Hacker Sidekick - The Agentic Workbench for Cybersecurity

meetup.comBurbsecVegas Meetup @ Blackhat/Defcon , Thu, Aug 6, 2026, 5:00 PM | Meetup**Join us for the August 2026 Las Vegas Cybersecurity \| BurbsecVegas Meetup** **BurbSecVegas - Black Hat / DEF CON Meetup** 📅 **Thursday, August 6, 2026** 🕔 **5:00 p.m.

27 July

Join us for the August 6th BurbSec Las Vegas meetup during Hacker Summer Camp 2026! All the coolest hackers in the industry will be hanging with us at the MGM Grand, For more details, visit: www.meetup.com/burbsecvegas... #BurbSecLV #HackerSummerCamp #BSidesLV #DEFCON #BackHat #HackerSidekick

Hacker Sidekick - The Agentic Workbench for Cybersecurity

hackersidekick.comHacker Sidekick - ship security work fasterDesktop AI that runs your tools, keeps your context, and doesn't quit when the work gets offensive.

Our three step plan for improving cybersecurity across your organization: 1. Hire more cybersecurity professionals 2. Follow cybersecurity best practices 3. hackersidekick.com (4. Stop using PHP)

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hot take: What if we just stopped using PHP?

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Did someone say "corn"? Come join us for our Certified Vibe Hacker workshop on Saturday at Corn Con to learn about how you can use cutting edge AI-powered tools to take your cybersecurity team to the next level. #vibehacker #certifiedvibehacker #corncon #hacker #workshop #hacking #cybersecurity

schedule.hope.netCertified Vibe Hacker HOPE 26Most security professionals are overloaded with tools, but what they really need is more focus and leverage. This workshop introduces “vibe hacking,” a practical, hands-on approach to using agentic AI...

12 Aug

Headed to HOPE in NYC? Become a Certified Vibe Hacker with us. Drive an AI agent through four scenarios: logs, vuln prioritization, code analysis, and a web app pentest. Sun Aug 16, 10am-12pm · New Yorker Hotel, Workshop A More info: schedule.hope.net/hope26/talk/... #HOPEconf #infosec

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Our biggest update yet: The Agentic Workbench for Cybersecurity, rebuilt from the ground up. An agent that lives on your machine and actually does the work, in one window where analysis lives next to execution. Here's the tour. #cybersecurity #hackersidekick #infosec

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Because it is one integrated environment instead of a browser tab bolted onto a chat, all of this is faster, more powerful, and more connected. Modes and approval gates keep the agent in bounds, every command is visible. Nothing happens off-screen.

hackersidekick.comOur Biggest Update Yet: The Agentic Workbench for Cybersecurity Gets a Ground-Up OverhaulAn agent with 41 tools, a browser it can drive, visible terminals, security modes and approvals, Watch mode, Skills, MCP, 77 integrations, and machine awareness-one desktop app for security work, rebu...

That's the integrated hacking environment. Full tour: hackersidekick.com/inside-hacke... #hackersidekick #cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

77 tool integrations pull your critical data into one place: threat intel, SIEM, EDR, ticketing. Plus a built-in intel server with ATT&CK, NVD, VirusTotal, Shodan, Censys, Exploit-DB, no key needed. #threatintel #osint

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Watch mode: toggle it and a passive monitor observes your terminal and browser, surfacing brief advice on missed steps, cleanup, or scope. It only advises. No tools of its own. It observes, you decide. #dfir #redteam

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The agent drives a real sandboxed Chromium browser. It inspects the DOM, pulls full request/response bodies, reads cookies including HttpOnly, walks login flows, and intercepts traffic to hold, modify, or block requests. JS and interception are approval-gated. #appsec #websecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

29 May

New study just dropped: 100% of Hacker Sidekick users are the best in their industry.

hackersidekick.comHacker Sidekick Update: Smarter Models, Workspace Indexing, and Dozens of Threat Intel ToolsModel routing for offensive security, workspace indexing, auto top-up billing, and a built-in threat intelligence MCP bundle.

Hacker Sidekick just shipped a big update. Here's what's new. #cybersecurity #hackersidekick #infosec hackersidekick.com/hacker-sidek...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Auto top-up billing so you never get cut off mid-pentest. Your plan includes a token allowance. Need more? It tops up automatically. You set the cap. #pentesting #redteam #cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Full breakdown on the blog: hackersidekick.com/hacker-sidek... hackersidekick.com #hackersidekick #cybersecurity #infosec

Hacker Sidekick just shipped a big update. Here's what's new. #cybersecurity #hackersidekick #infosec hackersidekick.com/hacker-sidek...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Workspace indexing. Open a project and the AI understands your entire codebase. Semantic search, vectors stored locally. Your code never leaves your machine. #codesearch #infosec #cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Dozens of threat intel tools built into the editor. Shodan, VirusTotal, MITRE ATT&CK, NVD, AbuseIPDB. All read-only, no setup. Look up CVEs, check IPs, pull Shodan results without leaving the editor. #threatintel #osint #shodan #mitreattack

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick just shipped a big update. Here's what's new. #cybersecurity #hackersidekick #infosec hackersidekick.com/hacker-sidek...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Automatic model routing. The editor picks the right AI for the task. General coding gets one model. Offensive security work gets routed to a model built for that domain. You don't configure anything. You just work. #AI #offensivesecurity #pentesting

Hacker Sidekick - The Agentic Workbench for Cybersecurity

16 May

Shoutout to our friends and colleagues at @bsides312.org, we hope you’re having a blast today! #infosec #bsides312 #cybersecurity #chicago

hackersidekick.comHacker Sidekick Achieves Remote Code Execution on n8n with CVE-2026-21858One prompt, no guidance: Hacker Sidekick built a PoC for CVE-2026-21858, mapped file read to RCE on n8n, validated vulnerable vs patched Docker targets, and documented the full chain.

@n8n.io just followed us 👀 Hi 👋

Hacker Sidekick - The Agentic Workbench for Cybersecurity@hackersidekick.com

Hacker Sidekick has once again autonomously exploited a critical vulnerability in popular software, this time a Remote Code Execution vulnerability in n8n, the workflow automation platform that thousands of companies run in production. One prompt. Video and blog: hackersidekick.com/hacker-sidek...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

What makes this demo different from most AI showcases: it shows the failures. The wrong API endpoints. Reading the n8n source code inside the Docker container to figure out why. Multiple iterations before the exploit works. The AI handles the tedious parts so you can focus on the important parts.

hackersidekick.comHacker Sidekick - desktop integrated hacking environmentIntroducing the new Hacker Sidekick: sovereign AI, local execution, and your toolchain in a desktop integrated hacking environment.

Give it a try yourself, download for free at: hackersidekick.com #cybersecurity #infosec #hackersidekick #pentesting #exploitdev #n8n #CVE202621858

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The attack: send application/json to a Form Trigger endpoint instead of multipart/form-data. The handler writes the attacker-controlled files object directly into the request body. Point filepath at /etc/passwd. The workflow execution data returns the contents base64-encoded.

hackersidekick.comExploiting a 4-Day-Old CVE with Hacker Sidekick in 40 MinutesWatch the full session: Hacker Sidekick researched CVE-2026-23918, built a Docker lab, delivered a Python PoC, explored RCE, validated patched vs vulnerable targets, and wrote detection guidance—in ab...

We gave Hacker Sidekick a CVE number and it built a complete exploit development workflow on its own. Research, source diffing, Docker lab, working PoC, validation, technical report. No follow-up prompts. CVE-2026-23918 Full video and blog: hackersidekick.com/exploiting-f...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The RCE assessment is what sold me on this demo. It doesn't oversell. Documents the DoS as reliable, the RCE as a research foundation with real blockers (build variance, ASLR, timing). That's the kind of honesty practitioners trust.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Every general-purpose AI refuses to help with exploit development. You describe real security work and get a lecture. Hacker Sidekick was built for this. Try it on your next engagement. hackersidekick.com #cybersecurity #infosec #hackersidekick #pentesting #exploitdev #CVE202623918

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Source code diffing. Root cause identification. Docker lab. Python PoC with two modes (DoS + detection). Heap analysis for RCE. Automated validation harness. Technical report with detection guidance. Not just an exploit. An entire research pipeline. One prompt.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

3 May

If you're like us, you might be up to some late night hacking. Now's the perfect time to download Hacker Sidekick and see what it's like when the AI works with you, on your system, with your tools. hackersidekick.com?utm_source=b... #cybersecurity #infosec #hackersidekick #agenticAI #pentesting

hackersidekick.comThe Desktop, the Server, and What We Mean by "Fusion"From our Open WebUI roots to the desktop and fusion server: one architecture for operators and orgs.

If you know Hacker Sidekick as a web app, that's changing. We just published a post explaining the shift: a new desktop application for practitioners, and the evolution of our web platform into what we're calling the fusion server. hackersidekick.com/the-desktop-...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The desktop app is the operator's workspace. Local tools, agentic workflows, on your machine. The fusion server is the enterprise backbone: model routing, identity, connectors, org knowledge, guardrails. All feeding into the desktop as one unified platform. Not two products. One architecture.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The post includes architecture diagrams and a guide to figuring out which deployment path fits your team. hackersidekick.com #cybersecurity #infosec #enterprise #hackersidekick #agenticAI

hackersidekick.comThe Desktop, the Server, and What We Mean by "Fusion"From our Open WebUI roots to the desktop and fusion server: one architecture for operators and orgs.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Two things drove this. Practitioners wanted AI that could actually execute locally: connect to tools, run agentic workflows, not just chat in a browser. And enterprise teams needed on-prem compute, on-prem inference, and single tenancy. So we built for both.

hackersidekick.comWhat We've Been BuildingThe journey over the past eighteen months - from a model without guardrails to the desktop IHE, and what comes next.

Now that we're posting again, I wanted to share the eighteen-month journey behind Hacker Sidekick. From a frustrated side project to the desktop application we just launched. hackersidekick.com/what-weve-be...

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

The feedback that mattered most: people didn't want AI that talks about security. They wanted AI that executes. Run tools. Chain workflows. Work the way practitioners actually work. So we built the Integrated Hacking Environment: a desktop workspace purpose-built for cybersecurity.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Weeks of all-nighters. A sold-out full-day Cyphercon workshop. Real bugs found, real tools chained, real work done inside the environment. Now it's public. Weekly posts from here on out. hackersidekick.com #cybersecurity #infosec #pentesting #hackersidekick #DEFCON #Cyphercon #Thotcon

hackersidekick.comWhat We've Been BuildingThe journey over the past eighteen months - from a model without guardrails to the desktop IHE, and what comes next.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

github.comGitHub - open-webui/open-webui: User-friendly AI Interface (Supports Ollama, OpenAI API, ...)User-friendly AI Interface (Supports Ollama, OpenAI API, ...) - open-webui/open-webui

Late 2024: every major LLM refused to help with legitimate security research. So I built one that would and shared it around Chicago's cybersecurity community. A close friend joined in early 2025, we rebuilt it on Open WebUI, and took it to DEF CON, Thotcon, Cyphercon, and SecretCon.

Hacker Sidekick - The Agentic Workbench for Cybersecurity

We've been quiet for a few months. Heads down, building Today Hacker Sidekick is moving from the browser to the desktop Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵 hackersidekick.com?utm_source=b... #securityengineering #agenticAI

Hacker Sidekick - The Agentic Workbench for Cybersecurity

hackersidekick.comSchedule a Demo | Hacker SidekickTell us about your team, then book a 30-minute Hacker Sidekick demo.

Enterprise teams: your web deployment isn't going away. It becomes the backend fusion platform - connectors, identity, context. The desktop app is where your operators actually work Demo hackersidekick.com/demo-intake?... #pentesting #redteam #blueteam #appsec #desktopapp #securitytools

Hacker Sidekick - The Agentic Workbench for Cybersecurity

Hacker Sidekick - The Agentic Workbench for Cybersecurity

This is the first of weekly posts about what we're building and where we're headed. No more radio silence. Full announcement: hackersidekick.com?utm_source=t... #cybersecurity #infosec #pentesting #AI

Hacker Sidekick - The Agentic Workbench for Cybersecurity