TLDR Tech / InfoSec
Autonomous Vulnerability Hunting with MCP (13 minute read)
An MCP-based Claude Code setup wraps more than 300 tools across five Proxmox VMs to automate vulnerability research end to end, from staging binaries through fuzzing, crash triage, RAG-backed knowledge, and reporting. Findings start in a “hallucination bin” and must pass strict PoC, exploitability, and low-privilege checks before promotion, which keeps false positives low. Campaigns have already produced multiple Go standard library OOM CVEs, a Windows OEM SYSTEM 0-day chain, and macOS app platform issues, while TokenBurn tracks token usage and cost-per-finding to keep the whole pipeline economically grounded.
Read the full story