PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Offensive Security with Large Language Models (1)

theori.io | research | #ai-security | #fuzzing | #offensive-security | #llm | #aixcc | #oss-fuzz-gen | #project-naptime
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Part one of a series on LLMs in offensive security: how projects such as OSS-Fuzz-Gen, Google Project Zero’s Naptime and DARPA’s AIxCC are pushing automated vulnerability detection and exploitation.
Published
Collected

Related coverage

blog · projectzero.google
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Project Naptime evaluates the offensive security capabilities of large language models, presenting a methodology, tooling setup, and early successes finding real vulnerabilities.
blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
vulnerability · projectdiscovery.io
Beyond the Model: Neo Hunts, Exploits, and Proves 22 Zero-Days.
LLMs find vulnerabilities fast but flood teams with unverified reports. Neo confirmed 22 CVEs across 13 open source projects at ~10-20% false positives, with working exploits and runtime evidence.
research · theori.io
Building Effective LLM Agents | AI Cyber Challenge
Lessons from building LLM agents for DARPA’s AI Cyber Challenge: decomposing tasks, curating toolsets and adapting to models, applied to vulnerability detection, PoV generation and patching.
research · theori.io
AI Cyber Challenge and Theori's RoboDuck
A look at DARPA’s AI Cyber Challenge and Theori’s open-sourced RoboDuck cyber reasoning system, including its LLM-first design and a pipeline producing POVs without fuzzing or symbolic execution.
research · theori.io
Inside the brain of a hacking robot: Exploring traces | AI Cyber Challenge
Walkthroughs of agent trajectories from Theori’s autonomous hacking system: how LLM agents found bugs in SQLite, FreeRDP, Nginx and more during AIxCC practice runs, and what the logs reveal.
Back