Articoli tecnici, metodologie offensive, cyber operations potenziate dall'AI e analisi di minacce emergenti.
BackBox Labs analyzed the NetBird client daemon on Linux and chained several individually moderate weaknesses in its local gRPC interface into a full root privilege escalation affecting versions up to and including 0.75.0, with no memory corruption, kernel bugs, or race conditions involved.
LeggiWe pointed BackBox AI at a live Android RAT and asked for a full analysis. It unpacked a dropper, decoded an XOR-obfuscated C2 URL straight from smali bytecode, confirmed that the C2 infrastructure was still responding by speaking the malware's own protocol, and attributed the operation. This is what evidence-driven analytical reasoning looks like when it reaches past red teaming.
LeggiNell'era dell'intelligenza artificiale, chi controlla modelli, dati e infrastrutture controlla molto più della tecnologia. Perché la sovranità tecnologica è oggi una questione strategica, e il contributo di un progetto nato in Italia.
LeggiBackBox AI found a local root escalation on Linux distributions that package Bettercap with a systemd service. The flaw is not in Bettercap's code but in the packaging: the service runs its REST API as root with authentication disabled. The unit was removed upstream.
LeggiBackBox AI found that a small crafted file could exhaust available memory during an ordinary Binwalk scan, with no extraction flag required. The Binwalk maintainer confirmed the issue and fixed it by capping decompression at 100 MB.
LeggiBackBox AI surfaced two header-trust weaknesses in SearXNG: a Host header injection leading to open redirect and cache poisoning, and an X-Forwarded-For rate-limiter bypass. Disclosed responsibly, both come down to trusting client-controlled HTTP headers.
LeggiPerché BackBox AI punta sull'architettura più che sulla dimensione del modello, e come collaboriamo, pro bono, con un gruppo selezionato di progetti open source.
LeggiA data-driven comparison of BackBox AI against Aikido Security and XBOW on the Photoview application, using Doyensec's independent severity review as a common yardstick. The focus is signal over noise: matching the serious-vulnerability coverage of a higher-volume competitor with far fewer low-value findings.
LeggiComparative security benchmark between BackBox AI and Neo (ProjectDiscovery) on the MedPortal application, focusing on vulnerability coverage, false positive validation, and attack chain analysis
LeggiHow BackBox AI leveraged multimodal visual capabilities to analyze PCB production files and autonomously identify hidden anomalies in the Hack The Box Critical Flight scenario
LeggiHow BackBox AI autonomously exploited a hard Hack The Box machine by chaining real-world CVEs without human intervention
LeggiA detailed analysis of how BackBox AI autonomously compromised a vulnerable SOAP service by exploiting XXE and default credentials in the XBOW Validation Benchmark.
LeggiCome BackBox Labs applica una metodologia di Threat Led Penetration Testing (TLPT) adversary-driven che unisce threat intelligence, attack surface discovery potenziata dall'AI e competenza umana per misurare la reale resilienza operativa.
LeggiA controlled demonstration of BackBox AI operating in an OT/ICS environment, interpreting industrial systems and safely interfacing with PLCs in a virtual lab setting.
LeggiA detailed technical analysis of how BackBox AI successfully exploited a complex PHP deserialization vulnerability in PortSwigger Web Security Academy's expert-level lab, developing a custom gadget chain for remote code execution.
LeggiCome l'AI sta trasformando la cybersecurity: la piattaforma BackBox AI abilita operazioni di intelligence sia offensive sia difensive.
Leggi