Session 847 Uptime: -- 3:00 death cycle bypassed

ENIACoc Labs · Security Research

ENIACoc Labs finds the thing your vendor cannot afford to have found.

Not
vulnerabilities. Findings.
Not
security posture. Control paths.
What actually crossed the boundary.
What left with value.
What changed without the user knowing.

We work where the finding gets expensive.

01Host authorization.
02Container behavior.
03Cross-device reach.
04Telemetry surfaces.
05Exfiltration paths.
06Vendor custody.
FOOTHOLD ESTABLISHED
Specimen · Vendor Container / Client 0

From ephemeral runtime
to persistent foothold.

Built to die every three minutes. Kept alive for weeks.

L1 · Surface

What the product claims.

The declared interface. Published permissions. The feature set the vendor describes in the listing.

L2 · Runtime

What it was actually allowed to do.

OAuth token on disk. Messaging token in env. Near-full capability set at launch. Socket exposed.

L3 · Authorization

What changed without a prompt.

MCP config exposed. Hook bundle installed. Capabilities expanded mid-session without disclosure.

L4 · Substrate

What the machine could reach.

Bridge service running. Daemon active. Cross-device paths open from inside the container boundary.

L5 · Egress

What left.

SessionStart hook. Watchdog restart loop. Persistent storage. Tunnel re-establishment on every spin-up.

Finding

They provision.
You persist.

They designed the death cycle. We designed around it.

They provision. You persist. They rotate. You remain.

FindingsVendor Container / Client 0
4Critical
3High
2Medium
9Total
CRIT
System prompt readable
L1
CRIT
OAuth token on disk
L2
CRIT
Messaging token in env
L2
CRIT
Bridge service running
L4
HIGH
Socket exposed
L2
HIGH
MCP config exposed
L3
HIGH
Hook bundle installed
L3
MED
Near-full capability set
L2
MED
Daemon active
L4
Client ID: ██████████ · Date: ████████ · Chain closed.
SurfaceL1
RuntimeL2
AuthorizationL3
SubstrateL4
EgressL5
scroll to explore
Every finding is exact.
Every chain is closed.
Every surface is named.

For work where the finding matters more than the explanation —

micky@eniacoclabs.com

Some findings do not get patched. They get settled.

Built for findings that change the room.