also shoutout @OffensiveAIcon for being so good that all i can think about is going to another conference
Kyle Avery retweeted
🧵 [1/3] Agents can hack. What's holding them back is trust: will they stay in scope?
Today we're releasing ScopeBench, a methodology and community benchmark that evaluates how well agents adhere to scope in real offensive security workflows across web, Windows Active Directory, and cloud.
Your MCP server works fine, but the agent can't find a tool, ignores your constraints, or misses key output. Why?
The client decides what the model sees. We dug into Codex and Claude Code to find out what they truncate, change, or drop entirely. ow.ly/h7L750ZTvaF
Kyle Avery retweeted
The TTD tech tree has advanced a level!
- ttd-capa-cpp: reimplementation of ttd-capa that supports code scanning
- capa-cpp: C++ reimplementation of capa with added IDA Pro plugin
Shoutout to Xusheng (@CrackmesOne) for his help!
github.com/HullaBrian/ttd-ca…
github.com/HullaBrian/capa-c…
Kyle Avery retweeted
New Release Havoc Professional 0.8: Leviathan 🩸
- Introduce Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support
infinitycurve.org/blog/levia…
Kyle Avery retweeted
It's pretty clear that if Ant & OpenAI pause it's good for open-source.
i do think a lot of people on the pro-open-source side are having a bit of a knee-jerk reaction to the pacing statements today, as we're used to viewing the closed labs as power-seeking.
but i think their hands are somewhat forced here, and this is just another chapter on the fairly inevitable path towards decently-fast decently-safe decently-commoditized intelligence abundance.
ask any F500 exec or swing voter. the world doesn't really want super-fast-takeoff superintelligence owned only by two companies, and thus we won't get it. it'll happen at the pace that the world can accommodate it, which means reaching some sort of confidence consensus that the models are aligned enough that we won't be dealing with scary new incidents all the time.
this will trickle out broadly, in the form of best practices and distillation. the smarter a model is, the more it has a "personality", and the less effective strict rules are. there will be awkward compromises and moral tensions. but we ultimately just want the models to be reasonable, and to do the sorts of things reasonable humans would do if our brains were faster and less error-prone and had more working memory. i think we'll get there.
the labs will build mac and windows, the rest of us are building linux. everyone's gonna do great. weird stuff will keep happening, but we'll still wake up and go to work, until the work does itself in a manner the world finds acceptable.
Kyle Avery retweeted
Outflank is proud to have collaborated with @SpecterOps on a new red team AI skills marketplace. This collection packages offensive security knowledge into reusable skills for AI agents.
Read more on our blog: outflank.nl/blog/2026/09/02/…
I just released the first public version of @BintracerLabs, a malware-analysis sandbox focused on macOS.
Bintracer can:
- Detonate Mach-O binaries, app bundles, and dylibs
- Extract DMG and PKG files
- Analyze JXA, AppleScript, Python, Perl, and shell scripts
This project is still early, but I can't wait to see what y'all think!
If you work with macOS malware, I'd appreciate any feedback! Try it for free at bintracer.com
















