←back to thread

XBOW, an autonomous penetration tester, has reached the top spot on HackerOne

(xbow.com)
283 points summarity | 3 comments | 24 Jun 25 15:53 UTC | HN request time: 0.713s | source
1. ikmckenz ◴[24 Jun 25 17:53 UTC] No.44368868[source]▶
Related: https://arstechnica.com/gadgets/2025/05/open-source-project-...
replies(1): >>44369989 #
2. moyix ◴[24 Jun 25 19:25 UTC] No.44369989[source]▶
The main difference is that all of the vulnerabilities reported here are real, many quite critical (XXE, RCE, SQLi, etc.). To be fair there were definitely a lot of XSS, but the main reason for that is that it's a really common vulnerability.
replies(1): >>44373327 #
3. ikmckenz ◴[25 Jun 25 03:07 UTC] No.44373327[source]▶
All of them are real? You have a 100% rate of reports closed as valid?