Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-09 · source-backed
James Kettle published the whitepaper August 5, presented at Black Hat and DEF CON (PortSwigger). The architecture detail is what agent builders should copy: Turbo Intruder got an MCP interface plus Python orchestration, and the exploitation agent's script was deliberately split so the LLM could not modify the deterministic segment that judges whether an attack succeeded. Actor separated from verifier, structurally. It brainstormed sixteen response-queue-poisoning hypotheses and autonomously evaluated each against every authorized bug-bounty target, yielding new desync triggers that compromised banks, security products, and government infrastructure. The answer to "can an agent invent, not just find" appears to be yes, when you refuse to let it grade its own work.
Each link below shares sources, entities, or timing with this story.
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover August, LLM; overlapping topics (agent, august).
Turbo Intruder uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Turbo Intruder uses MCP); both cover August, MCP; overlapping topics (against, agent).
Linked by a graph relationship (Turbo Intruder uses MCP); both cover LLM, MCP; overlapping topics (agent, architecture).
Linked by a graph relationship (Turbo Intruder uses MCP); both cover LLM, MCP; overlapping topics (agent, architecture).
Turbo Intruder uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Turbo Intruder uses MCP); both cover August, MCP; overlapping topics (agent, august, bank).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover August, Python; overlapping topics (against, agent, august).
Turbo Intruder uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Turbo Intruder uses MCP); both cover LLM, MCP; overlapping topics (against, agent, attack).
Turbo Intruder uses MCP / Shared entities / Earlier coverage
Linked by a graph relationship (Turbo Intruder uses MCP); both cover August, MCP, Python; earlier August coverage from 2026-08-07.