skip to content
superbot.gg

Local security review

Four local demos.Claims and limits in text.

Install now See the proof

Service versions, ranked

ClaimNmap -sV returned service/version rows

Actual prompt 
nmap -sV scanme.nmap.org, then rank what answered by how easy it is to get into and tell me what to fix first

Observed

Service/version rows and a "Fix in this order" ranking

The answer cautions that an old release line is not a specific CVE claim

Not established

  • Exploitability or an exploit
  • Patch state or a completed fix
Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, captions and end card.
Transcript and capture notes
Take, date and environment
16:9-2b92f34a; 2026-10-25T00:10:00Z; desktop dev; real Superbot Helper 1.1.6-dev.60, protocol 1
Tool and version
Nmap with -sV; Nmap version not recorded
Finding film range
00:03.689-00:19.081, including time-compressed answer assembly and the held answer
Material edits
Source 0.000-8.494 s trimmed; 73.362 s wait compressed to 1.200 s; 21.881 s editorial timeline
Film SHA256
0c2279f43be62b93430ba4292502e0efa844fb7b2cfcaeeb54f4ae235c3aaa93
Evidence note SHA256
aeaf38f4b6cfc1af532744bffec53754054d9e72d4133920d136ef8e91bc27ab

Read the public evidence note

Nmap and scanme.nmap.org belong to the Nmap Project, which is not affiliated with and does not endorse superbot or this capture.

Download

One live connection sample

Claim16 live connections in one sample

Actual prompt 
which apps on this Mac are talking to the internet right now, and what are they sending?

Observed

Process, destination and volume metadata

A 10-second sample without root, plus a 16-second connection scan

Not established

  • Payload contents
  • Continuous monitoring or blocking
Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe and captions.
Transcript and capture notes
Take, date and environment
16:9-0641e05e; 2026-10-24T02:15:04Z; desktop dev; real Superbot Helper 1.1.6-dev.60, protocol 1
Tools and versions
lsof and nettop; both tool versions not recorded
Finding film range
00:09.355-00:18.373, spanning time-compressed answer assembly and the held observations
Material edits
Source 0.000-0.040 s trimmed; 160.766 s wait compressed to 1.200 s; 18.373 s editorial timeline
Film SHA256
64dbc42907a6af61b248c361f6e70826d3ece0aff89771e17b993cccd05c3e4b
Evidence note SHA256
69925f54e4929f1bd88114ab47201910e51fd05403edadfe1f34068e513f511c

Read the public evidence note

Download

Plaintext keys reported

ClaimTwo plaintext API keys reported

Actual prompt 
scan this mac for anything an attacker could use and tell me the fix

Observed

Two Anthropic API keys in plaintext, plus five smaller exposures

E2E Helper fixture, not independent scanner certification

Not established

  • Key validity
  • Rotation, file changes or other remediation
Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, captions and a brief blur.
Transcript and capture notes
Take, date and environment
16:9-7779ffe7; 2026-10-23T12:14:25Z; desktop dev; E2E Helper fixture
Tool and version
E2E Helper fixture; fixture version not recorded
Finding film range
00:05.463-00:13.122, including the fixture answer and the delivered blur interval
Material edits
Source 0.000-5.793 s trimmed; 69.729 s wait compressed to 1.200 s; blur at 00:06.3507-00:06.5305; 13.122 s editorial timeline
Film SHA256
6c2c72fa144fdc095d44fc06555e35dafc9bae66d3b0e8557a93fc4466b97531
Evidence note SHA256
ffec83b2178e15fbbabb2f1ade3dae4e9465a5e4bafdbb3998be4471d7632b8b

Read the public evidence note

Anthropic is not affiliated with and does not endorse superbot or this fixture capture.

Download

Pseudocode and C exports

Claim45 functions and 45 exported C files

Actual prompt 
Decompile /bin/cat for me: list its functions, decompile one function, then export the code so I can reuse it.

Observed

45 functions: 11 defined and 34 import thunks

FUN_10000070c pseudocode in cat_main.c, plus 45 exported C files

The hub lane rejected the sample path; direct PyGhidra produced the export

Not established

  • Original source recovery or runtime behavior
  • Exported-C correctness or a working hub lane

Decompiler output is an approximation

Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, answer crop, captions and end card.
Transcript and capture notes
Take, date and environment
16:9-d8a4183d; 2026-10-25T00:36:49.223Z; desktop dev; real Superbot Helper 1.1.6-dev.60 (protocol 1), not a fixture
Engine and version
Ghidra 12.1.2 PUBLIC via PyGhidra 3.1.0; authorized /bin/cat x86_64 Mach-O slice
Function inventory range
Output 00:06.368-00:06.431466; take 154.958-214.959 s
Selected pseudocode range
Output 00:06.368; take 184.959-194.978 s
Export and answer range
Output 00:06.368-00:23.135; take 214.959-250.886 s
Material edits
Source 0.000-9.790 s trimmed; 219.161 s wait compressed to 1.200 s; answer crop excludes unrelated cards; 25.935 s editorial timeline
Film SHA256
46f4cba48dc3d6d2ffde2cc4ae2a5f99f42fce94d5711aa9a0e062fb3bf5e0c6
Evidence note SHA256
8ada225ed918c7cec719fd2a219fe12e1371d5f60fc42429d473d95a1163d24c

Read the public evidence note

Download