Hacktron AI's banner

Hacktron AI

@HacktronAI • 10,578 subscribers

Hacktron is an autonomous vulnerability hunter for ambitious engineering teams. Built by world-class security researchers. Powered by one principle: PoC || GTFO

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!

110,158 views • 2 months ago

We tried to hack our way into Lovable's office to start a sales conversation. We couldn’t break Lovable directly, so we went one layer down: Supabase. Race condition → superuser → shell → root → the keys to other databases in the region. $25K. Patched in a day. The full write-up:

We tried to hack our way into Lovable's office to start a sales conversation. We couldn’t break Lovable directly, so we went one layer down: Supabase. Race condition → superuser → shell → root → the keys to other databases in the region. $25K. Patched in a day. The full write-up:

17,668 views • 16 days ago

Google Chrome. Full break-in. Your product isn't secure. it's just been expensive to break. those are not the same thing, and a lot of founders are about to learn the difference. One AI just ran the full chain into Chrome for $1,597. weeks of expert human work, done for the cost of a weekend trip. The wall around your code was never "how good is this." it was "how much does it cost to find the crack." that cost is collapsing. If breaking in is getting this cheap, checking your own code before someone else does can't be the thing you skip. That's the gap we sit in. we run this on your code first. We published every number. Read the full benchmark:

Google Chrome. Full break-in. Your product isn't secure. it's just been expensive to break. those are not the same thing, and a lot of founders are about to learn the difference. One AI just ran the full chain into Chrome for $1,597. weeks of expert human work, done for the cost of a weekend trip. The wall around your code was never "how good is this." it was "how much does it cost to find the crack." that cost is collapsing. If breaking in is getting this cheap, checking your own code before someone else does can't be the thing you skip. That's the gap we sit in. we run this on your code first. We published every number. Read the full benchmark:

25,103 views • 1 month ago

Introducing Hacktron Review: an AI security reviewer for your pull requests. It understands your whole codebase, builds a threat model, takes your feedback, and catches exploitable vulnerabilities before they reach production. Try for free:

Introducing Hacktron Review: an AI security reviewer for your pull requests. It understands your whole codebase, builds a threat model, takes your feedback, and catches exploitable vulnerabilities before they reach production. Try for free:

77,405 views • 6 months ago

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

40,093 views • 3 months ago

another one! if you’re running an Astro server, upgrade to the latest version, 7.2.8. It is all over the internet, please reach out to us if you need any details, for now we won't be disclosing the poc.

another one! if you’re running an Astro server, upgrade to the latest version, 7.2.8. It is all over the internet, please reach out to us if you need any details, for now we won't be disclosing the poc.

15,246 views • 2 months ago

Hacktron already reviews your code, detects real vulnerabilities, and learns from your feedback. Now it fixes the vulnerabilities too. Set the conditions once. When a new finding matches your rules, Hacktron automatically validates its exploitability, and generates a ready-for-review fix. You choose where the Automation runs, which findings qualify, and who gets notified. Like a real engineer, Hacktron understands your repositories, test suite, and tech stack, allowing it to execute and test your code end-to-end. That means fewer false positives, faster patches, and more time for your engineers to focus on shipping.

Hacktron already reviews your code, detects real vulnerabilities, and learns from your feedback. Now it fixes the vulnerabilities too. Set the conditions once. When a new finding matches your rules, Hacktron automatically validates its exploitability, and generates a ready-for-review fix. You choose where the Automation runs, which findings qualify, and who gets notified. Like a real engineer, Hacktron understands your repositories, test suite, and tech stack, allowing it to execute and test your code end-to-end. That means fewer false positives, faster patches, and more time for your engineers to focus on shipping.

10,932 views • 2 months ago

Introducing Hacktron Whitebox: get white-box security assessments with audit-ready reports without waiting on a traditional pentest cycle. AI has roughly tripled the rate of code shipped in the past year. But penetration testing has not kept pace, often taking weeks to months.

Introducing Hacktron Whitebox: get white-box security assessments with audit-ready reports without waiting on a traditional pentest cycle. AI has roughly tripled the rate of code shipped in the past year. But penetration testing has not kept pace, often taking weeks to months.

11,009 views • 5 months ago

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!

16,464 views • 10 months ago

No more content to load