The Hacktron team helped us uncover and remediate sophisticated vulnerabilities across our most critical systems incredibly quickly.
投资方
投资人来自
别再追逐告警，开始修复真正的问题。
客户信赖
包含
每位开发者 50 个 PR（每个 PR 不限扫描次数），超出后每个 PR 加收 $1
AI 修复，通过 PR 评论中提供的提示词完成
自动分配覆盖额度，新开发者首次提交 PR 即生效
GitHub、GitLab 和 Bitbucket 集成
包含专业版全部功能，另加
企业级模块，支持按仓库自定义规则配置
自定义集成，对接你现有的安全工具链
SSO、审计日志及基于角色的访问控制
7×24 优先支持，配备专属客户团队
安全公告
真实的漏洞，真实的影响。
HTAI-001
Critical BeyondTrust
Pre-Auth RCE in BeyondTrust Remote Support & PRA
Pre-Authentication Remote Code Execution via deserialization vulnerability in BeyondTrust Remote Support and Privileged Remote Access (PRA) products.
ID
HTAI-001
厂商
BeyondTrust
报告时间
2026年1月31日
类型
RCE
发布时间 2026年2月6日 完整详情
听听我们团队的最新分享
• hacktron
Metabase Cloud: The winner takes it all
We could have pwned every Metabase Cloud tenant by chaining an H2 INIT sanitizer bypass into RCE, then cloud misconfigurations into a full multi-tenant cluster compromise.
• hacktron
The Attack Surface Is Everyone Now
Why AI is broadening the attack surface across OSS, new SaaS, and fast-shipping teams, and how to position yourself with an assume-breach mindset.
• hacktron
Hacktron's $350 Pentest vs XBOW and Aikido at $4,000
We ran the same scan Doyensec used to test XBOW and Aikido, for a tenth of the price. Here's how our $350 AI pentest compared.
• hacktron
When Your VPN Opens Your Private Network to the Public
How AI-assisted reverse engineering of stripped PAN-OS binaries led to finding a JWT algorithm confusion vulnerability in GlobalProtect's Cloud Authentication Service, enabling full VPN auth bypass with just a username.