https://mac.sploit.dk/tags/grok-bot/ Recent content in Grok-Bot on Martin's Blog Hugo en-us Mon, 19 Oct 2026 00:00:00 +0000 https://mac.sploit.dk/blog/grok-bot-all-your-creds/ Mon, 19 Oct 2026 00:00:00 +0000 https://mac.sploit.dk/blog/grok-bot-all-your-creds/ <p>Grok Bot connects an AI agent to a computer and external services such as Gmail and Notion. You install the desktop app, connect your accounts through a browser, and let the agent work. I wanted to understand where those credentials go and what someone could do with the desktop app&rsquo;s own token.</p> <p>I unpacked the Linux application, version 0.71.2, traced its authentication and connector code, and tested the saved access token against the backend. The interesting boundary is between the desktop session and the cloud services that act on your behalf.</p>