

From our Open WebUI roots to the desktop and fusion server: one architecture for operators and orgs.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 27/04/2026

The feedback that mattered most: people didn't want AI that talks about security. They wanted AI that executes. Run tools. Chain workflows. Work the way practitioners actually work. So we built the Integrated Hacking Environment: a desktop workspace purpose-built for cybersecurity.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 27/04/2026

Late 2024: every major LLM refused to help with legitimate security research. So I built one that would and shared it around Chicago's cybersecurity community. A close friend joined in early 2025, we rebuilt it on Open WebUI, and took it to DEF CON, Thotcon, Cyphercon, and SecretCon.

github.com

GitHub - open-webui/open-webui: User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

User-friendly AI Interface (Supports Ollama, OpenAI API, ...) - open-webui/open-webui

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 27/04/2026

Now that we're posting again, I wanted to share the eighteen-month journey behind Hacker Sidekick. From a frustrated side project to the desktop application we just launched. hackersidekick.com/what-weve-be...

hackersidekick.com

What We've Been Building

The journey over the past eighteen months - from a model without guardrails to the desktop IHE, and what comes next.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 23/04/2026

This is the first of weekly posts about what we're building and where we're headed. No more radio silence. Full announcement: hackersidekick.com?utm_source=t... #cybersecurity #infosec #pentesting #AI

000

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 23/04/2026

Enterprise teams: your web deployment isn't going away. It becomes the backend fusion platform - connectors, identity, context. The desktop app is where your operators actually work Demo hackersidekick.com/demo-intake?... #pentesting #redteam #blueteam #appsec #desktopapp #securitytools

hackersidekick.com

Schedule a Demo | Hacker Sidekick

Tell us about your team, then book a 30-minute Hacker Sidekick demo.

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 23/04/2026

The desktop app can acess your scanners, disassemblers, CLIs, and local artifacts directly. Agentic workflows that chain recon → analysis → reporting now have stable state management instead of browser sessions that time out. #offensivesecurity #defensivesecurity

100

Hacker Sidekick - The Agentic Workbench for Cybersecurity @hackersidekick.com · 23/04/2026

We've been quiet for a few months. Heads down, building Today Hacker Sidekick is moving from the browser to the desktop Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵 hackersidekick.com?utm_source=b... #securityengineering #agenticAI

165