2026·08·03
I'm in Your Apps
Leveraging a stolen Codex access token to invoke the MCP tools behind a user's connected Apps - sending mail, writing to repos, and reading documents on their behalf.
Tag
ai
/ 4 posts2026·07·27
WHAM, Bam, Thank You OpenAI for the C2 Infrastructure
Codex's remote-control protocol can be repurposed as command-and-control infrastructure without Codex being installed on the endpoint.
2026·05·21
A Deep Dive into Codex Windows Sandbox
OpenAI recently published a writeup on their new Windows sandbox design.
2025·12·18
RAG, ICL, and Windows Events: Building a Human-Guided Security Analyst
Leveraging AI in the defensive/offensive space has taken off the past couple of years.