An AI agent in the fuzzing loop: re-finding CVE-2017-11729 in libming
Re-finding CVE-2017-11729, a heap over-read in libming's SWF decompiler, with an AI coding agent running the fuzzing. Here's where it tried to lie to me.
Blog
Notes from the lab
Methodology, tooling and writeups from mobile security, reverse engineering and bug bounty.
Latest
3 postsArchive
JS file enumeration, four years later: recon with LLMs
Follow-up to my 2022 post: how to collect an SPA's JavaScript, cut it down, and let an LLM read it without burning tokens or trusting a word it says.
JS file enumeration for bug bounty hunters
Why reading JavaScript files pays off in bug bounty, my workflow for collecting and inspecting them, and two findings that came out of it.