Hacking The Browser For Fun ~And Profit~ | San Francisco .

Members-Only

Recent Talks & Demos are for members only

Exclusive feed

You must be an AI Tinkerers active member to view these talks and demos.

June 25, 2026 · San Francisco

XBOW: Browser Hacking Agents

Explore native application hacking with XBOW's research on Chromium bugs. Learn about agent structures, objectives, and exploit techniques, with a demo of a patched vulnerability.

Overview
Tech stack
  • Claude Code
    Anthropic's agentic coding tool: Unleash Claude's raw power directly in your terminal or IDE to turn complex, hours-long workflows into a single command.
    Claude Code is Anthropic’s powerful agentic coding assistant, designed for high-velocity development. It operates natively within your terminal, IDE (VS Code, JetBrains), or via a web interface, allowing you to delegate complex tasks like feature building, bug fixing, and codebase navigation. The agent plans, edits files, executes commands, and creates commits, maintaining awareness of your entire project structure. Internally, Anthropic engineers using Claude Code reported a 67% increase in productivity, demonstrating its capacity to deliver significant gains for Pro and Max plan users.
  • Mythos
    Claude Mythos is Anthropic's most powerful, restricted AI model designed to autonomously hunt and patch critical software vulnerabilities at machine speed.
    Anthropic developed Claude Mythos to address the growing complexity of modern software security, keeping the model restricted to a private testing program due to its advanced autonomous capabilities. Through Project Glasswing, Mythos analyzed production code across approximately 50 partner organizations (including Cloudflare and Mozilla) and identified over 10,000 high or critical severity vulnerabilities in its first month alone. By finding zero-day flaws in major operating systems and browsers that survived years of human review, this model shifts the cybersecurity bottleneck from finding bugs to validating and deploying patches. Anthropic continues to deploy the upgraded Mythos 5 through trusted access programs to help defenders secure critical infrastructure before malicious actors can exploit it.
  • OpenAI Codex
    OpenAI Codex is a cloud-based AI agent that autonomously writes, debugs, tests, and proposes pull requests for software development workflows.
    Codex is a powerful, cloud-based software engineering agent, powered by the specialized codex-1 model (a derivative of the GPT architecture). It streamlines the development lifecycle by autonomously handling complex tasks: writing new features, debugging code, running tests, and generating pull requests directly to a GitHub repository. Operating in a secure, isolated sandboxed environment, Codex ensures reproducible changes and can process multiple tasks in parallel, a key differentiator from sequential human workflows. Developers interact with it through the ChatGPT interface or the Codex CLI, delegating work in plain English (e.g., 'Find and fix a bug where the jump search algorithm doesn't handle empty arrays') to accelerate shipping and improve team productivity.
  • GPT-5
    OpenAI's GPT-5: The unified, multimodal foundation model delivering PhD-level reasoning and state-of-the-art coding performance.
    Copy that: GPT-5 is OpenAI's flagship multimodal model, launched August 7, 2025, as the successor to GPT-4. This is a major architectural shift: it unifies advanced reasoning capabilities (like the 'o-series' models) and rapid response times into a single system, eliminating the need for manual model switching (Source: OpenAI, August 2025). The model demonstrates state-of-the-art performance across technical benchmarks (math, programming, finance) and features a massive 272,000-token context window (Source: Jagran Josh, Voiceflow). Developers access it via the API in variants—including `gpt-5-mini` and `gpt-5-nano`—optimized for latency and cost trade-offs, making this frontier intelligence accessible across all ChatGPT tiers (Source: Botpress, Jagran Josh, Voiceflow).
  • Amazon EC2
    Provision and manage resizable compute capacity (virtual servers, or 'instances') on the AWS cloud.
    Amazon Elastic Compute Cloud (EC2) delivers secure, scalable compute infrastructure: We offer the industry's broadest platform, featuring over 1000 instance types optimized for diverse workloads (e.g., General Purpose, Compute Optimized). You select an Amazon Machine Image (AMI) — essentially a template with your OS and software — to launch a virtual server. EC2 supports multiple operating systems, including Amazon Linux, Ubuntu, Windows Server, and macOS. Key services like Auto Scaling and Elastic Load Balancing (ELB) are integrated to automatically adjust capacity and distribute traffic across instances, guaranteeing high availability and performance.