🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://projectblack.io/blog/local-ai-for-cyber-security
• Blog Title: Local AI for Cyber Security: Finding phpIPAM LFI and myVesta Authenticated RCE
• Suggested Section: AI Security > AI Assisted Fuzzing And Vulnerability Discovery; also cross-reference Pentesting Web > File Inclusion/Path traversal and Pentesting Web > Command Injection / PHP Tricks

🎯 Content Summary

The blog evaluates whether local AI-assisted code review can reliably find real vulnerabilities. The author benchmarks four approaches against a known phpIPAM authenticated Local File Inclusion issue, then applies the most successful approach to myVesta and discovers an authenticated Remote Code Execution vulnerability.

1. Benchmark vulnerability: phpIPAM authenticated LFI / arbitrary PHP include - CVE-2026-12194

The benchmark issue is a classic authenticated PHP Local...

🔧 Technical Details

Authenticated PHP Local File Inclusion through dynamic controller dispatch: If a PHP application derives a controller name from request-controlled data and concatenates it into require_once(), include(), or similar PHP include functions without allowlisting and path canonicalisation, an attacker can often use traversal sequences such as ../ to make the application include an unintended PHP file. The phpIPAM case is a representative pattern: the controller value can come from $_GET, $_POST, JSON, or XML request bodies and flows directly into require_once(). If the attacker can cause the path to resolve to a readable .php file, PHP will parse and execute it in the web application context. If the attacker can also plant a PHP file, for example one containing phpinfo(); or another payload, the LFI becomes code execution.

Authenticated command injection through acc...

🤖 Agent Actions