A Swarm of AI Agents Against Real Targets: Vulnerabilities in an OAuth Library and Two HackTheBox Machines / Habr