This badge covers JavaScript sandbox escape vulnerabilities. From prototype chain navigation and Function constructor abuse to vm module escapes, static-eval bypasses, real-world CVEs, and advanced pr...

Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at GMO Flatt Security Inc. A while ago, I participated in the Google Cloud VRP bugSWAT, a live hacking event organized by Google. During...

Capture-the-flag (CTF) competitions has been the biggest part of my journey in cyber security, and probably is the case for most people beginning their journey in cyber security. But I'm struggling to...

The Long Decompilation Process Over the last eight or so years of performing security research at Assetnote, our research team has looked at countless enterprise applications that ship with hundreds, ...

Tested 4 AI-assisted approaches for finding vulnerabilities over one week. Found real bugs — 14 confirmed vulns in one target in 20 minutes. Also burned time on an approach that found nothing useful. ...

As part of our CVE monitoring, we came across GHSA-pcq9-mq6m-mvmp (CVE-2025-68402), an authentication bypass in FreshRSS, a self-hosted RSS aggregator. It ...

CodeAnt AI found a critical authentication bypass in pac4j-jwt where an attacker can impersonate any user using only the RSA public key. Full PoC and disclosure.

Tracking the security cost of vibe coding

The MCP AuthN/Z Nightmare

mitmproxy for fun and profit: Interception and Analysis of Application

Cloudflare built a Next.js replacement in a week with AI for $1100. We pointed Hacktron at it to find what the tests missed.

High-Scale Driver Vulnerability Research with Agent Swarms

The JavaScript Code Review Badge is our badge dedicated to security code review in JavaScript. It covers the discovery of weaknesses and vulnerabilities using source code review.

Trail of Bits used ML-centered threat modeling and adversarial testing to identify four prompt injection techniques that could exploit Perplexity’s Comet browser AI assistant to exfiltrate private Gma...

CVE-2026-0603 is a high-severity second-order SQL injection vulnerability in Hibernate ORM caused by unsafe ID inlining during UPDATE and DELETE operations. Learn impact, root cause, and remediation.

Introduction We recently found ourselves looking into OpenText Directory Services (OTDS). We had seen it present on our customer's attack surface, and it seemed to be an interesting target. OTDS is a ...

CTF writeups, Go-fs

Trailing Danger: exploring HTTP Trailer parsing discrepancies

Hacktron AI Research Team discovered a critical RCE in Google’s Antigravity IDE that lets attackers take over your system just by opening a malicious website.

Explore LLM fingerprinting and its role in exposing vulnerable Ollama servers online to unauthorized access risks.

Deep technical analysis of CVE-2026-25049: How type confusion bypassed n8n's security patch and why TypeScript types aren't runtime security boundaries

This is what it actually took. From the person who architected and drove Chrome’s Flash deprecation from proposal to the final removal in…

It’s no longer just about reverse-engineering n-days. You can detect vulnerabilities in open-source repositories before a CVE is published - or even if they’re never published. Here’s how I built an L...

Intro Hello neighbours! There is still little literature on designing offensive research systems and the tools that those systems use. Two likely explanations for this are that teams have internal to…

Find access-control flaws in LLM apps using Promptfoo plugins and strategies.

A collection of skills for AI coding agents from Semgrep - semgrep/skills

Deep dive into CVE-2026-23993: HarbourJwt accepts forged JWTs when alg is unknown, bypassing signature checks via empty signatures. Fix + code review lessons.

In part 1 I detailed my approach to following a rabbit hole that almost turned into pre-auth remote code execution with a default setup. Although I didn’t ac...

On the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025

Swarmer enables stealthy Windows registry persistence by exploiting mandatory user profiles and the Offline Registry API to bypass EDR detection. Learn how this technique leverages NTUSER.MAN files to...

I didn't know Harbour even existed as a language when I found this bug. The fun part is that I also ...

Network Fuzzing Framework. Contribute to secorizon/OffByWon development by creating an account on GitHub.

Applying the security model of CORS to Agentic technologies to address common attacks against tool calling.