Und hier ein paar Details: https://pwn.ai/blog/pwnescape
Gab ja im längsten unlängst 'ne Diskussion dass KI nicht intelligent ist. Ich bleibe dabei, dass das eine philosophische Diskussion ist, denn in Praxis können mit KI eben solche Angriffsvektoren gefunden werden was die intelligentesten Humans über Jahre nicht schafften.
Aus der Quelle von SiebenG :
Eingesetzte KI
We used Omega-Pwn, pwn.ai's experimental research harness combining our custom security architecture and automation with elements of OmegaClaw, developed by researchers at SingularityNET and BGI Labs for this ambitious project. Compared to traditional LLM harnesses, it enabled longer research horizons, persistent campaign state, parallel collaborative investigations, and the accumulation of hypotheses, failed experiments, and evidence across complex research sessions.
Vorgehensweise
Humans led the research, framing the hard questions, engineering workflows, and directing investigations. GPT-5.6 Sol served as the primary reasoning engine for source-level analysis, exploring attack paths, and challenging assumptions. Omega-Pwn bridged human intuition and contextual insight with the analytical capabilities of advanced LLMs.
Einordnung durch die Entdecker
As far as we know, PwnEscape exposes an entirely new class of attacks in Linux networking: untrusted checksum metadata can rewrite security-sensitive packet fields after the kernel has already validated and acted on them, undermining assumptions across the networking stack far beyond the original VM escape.
