, Author at Synack

Nicolas Krassas

Nicolas Krassas is a security researcher on the Synack Red Team and a Guardian of Trust inductee on the Synack Acropolis. Known online as dinosn, he specializes in remote code execution research, including work exploiting Java RMI via MBeans and breaking down Java JMX exploitation paths for Synack's Exploits Explained series. He has also documented the risks of open internet-facing proxy servers and has spoken on SRT panels at RSA Conference. Learn more: https://acropolis.synack.com/inductees/nicolas

Using an LLM to Exploit a Novel HTTP Interface

Exploit Explained

Oct 9, 2025

Using an LLM to Exploit a Novel HTTP Interface

A Synack Red Team member discovered a cross-site scripting vulnerability in SAP Concur Open.

Nicolas Krassas

4 min read

Nicolas Krassas

Research by Nicolas Krassas

Using an LLM to Exploit a Novel HTTP Interface