Alvaro Muñoz

@pwntester

Security Researcher with @XBOW. CTF #int3pids. Opinions here are mine! bluesky: pwntester.bsky.social

Madrid 🇪🇸

pwntester.com

Replies Reposts Media

Alvaro Muñoz
@pwntester
9月8日
Incredible achievement: XBOW discovered a Chrome full-chain exploit. Only the second in history to earn the $250K bonus. Extremely proud of the team and what we’re proving autonomous security testing can achieve. 🚀
XBOW
@Xbow
9月8日
A 250k calculator. Full blog post awaiting embargo 😎
00:00
Alvaro Muñoz
@pwntester
2025年9月24日
When I read the trace for this bug it reminded me of the almost identical finding by @artsploit in Datahub github.blog/security/vulne…
XBOW
@Xbow
2025年9月23日
XBOW found a new zero-day in Apache Druid. It wasn't just a lucky guess. XBOW is trained to think like a human attacker, using historical CVE knowledge to find a novel SSRF (CVE-2025-27888). This is how AI-powered pentesting turns old knowledge into new findings. Read the
Alvaro Muñoz
@pwntester
2025年9月24日
Join @moyix and yours truly in a fireside chat about all things @Xbow and our validators. If you haven’t registered yet, secure your seat here: xbow.zoom.us/webinar/regist… More info at: linkedin.com/posts/xbow_200…
xbow.zoom.us
Welcome! You are invited to join a webinar: 200 Zero Days, 0 False Positives: A discussion on...
In this session, XBOW AI Researcher Brendan Dolan-Gavitt and Security Researcher Alvaro Muñoz will sit down for a discussion on the architecture and validation loop behind XBOW’s AI agents and the...
Alvaro Muñoz
@pwntester
2025年8月6日
Back at summer hacker camp, it’s been a while! Will be at @Xbow booth (3257) all morning. Come say hi!
Alvaro Muñoz
@pwntester
2025年7月29日
I was going to write a thread about my latest @Xbow blog post but @moyix wrote a perfect one. Go check it out! xbow.com/blog/xbow-titi…
Brendan Dolan-Gavitt
@moyix
2025年7月28日
YES! THIS one is my favorite :D Some details in thread below...