AI Agents803 Bypassing EDR with Local AI
Eddie Zhang / Project Black: Claude refuses an LSASS dumper; DeepSeek builds one EDR still catches; uncensored Qwen 3.8 27B on two…
oxfemale·
Oct 2·
12 min
·803
// AI Agents
6 postsAI Agents803 
AI Agents632 Disposable Tooling: Building LLM-Generated Mythic Agents from Prompt to Deployment
Adam Chester’s SpecterOps research on disposable Mythic agents: from a vibe-coded abomination to a two-hour Oracle harness that one-shots stage-0 implants in…
oxfemale·
Sep 21·
38 min
·632
AI Agents473 When Local AI Becomes an Attack Vector: A Deep Dive into LLM Infrastructure Security
The article analyzes a real deployment of a low-privileged on-prem LLM server and shows that even restricted models can expose internal systems…
oxfemale·
Mar 20·
38 min
·473
AI Agents430 Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI
The article explains how researchers exploited an unauthenticated PHP Object Injection in the WordPress plugin Profile Builder Pro, showing how AI tools…
oxfemale·
Mar 20·
21 min
·430
AI Agents556 TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
The article shows how AI-assisted reverse engineering of the TP-Link Tapo C200 firmware uncovered hardcoded keys, buffer overflows, and insecure APIs, demonstrating…
oxfemale·
Mar 20·
14 min
·556
AI Agents367 ODR: Internals of Microsoft’s New Native MCP Registration
The article explains Microsoft’s ODR mechanism for native MCP registration, enabling AI agents to discover and invoke system tools through the Model…
oxfemale·
Mar 19·
52 min
·367