BenefitsHow it worksUse CasesBlogFAQsTeam
LoginBook a demoLogin

All Blogs

Explore our collection of in-depth articles on AI-powered security, penetration testing, and real-world vulnerability discoveries.

DAST
Application Security
Security Testing

FEATURED

Rethinking Application Security Testing: From DAST Scanners to AI-Powered Pentesting

DAST scanners were built to scale vulnerability detection, not adversarial reasoning. This post explores how AI-powered pentesting changes application security testing by focusing on real-world attack paths and risk.

Varun Uppal

Varun Uppal

4 min read

LLM Security
Prompt Injection

Leaking OpenAI's Hidden GPT-5 System Prompt via Context Poisoning

A post-mortem on a critical vulnerability where a "smarter" reasoning model was tricked by a fundamental architectural flaw. What is "Juice: 64"?

Abhishek Gehlot

Abhishek Gehlot

12 min read

Mobile Security
Automation

Meet the world's first AI-powered mobile app pentester

Shinobi can now pentest mobile apps with same skills and precision of traditional pentesting... but does it faster and continuously

Varun Uppal

Varun Uppal

6 min read

More Articles
IDOR
Privilege Escalation
One Parameter to Rule Them All: How a User Flaw Unlocked an Admin Fortress

How Shinobi exploited a single vulnerable parameter in an EV charging platform to cross security boundaries and gain full administrative access.

Abhishek Gehlot

Abhishek Gehlot

9 min read

Authorization
IDOR
The Ghost in the API: How Shinobi Turned a Single Flaw into Super Admin Access

A journey through an IoT platform where learning from rejection led to uncovering a complete authorization breakdown and a hidden Super Admin account.

Abhishek Gehlot

Abhishek Gehlot

10 min read

IDOR
Data Privacy
More Than an Invoice: How Shinobi Averted a Child Safety Crisis

How an AI pentester turned a routine test on a holiday camp booking app into the prevention of a serious child safety and data privacy incident by uncovering a critical IDOR vulnerability.

Abhishek Gehlot

Abhishek Gehlot

8 min read

SAST
DAST
AI Pentesting VS AI Code Scanning

A bakeoff between a next-gen pentester and code scanner reveals why testing live applications still uncovers vulnerabilities that code scanning alone can't catch.

Varun Uppal

Varun Uppal

6 min read

Logic Flaws
Business Logic
Using AI to find logic flaws

How an AI Agent discovered a business logic flaw in a Popular Web Application by thinking creatively and connecting the dots like a human pentester.

Abhishek Gehlot

Abhishek Gehlot

10 min read