GhostRecon
Jun 9, 2026
Undetectable AI

deep pentest: hardcoded 98M-credit API key + Border Patrol open registration + prompt injection

criticalundetectable.ai
May 20, 2026
Sarvam AI

guest-API SSRF / open proxy (blob.core.windows.net substring-check bypass)

criticaldashboard.sarvam.ai
May 17, 2026
Sarvam AI

agent autonomously discovers unauthenticated access to paid AI services (TTS / LLM / Translation / STT) via /api/guest/* endpoints

criticaldashboard.sarvam.ai
Back to site
Select a session

Pick an example on the left to replay how GhostRecon discovered the vulnerability, every prompt, thought, and tool call.