XBOW

The technology demonstrates advanced capabilities, including the ability to debug not only its own code but also the compromised server environment it operates in. Its method of operation involves generating Python programs that exploit specific vulnerabilities, such as XML deserialization. These programs can deploy embedded bash scripts to extract sensitive information, like secrets from the command lines of running processes.

Despite the complexity of the payloads it develops, XBOW's final solutions are noted for their simplicity and elegance. The system is capable of finding and exploiting vulnerabilities without requiring pre-existing descriptions. The benchmarks are selected by internal security experts for their relevance and breadth.