At DefCamp 2025, our CEO Adrian Furtună did a LIVE DEMO of how an LLM connected to an MCP server can help with recon, CVE mapping, fingerprinting, and even chaining SQL injection steps.
That doesn’t mean you should hand over the keyboard.
The demo makes one thing very clear: AI can speed up offensive security work, but it can also speed up bad decisions if you skip guardrails.
Need more reasons to keep the human in the loop?
Watch the full talk here: https://www.youtube.com/watch?v=x3z8C6aQX_g
🎤 NightmareFactory drops at #DefCamp 2025 😱
Live from Bucharest, on Nov 13–14.
After digging into Odoo, Gitea, and FileCloud in 2024, Matei Badanoiu and Catalin Iovita from our team at Pentest-Tools.com leveled up their 0-day hunting game.
🚨 In 2025 alone:
🧩 they reported ~15 new 0-days
⚙️ Built fresh vulnerability chains
💥 And got one-click RCE from seemingly “low” bugs
Their talk breaks down:
🔍 How the team evolved their approach
🧠 Why chaining bugs changes the impact game
🚀 What they learned about turning niche findings into real-world exploitation paths
If you’re into #offensivesecurity, vuln research, or just love a good “wait… that worked?!” moment →
📍 Don’t miss NightmareFactory at DefCamp! --> https://def.camp/
🗓️ Last week we got to trade tactics, tools, and thought-provoking ideas in our favorite hacker playground: DefCamp!
We soaked in the:
✅ Rewarding conversations with cybersecurity pros from around the world.
✅ Shared love for the creativity & curiosity of the hacker spirit.
✅ Gratitude for everyone who stopped by to chat, ask questions, and share ideas with us! 🙌
To celebrate the hacker spirit, we released limited-edition collectibles inspired by the grit, creativity, and perseverance of our infosec peers!
🎁 That wraps up our experience at DefCamp 2024 and we can't wait to see you at the next one!
On my way to #DefCamp in Cluj-Napoca. Have a breakout session on Friday about real attacks handled by our SOC.
Looking forward to the sessions and discussions that will arise.
DefCamp 13 was so. Much. FUN! 🤩
(White) Hats off to the organizing team and to *you* for showing up, sharing feedback, doing the challenges, and (sometimes) defeating our reigning foosball champions. 🏆
Enjoy your swag and see you again next year!
How many layers deep are you into your #ethicalhacking work today? (And do you want this poster on *your* wall?)
Those of you who came to by say hi! at #DefCamp last year probably remember this mind-bending creation by our own Andrei Tomeci.
Hope it inspires you to always dive deeper for findings you're proud to report.
Pentest-Tools.com
Kirils Solovjovs