←back to thread

XBOW, an autonomous penetration tester, has reached the top spot on HackerOne

(xbow.com)
284 points summarity | 1 comments | 24 Jun 25 15:53 UTC | HN request time: 0.21s | source
Show context
ikmckenz ◴[24 Jun 25 17:53 UTC] No.44368868[source]▶
Related: https://arstechnica.com/gadgets/2025/05/open-source-project-...
replies(1): >>44369989 #
moyix ◴[24 Jun 25 19:25 UTC] No.44369989[source]▶
The main difference is that all of the vulnerabilities reported here are real, many quite critical (XXE, RCE, SQLi, etc.). To be fair there were definitely a lot of XSS, but the main reason for that is that it's a really common vulnerability.
replies(1): >>44373327 #
1. ikmckenz ◴[25 Jun 25 03:07 UTC] No.44373327[source]▶
All of them are real? You have a 100% rate of reports closed as valid?