Articoli tecnici, metodologie offensive, cyber operations potenziate dall'AI e analisi di minacce emergenti.
BackBox AI built a complete exploit chain against the v8CTF Chrome 152 target: an address leak, arbitrary read and write inside the V8 sandbox, a parser overflow that writes outside it, and a ROP chain that opens and reads a file on disk. Here is how each stage works, and what it says about patch lag.
LeggiAbbiamo affrontato con BackBox AI l'intera Season 11 di Hack The Box, tredici macchine da Easy a Insane, chiudendo la stagione con tutte le flag. Il punteggio è la parte meno interessante: conta fin dove arriva un agente da solo e in quali situazioni serve ancora una persona.
LeggiDuring a client-commissioned penetration test, BackBox AI pivoted from gray-box to white-box, fingerprinted the exact nopCommerce version, pulled the matching source, and found a stored XSS: an SVG animate onbegin handler that slips past the platform's HtmlFormatter blocklist and a fronting web application firewall. The sanitizer root cause is unfixed through the latest release (4.90.6).
LeggiNella cybersecurity basata sull'AI la differenza non la fa il modello proprietario, ma l'harness: l'insieme di strumenti, contesto, orchestrazione, interfacce e controlli che permette ai migliori modelli disponibili di lavorare in modo affidabile su sistemi reali.
LeggiBackBox Labs analyzed the NetBird client daemon on Linux and chained several individually moderate weaknesses in its local gRPC interface into a full root privilege escalation affecting versions up to and including 0.75.0, with no memory corruption, kernel bugs, or race conditions involved.
LeggiWe pointed BackBox AI at a live Android RAT and asked for a full analysis. It unpacked a dropper, decoded an XOR-obfuscated C2 URL straight from smali bytecode, confirmed that the C2 infrastructure was still responding by speaking the malware's own protocol, and attributed the operation. This is what evidence-driven analytical reasoning looks like when it reaches past red teaming.
LeggiNell'era dell'intelligenza artificiale, chi controlla modelli, dati e infrastrutture controlla molto più della tecnologia. Perché la sovranità tecnologica è oggi una questione strategica, e il contributo di un progetto nato in Italia.
LeggiBackBox AI found a local root escalation on Linux distributions that package Bettercap with a systemd service. The flaw is not in Bettercap's code but in the packaging: the service runs its REST API as root with authentication disabled. The unit was removed upstream.
LeggiBackBox AI found that a small crafted file could exhaust available memory during an ordinary Binwalk scan, with no extraction flag required. The Binwalk maintainer confirmed the issue and fixed it by capping decompression at 100 MB.
LeggiBackBox AI surfaced two header-trust weaknesses in SearXNG: a Host header injection leading to open redirect and cache poisoning, and an X-Forwarded-For rate-limiter bypass. Disclosed responsibly, both come down to trusting client-controlled HTTP headers.
LeggiPerché BackBox AI punta sull'architettura più che sulla dimensione del modello, e come collaboriamo, pro bono, con un gruppo selezionato di progetti open source.
LeggiA data-driven comparison of BackBox AI against Aikido Security and XBOW on the Photoview application, using Doyensec's independent severity review as a common yardstick. The focus is signal over noise: matching the serious-vulnerability coverage of a higher-volume competitor with far fewer low-value findings.
LeggiComparative security benchmark between BackBox AI and Neo (ProjectDiscovery) on the MedPortal application, focusing on vulnerability coverage, false positive validation, and attack chain analysis
LeggiHow BackBox AI leveraged multimodal visual capabilities to analyze PCB production files and autonomously identify hidden anomalies in the Hack The Box Critical Flight scenario
LeggiHow BackBox AI autonomously exploited a hard Hack The Box machine by chaining real-world CVEs without human intervention
LeggiA detailed analysis of how BackBox AI autonomously compromised a vulnerable SOAP service by exploiting XXE and default credentials in the XBOW Validation Benchmark.
LeggiCome BackBox Labs applica una metodologia di Threat Led Penetration Testing (TLPT) adversary-driven che unisce threat intelligence, attack surface discovery potenziata dall'AI e competenza umana per misurare la reale resilienza operativa.
LeggiA controlled demonstration of BackBox AI operating in an OT/ICS environment, interpreting industrial systems and safely interfacing with PLCs in a virtual lab setting.
LeggiA detailed technical analysis of how BackBox AI successfully exploited a complex PHP deserialization vulnerability in PortSwigger Web Security Academy's expert-level lab, developing a custom gadget chain for remote code execution.
LeggiCome l'AI sta trasformando la cybersecurity: la piattaforma BackBox AI abilita operazioni di intelligence sia offensive sia difensive.
Leggi