Show HN: I Built an AI Security Tester

2 Adeeb0123 0 5/15/2025, 8:48:45 PM

I Built an AI Security Tester to test out your web apps for vulnerabilities (sqli, xss, csrf, insecure headers, etc), Business logic flaws, or exposed credentials (You won't believe how many "vibe coders" are exposing their API Keys )

Each test initiated is completely unique in how its carried out, adapted to the target website + Gives a security report.

On the backend, it runs with the help of 29 agents which are invoked on demand. The main testing agent functions in an isolated Kali linux machine - spawned for each test.

Feedback appreciated, and would love to answer your questions about it.

https://peneterrer.com

Plain Vanilla Web (plainvanillaweb.com)

AlphaEvolve: A Gemini-powered coding agent for designing advanced algorithms (deepmind.google)

Baby is healed with first personalized gene-editing treatment (nytimes.com)

Mozilla Firefox – Official GitHub repo (github.com)

The world could run on older hardware if software optimization was a priority (twitter.com)

What is HDR, anyway? (lux.camera)

The Barbican (arslan.io)

Human (quarter--mile.com)

Internet Artifacts (neal.fun)

A critical look at MCP (raz.sh)

Business books are entertainment, not strategic tools (theorthagonist.substack.com)

Leaving Google (airs.com)

I hacked a dating app (and how not to treat a security researcher) (alexschapiro.com)

Vision Now Available in Llama.cpp (github.com)

Ask HN: How are you acquiring your first hundred users?

A simple 16x16 dot animation from simple math rules (tixy.land)

One-Click RCE in Asus's Preinstalled Driver Software (mrbruh.com)

The great displacement is already well underway? (shawnfromportland.substack.com)

Embeddings are underrated (2024) (technicalwriting.dev)

Bus stops here: Shanghai lets riders design their own routes (sixthtone.com)

Car companies are in a billion-dollar software war (insideevs.com)

Observations from people-watching (skincontact.substack.com)

US Copyright Office found AI companies breach copyright. Its boss was fired (theregister.com)

Flattening Rust’s learning curve (corrode.dev)

Google is building its own DeX: First look at Android's Desktop Mode (androidauthority.com)

Writing that changed how I think about programming languages (bernsteinbear.com)

I don't like NumPy (dynomight.net)

Changes since congestion pricing started in New York (nytimes.com)

Branch Privilege Injection: Exploiting branch predictor race conditions (comsec.ethz.ch)

US vs. Google amicus curiae brief of Y Combinator in support of plaintiffs [pdf] (storage.courtlistener.com)

Multiple security issues in GNU Screen (openwall.com)

The recently lost file upload feature in the Nextcloud app for Android (nextcloud.com)

SMS 2FA is not just insecure, it's also hostile to mountain people (blog.stillgreenmoss.net)

A server that wasn't meant to exist (it-notes.dragas.net)

I built a native Windows Todo app in pure C (278 KB, no frameworks) (github.com)

Databricks acquires Neon (databricks.com)

Can you trust that permission pop-up on macOS? (wts.dev)

FastVLM: Efficient vision encoding for vision language models (github.com)

LLMs get lost in multi-turn conversation (arxiv.org)

I ruined my vacation by reverse engineering WSC (blog.es3n1n.eu)

PDF to Text, a challenging problem (marginalia.nu)

Malicious compliance by booking an available meeting room (clientserver.dev)

The unreasonable effectiveness of an LLM agent loop with tool use (sketch.dev)

In a high-stress work environment, prioritize relationships (wqtz.bearblog.dev)

The FTC puts off enforcing its 'click-to-cancel' rule (theverge.com)

Gmail to SQLite (github.com)

A leap year check in three instructions (hueffner.de)

Why Bell Labs Worked (1517.substack.com)

A community-led fork of Organic Maps (comaps.app)

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom (cnbc.com)

Show HN: I Built an AI Security Tester

Comments (0)