478 matches found
StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents
Stealth, the discipline of achieving an objective without revealing your presence, capabilities, or collected intelligence, is what separates sophisticated operators from detectable ones. Elite security researchers and advanced persistent threats achieve their objectives unnoticed; autonomous...
Decepticon v1.1.40
Decepticon — Autonomous Red Team Agent "Another AI hacker? Let us guess — it runs nmap and writes a report." ☁️ Don't want to self-host? Decepticon is live in the cloud. Skip the Docker setup — run autonomous red-team engagements right from your browser. !Launch the live app at app.decept...
ctf-writeups
CTF Writeups Writeups from authorized OffSec labs, with more...
NullsecMultitools
nullsec A menu-driven offensive-security multitool — 37 mod...
firmware v1.16
🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...
Exegol v5.1.11
Exegol is a comprehensive cybersecurity environment designed by offensive security experts, for fellow hackers, with its community. It solves the common pain points of traditional security distributions by providing a modular and reliable toolkit that's made for the field. Want to know more about...
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence AI is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive...
Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents
Security-agent evaluations commonly measure peak offensive capability under generous inference budgets, emphasizing vulnerability discovery, exploit development, penetration testing, and CTF completion. Such measurements are useful but incomplete: in operational security, every reasoning step, to...
VEXAIoT: Autonomous IoT Vulnerability EXploitation Using AI Agents
Internet of Things IoT systems are inherently vulnerable due to constrained hardware, outdated firmware, and insecure default configurations, creating a need for scalable and adaptive security testing approaches. While recent adoptions of Large Language Model LLM agents have demonstrated promise ...
T3MP3ST Multi-Agent Offensive Security Framework
T3MP3ST is a multi-agent offensive-security framework, built to turn the AI coding agent you already run into a zero-day hunter...
ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents
As LLM agents take on offensive security work, a single out-of-scope tool call can breach a client's engagement boundary, disrupt production, or void a bug-bounty finding. Unlike a fixed safety policy, the boundary that matters is declared in the user's request and must be inferred from intent...
Nexploit
Nexploit Advanced Offensive Secur...
offensive-craft
offensive-craft 🛠️ A forge for offensive security research...
Red-Teaming the Agentic Red-Team
The use of agentic systems to perform offensive security operations has moved from a theoretical possibility to a commoditized capability. However, while the community has focused on creating more and more capable agents, less attention has been allocated to assessing the security of those system...
OSCP-PEN200
🛡️ OSCP / PEN-200 Master Pentesting Database !License: MIT...
Fulcrum-OSINT-monitor
FULCRUM — Architecture Technique v3.1 Vue d'ensemble FULC...
offensive-claude-813
Offensive Security Research Config for Claude Code !TIP...
offensive-claude-982
Offensive Security Research Config for Claude Code !TIP...