Unless you've been living under a rock, you're probably aware frontier large language models (LLMs) have been keenly focused on automating software development, vulnerability discovery, and most recently exploit development. The most publicized instance of this was Anthropic's marketing campaign around the release of Mythos. What better way to drum up business than [...]
With the recent LiteLLM supply chain compromise making headlines, we wanted to take a deep dive into how an advanced attacker can go far beyond a basic dependency confusion attack against modern technology companies — and what defenders should be looking for.
In a previous post we documented how we used GitHub Copilot to solve a stubborn Objective-C runtime registration problem inside Patrick Wardle's ReflectiveLoader project to enable loading of ObjC and Swift libraries entirely from memory. This post picks up where that one left off, describing the next capability we wanted: executing arbitrary native Mach-O [...]
We're excited to share that Reverge 1.2.0 is out. This release includes a major architectural change under the hood: the AI assistant is now powered by Goose, the open-source agent framework from Block (formerly Square). This is a big step forward for automation, extensibility, and the long-term direction of AI-assisted recon in Reverge. [...]
N-Able Windows Software Probe Remote Code Execution Recently I was performing a penetration test using Reverge when an interesting service caught my attention. The banner reported “ms .net remoting services” listening on port 10004. For those unfamiliar, .NET Remoting is an older Microsoft framework that allows applications to expose [...]
Introducing the Reverge AI Assistant This month, we rolled out one of reverge's most anticipated features: an integrated AI assistant that transforms how reverge users can interact with the platform. While AI tools have become commonplace in many industries, we trained reverge's AI assistant specifically for the unique challenges of attack surface [...]
What are reverge collectors? Collectors serve as the distributed job engine for the reverge platform. Operating as a remote collection agent, it receives scanning tasks from the reverge server and executes various tools. This client-server architecture enables scalable reconnaissance operations across multiple environments while maintaining centralized coordination and data aggregation. [...]
At the end of last year Patrick Wardle published a blog post demonstrating how to load a shared library into memory on macOS without leaving any traces on disk. This technique, commonly referred to as reflective or in-memory code loading, is well worth reading, as it lays the foundation for the topic discussed here. For those [...]
From POC to RCE with reverge Last month, Securifera publicly launched our attack surface management tool, reverge, on the AWS Marketplace. While we’re still planning to publish blog posts and videos to guide users through setup and usage, we wanted to give an example of what reverge can do by demonstrating how [...]
