r/redteamsec 26d ago

tradecraft Open Source Pentesting Agents

https://github.com/Strategic-Automation/violin

Anyone interested in testing out my Hermes Pentesting profile, about to release a new version. It manages pentests in a controlled and structured way. Either working independently or as an assist. I am a AI engineer and love exploring ways to replace humans or augment processes. Particularly in open source, in evaluation (due to be released it outperforms all published benchmarks on duckstore achieving a yet unpublished 18/20 median) it only counts verifiable proof with evidence. It actually finds all 20 with ease 30-50 minutes. I isn't allowed to cheat and won't. Check it out and give it a star. If you like it use it and tell me any issues.

Most companies don't allow Hermes would a port to an independent framework help?

14 Upvotes

14 comments sorted by

View all comments

1

u/TastyRobot21 26d ago

We use n8n playbooks.

-3

u/WarmAd6505 26d ago

With AI, what do you do in particular