<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Web-Exploits on CuraSec</title><link>https://curasec.metacog.co.kr/tags/web-exploits/</link><description>Recent content in Web-Exploits on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 26 Oct 2026 18:39:19 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/web-exploits/index.xml" rel="self" type="application/rss+xml"/><item><title>Ulysses: Multi-Agent AI Framework for Synthesizing Web Exploit PoCs</title><link>https://curasec.metacog.co.kr/insights/2026-10-26-ulysses-a-security-harness-for-synthesizing-verifiable-web-e/</link><pubDate>Mon, 26 Oct 2026 18:39:19 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-10-26-ulysses-a-security-harness-for-synthesizing-verifiable-web-e/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> Academic research demonstrating that LLM agents can auto-generate and verify web exploit PoCs across real-world apps and frameworks — worth tracking as it signals where AI-assisted DAST tooling is headed, but no running system requires a change today.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> Illustrates how automated exploit synthesis tools are maturing; useful context for understanding the evolving offensive AI tooling landscape, but the paper yields no IOCs or detectable TTPs to act on now.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>