Blog
Act II: The Search
Scene 1 (The Investigation Begins) OK. I'm irreplaceable. But how do I prove that, objectively? After playing with ChatGPT in our little experiment, I'd been in a downward spiral. LLMs could automate vulnerability scanning, that much was clear. XBOW was finding SQLi,...
The Pentester’s Guide to AI Disruption: A 6-Part Series
Week 1: March 3 - Act I (The Crisis) March 5 - Act II, Scenes 1-3 (The Search Begins) Week 2: March 10 - Act II, Scenes 4-5 (The Gap and Realization) March 12 - Act III (The Reframe) Week 3: March 17 - Act IV, Scene 1 (The Method) March 19 - Act IV, Scene 2-3 (The...
Act I: The Crisis
Scene 1 (The Introduction) My first introduction to XBOW was a LinkedIn notification in late 2024. We're hiring at XBOW! We're on a mission to redefine offensive security through AI. The email was a LinkedIn summary. A repost from Nico Waisman. The "use after free"...
cURL for Pentesters: Part 3 – Advanced Techniques
In Part 1 and Part 2, we covered the fundamentals and intermediate techniques. Now we'll explore curl's automation capabilities through globbing, handling various authentication schemes, and learn techniques for bypassing common restrictions. These skills separate...
cURL for Pentesters: Part 2 – Cookies, Sessions, & SSL/TLS
In Part 1 of our series of curl usage, we covered the fundamentals: headers, request methods, and basic data submission. Now we'll look at some techniques that'll make you look like a curl pro. We'll be covering cookies, SSL certificate handling, and extracting only...