Reminds me of the time people did sql injection on old php sites.
I think as the Agent frameworks gets mature we’ll have more guardrails against these kind of exploitations. Also kind of a great business idea if one could come up with such solution
I thought the same thing - especially with those screenshots. Inti De Ceukelaire did present at Speakers and was part of Bug Bounty Village. If he was paid 50k as claimed, I imagine he demonstrated these techniques as described. The decision to present them in such a generic way, rather than obfuscate the actual testing is an interesting choice.
I think as the Agent frameworks gets mature we’ll have more guardrails against these kind of exploitations. Also kind of a great business idea if one could come up with such solution