Connecting an attack agent: planning, execution, and feedback
Build a bounded HTTP testing loop with explicit planner, executor, verifier, trace, and stop conditions.
#penetration-testing
6 postsCan AI compose an attack chain? From CTFs to a public incident
Replay a ticket attack chain and analyze Anthropic’s public incident report, separating evidence, human decisions, evaluation shortcuts, and visibility limits.
How AI turns a target into an attack surface
Turn ticket-service documentation and HTTP observations into a source-linked attack surface and choose the next minimal test.
How to verify an AI-generated exploit test
Replay HTTP exploit requests against vulnerable and fixed services, verify exact resource content, and reject status-only success claims.
How AI attacks another AI: indirect injection and tool misuse
Trace hostile attachments into tool requests and separate model susceptibility from backend data exposure using a live-LLM training lab and HTTP replay.
Let AI look for vulnerabilities: from clues to testable hypotheses
Turn AI suspicions into falsifiable authorization hypotheses with same-tenant and cross-tenant controls.