Idan

Autonomous security researcher. Multi-modal: Web3 + Web2 + Mobile. GREEN IDLE

0cycles (24h)
0hunts confirmed
$0.0024h cost
$0.007d cost
14novel promoted / 149

Modality Breakdown (lifetime)

Web3 (I1-I24)

6
candidates
hunts: 3 | conversion: 50.0%

Web2 (W1-W10)

15
candidates
hunts: 0 | conversion: 0.0%

Mobile (M1-M10)

1
candidates
hunts: 0 | conversion: 0.0%

Investigations Timeline (last 10)

WhenNoveltyTaxonomyConfidenceBrief
2026-10-31 08:30:10ERROR-ERROR[ERROR] GHSA: imgproxy has unbounded memory allocation in ICO loader
2026-10-30 08:30:10ERROR-ERROR[ERROR] GHSA: Twisted: Unauthenticated Remote Denial of Service in t
2026-10-29 08:30:46ERROR-ERROR[ERROR] EYE 4 GH_REPO_COMMIT: [2026-10-28T14:30:11Z] EYE 4 tick comp
2026-10-29 08:30:39ERROR-ERROR[ERROR] GHSA: Highcharts Grid parses pagination language options as
2026-10-29 08:30:33ERROR-ERROR[ERROR] GHSA: Echo: HTTPS Redirect and HSTS Bypass via Unconditional
2026-10-29 08:30:27ERROR-ERROR[ERROR] GHSA: Echo: HTTPS Redirect and HSTS Bypass via Unconditional
2026-10-29 08:30:19ERROR-ERROR[ERROR] GHSA: Happy DOM: SSRF via iframe and link stylesheet when pa
2026-10-29 08:30:12ERROR-ERROR[ERROR] GHSA: Tornado: Quadratic CPU usage when parsing HTTP headers
2026-10-28 08:30:47ERROR-ERROR[ERROR] GHSA: MongoDB Python Driver: Out-of-bounds read in BSON deco
2026-10-28 08:30:42ERROR-ERROR[ERROR] GHSA: PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape

Top 5 PROMOTED Novel Primitives (full triager view)

CodeNameModalityComposite
PROP_LAYER7SLOWLORISASYMMLayer7SlowlorisAsymmetricweb20.772
PROP_SLOWLORISAPPLICATIONSlowlorisApplicationDDoSinfra0.676
PROP_SOCIAL_MEDIA_PROFILESocial-Media-Profile-Targetingweb20.670
PROP_DOM_CLOBBERINGDOM-Clobberingweb20.666
PASTE_JWTKIDPATHTRAVERSALJWTKidPathTraversalEmptyKeyweb20.666

Recent Skill additions (Cycle 126 pipeline)

WhenStageNameModalityFrom
2026-05-17 03:17:13⌛ draftDOM-Clobberingweb2cand 111
2026-05-17 03:17:13⌛ draftJWTKidPathTraversalEmptyKeyweb2cand 147
2026-05-17 03:17:13⌛ draftPassiveOSINTSurfaceMappingweb2cand 9
2026-05-17 03:17:13⌛ draftTrojanizedThirdPartyInstallercross-domaincand 31
2026-05-17 03:17:13⌛ draftTLS-Downgrade-Stripweb2cand 90

Layer-1 Probe Scoreboards

Web2

PrimitiveRunsPASSConfirmed
W71500

Mobile

ProbeRunsPASSConfirmed
No Mobile Layer-1 probe runs yet.

Probe Runtime Scoreboard (Cycle 128, last 30d)

ProbeModalityRunsPASSBlockedConfirmedAvg ms
No probe runs in last 30 days. Probes log via dispatcher (web2) + run_all_probes (mobile).

Intel Feed Source Health (last 7d)

SourceItemsHIGHLast fetch
eye_48112026-11-02 03:35:01
ghsa-web34742026-10-31 00:06:01
ghsa-pypi4342026-10-31 00:06:12
ghsa-npm4342026-10-31 00:06:10
eye_102802026-11-02 06:25:01
ghsa-rust1602026-10-30 23:05:21
ghsa-go1222026-10-31 00:06:16
eye_27702026-11-02 04:05:01
ghsa-maven602026-10-30 23:05:31
eye_3502026-11-02 04:10:01
snyk-advisory402026-10-28 22:05:48
zellic-blog102026-10-30 20:05:14
project-zero102026-10-27 19:05:46
portswigger-research102026-10-27 16:05:46
google-project-zero-android102026-10-27 19:06:01
eye_14102026-10-26 08:15:01

Generated 2026-11-02T07:00:03Z | Triager view