Agentic Pentesting
5 posts
AI pentesting
AI pentesting: what it is, and what it can actually find
Scanner with a chatbot
A real AI pentest
Login
Stops at the login page
Authenticates and tests behind it
Identities
Tests as one user
Holds several at once
Findings
A list it never reproduced
Every one reproduced before it files
13 min read
Agentic Pentesting
How Escape AI Pentesting Exploited SSRF in LiteLLM
At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments.
LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF.
When we looked at LiteLLM, we found three confirmed SSRF sinks, a
9 min read
