Security Researcher 👨🏽💻👨🏽💻 | CS Phd Candidate @ucl @uclisec | chef at https://xitter.twitterapi.xyz/t.co/TCOLUBcBx1 https://xitter.twitterapi.xyz/t.co/cjB8Bt8yh4, https://xitter.twitterapi.xyz/t.co/jLQT9Dh5Yt, █████ | UFC at Night
London, England
Joined March 2012
- Tweets3.9K
- Following1.4K
- Followers6.6K
- Likes4K
Pinned Tweet
We just dropped a new paper 🚀 🚀 Meet MAPTA, a multi-agent pentesting AI for the web. With just a few tools, it crushed the XBOW benchmark with 76.9%.
MAPTA has already uncovered and reported critical security issues to Tier-1 companies, with multiple CVEs pending.
Full details on the vulns are coming once we’re past the responsible disclosure gag 🤩
AI for Security has never been more exciting.
Let me present MAPTA, our multi-agent framework that found multiple (now confirmed!) Remote Code Executions (RCE's) in flagship web products of Tier-1 companies. Why the secrecy? We're good boys, letting them cook patched through responsible disclosure.
What's our secret sauce? 1/n
Z A D D Y retweeted
Review on @BugBunny_ai i guess its the best thing i have tried till now for security hunts i dont usually post about my findings and all over here,i have been using it from 2 weeks i guess,spent 120$ in total credits and made around 1000$ in bounties. Thanks to @Zaddyzaddy for building the thing.There are lot of things that still need improvement but its way better then i thought
does opencode have a bugbounty/vdp program? i’d like @BugBunny_ai to put this internally deployed 24/7 agent to test
after running our security agents 24/7 i feel better about where things are going
they find quite things quickly and have access to internal details which help
they should be more effective than an external agent attacker. the asymmetry still exists but not as bad as i thought
1
15
1,154
Z A D D Y retweeted
HuntDeck is live in demo mode 🎯
One board for H1, Bugcrowd, Intigriti and YesWeHack: fresh scope/changes, bounty changes and disclosures
I want feedback before I open source it, so tell me what's missing/broken
drop a follow/repost plz... would help heaps with algo ⬇️⬇️
Pick any target with a wildcard or netblock in scope, set the time limit for your scan to 24 hours on @BugBunny_ai and watch it absolutely rip!
10
53
3,922
Bugbunny is realllllyyyyyy good
If you’re looking to try out or invest in an AI-powered pentesting platform, I’d highly recommend @BugBunny_ai. The kind of vulnerabilities this platform uncovers is genuinely insane. It’s seriously impressive mannnnn. I mean just fucking good.
4
36
1,911
Z A D D Y retweeted
A man who pioneered parallel processing cannot be expected to run a single thread
We built MAPTA and its now outdated, want to have a taste of what SOTA looks like? Then checkout @BugBunny_ai
👇👇👇
Cairn: github.com/oritera/Cairn
CyberStrike: github.com/CyberStrikeus/cyb…
PentAGI: github.com/vxcontrol/pentagi
CyberStrikeAI: github.com/AIPentest/CyberSt…
PentestGPT: github.com/GreyDGL/PentestGP…
PentestAgent: github.com/GH05TCREW/pentest…
AutoPentester: github.com/YasodGinige/AutoP…
VulnBot: github.com/KHenryAegis/VulnB…
RedAmon: github.com/samugit83/redamon
MAPTA: github.com/arthurgervais/map…
Strix: github.com/usestrix/strix
Shannon: github.com/KeygraphHQ/shanno…
BugTraceAI: github.com/BugTraceAI/BugTra…
Nebula: github.com/BerylliumSec/nebu…
hackingBuddyGPT: github.com/IPA-Lab/HackingBu…
HexStrike AI: github.com/0x4m4/hexstrike-a…
CAI, now archived: github.com/aliasrobotics/CAI
3
20
1,966
the folks at @MistralAI need to fix their cache hit rates. wdym DeepSeek Flash on the Mistral Vibe plan has only a 20-30% cache hit rate?
5
26
2,396
Over $14k in bounties using @BugBunny_ai 🚀🚀
Not a bad way to start November ☺️
Love to have the bunny @BugBunny_ai as a side kick, you need to work on his findings, there will be some false positive like any other AI but if you know what you are doing he is a must have tool in your toolbox.
Grab a code and check it out
wow! killing it with @BugBunny_ai, meanwhile the bunny has sent you some 🥕 for your birthday
Since I've been feeding the bunny so many carrots and its my birthday month, how does the bunny feel about some birthday credits?🥳 @BugBunny_ai
4
44
1,919