From AI Agents to RCE - Building a Vulnerability Research Workflow

Introduction A security researcher spends most of the day reading code. Thousands of lines, sometimes, just to find the few that matter. Most of that reading is not where the meaningful work happens. The real work is the moment of suspicion: this length field is validated here but not there, this state can be entered twice, this loop trusts a value it should not trust. That moment takes seconds. Reaching it can take days. An agent can work across a codebase in minutes, connecting functions scatt...