AI agents are rapidly evolving from simple chatbots into autonomous systems that browse the web, invoke tools, interact with MCP and other agentic protocols, and make decisions with minimal human intervention. As their capabilities expand, so does their attack surface. Before an AI agent can be exploited, it first has to be understood. What tools can it access? Which protocols does it use? Where are its trust boundaries? This talk explores how attackers approach AI agents through reconnaissance and capability discovery before moving on to exploitation. Along the way, attendees will be introduced to REAP (Reconnaissance and Enumeration for Agentic Protocols), an open-source framework for enumerating agentic systems, and leave with a practical methodology for assessing the security of modern AI agents.

Presented at Security BSides Jaipur
Duration: 30mins
Audience Level: All levels