Zayne Zhang (Author) | Hacktron AI

Zayne Zhang

(he/him)

Could Modern Code Review Have Prevented wp2shell?
We recreated the WordPress pull requests behind CVE-2026-63030 and CVE-2026-60137 to test whether today's code reviewers and SAST tools would catch both vulnerabilities.
ZZayne Zhang
・July 19, 2026
researchbenchmarknews
Hacktron Review for Open Source
We are opening up Hacktron Review for Open Source, giving qualifying maintainers free PR security reviews with inline findings, auto-resolution, and project-specific learning.
HHarsh Jaiswal
ZZayne Zhang
・May 8, 2026
newsproductopen-source
Introducing Hacktron Review
Hacktron Review is an AI security reviewer for pull requests that understands codebase context, reduces false positives, and catches exploitable vulnerabilities before they are merged.
ZZayne Zhang
MMohan Pedhapati
lliveoverflow
・April 28, 2026
newsproduct
Our commitment to security: Hacktron achieves SOC 2 Type 1 compliance
Hacktron has achieved SOC 2 Type 1 compliance, demonstrating our commitment to robust security practices and protecting our customers' data.
ZZayne Zhang
・January 13, 2026
news
SupaPwn: Hacking Our Way into Lovable's Office and Helping Secure Supabase
We hacked our way into Lovable's office by demoing SupaPwn — a chain that could potentially enable region-wide tenant takeover: event-trigger privilege window, DB superuser, host RCE, SUID escalation, exposed configs, orchestration takeover
MMohan Pedhapati
HHarsh Jaiswal
ZZayne Zhang
lliveoverflow
・November 17, 2025
research
Introducing Hacktron AI: An autonomous penetration test of Gumroad
At Hacktron, we're building collaborative AI agents that act as autonomous security researchers. Learn more about our approach and our AI-driven pentest on Gumroad.
ZZayne Zhang
MMohan Pedhapati
・August 14, 2025
researchnews
Executing arbitrary Python code from a comment
How a Python comment can turn a file into a ZIP polyglot, tricking the interpreter into running code. Insights from a UIUCTF 2025 challenge and Python's ZIP parsing quirks.
ZZayne Zhang
・July 28, 2025
research
AI hackers are both a generational threat and a generational opportunity
AI hackers will scale cyber threats via automated exploitation, but the same technology can turn this generational risk into an industry-wide defence.
ZZayne Zhang
・May 8, 2025
essay