Cairn

Cairn 不仅是AI渗透测试——迈向通用状态空间搜索 Cairn 是一个通用问题求解引擎。 它没有定义角色，也没有定义工作流。给定一个起点和一个目标，它就在未知的状态空间中搜索一条路径。 AI渗透测试就是这样一个问题——并且已经得到验证。 什么是 Cairn？ 渗透测试本质上是在近乎无限的状态空间中的定向搜索 ： 原点 ：已知（目标 IP、目标系统） 目标 ：已定义（获取 Shell、获得 Flag） 路径 ：未知 这种结构并非渗透测试独有。漏洞研究、数学证明、CTF 挑战——任何有清晰起点、清晰成功条件以及中间未知路径的问题，都具有相同的形状。 Cairn...

Introducing CAIRN: Frontier tracking for AI-integrated malware

A cairn is a marker left behind on a trail, a deliberately placed stack of stones that helps hikers find their way when the path is unclear. Attackers building AI-integrated malware unintentionally and inevitably leave behind markers of their own: prompt templates, provider endpoints, API keys,...

cairn-t.fr Cross Site Scripting vulnerability OBB-2695598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cairn-int.info XSS vulnerability

Open Bug Bounty ID: OBB-611123 Description| Value ---|--- Affected Website:| cairn-int.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...