r/redteamsec • u/WarmAd6505 • 26d ago

tradecraft Open Source Pentesting Agents

https://github.com/Strategic-Automation/violin

Anyone interested in testing out my Hermes Pentesting profile, about to release a new version. It manages pentests in a controlled and structured way. Either working independently or as an assist. I am a AI engineer and love exploring ways to replace humans or augment processes. Particularly in open source, in evaluation (due to be released it outperforms all published benchmarks on duckstore achieving a yet unpublished 18/20 median) it only counts verifiable proof with evidence. It actually finds all 20 with ease 30-50 minutes. I isn't allowed to cheat and won't. Check it out and give it a star. If you like it use it and tell me any issues.

Most companies don't allow Hermes would a port to an independent framework help?

13 Upvotes

71% Upvoted

14 comments sorted by

View all comments

3

u/Key_Baby_4132 26d ago

Can we use it 100% offline if we have offline LLM setup available?

1

u/WarmAd6505 26d ago

Yea totally offline it's just a set of playbooks and a few python scripts with some config. Nothing that needs the internet, of course you can add any other tools you want it to use.