Open Source

A quick look at Ars0n Framework v2 (github.com/R-s0n/ars0n-framework-v2) — Harrison "rs0n" Richardson's open-source bug bounty framework that wraps 50+ recon tools, ranks targets with an ROI algorithm, and builds lessons into every step. Watch the creator's demo, see the Company/Wildcard/URL workflows, and understand the "earn while you learn" idea in a 3-minute read.

A deep dive into RedCell (github.com/martian56/redcell): open-source AI agents that plan and run a full penetration test with real tools — nmap, nuclei, Metasploit and an agent-driven browser inside a Kali container — then write the PDF/JSON/SARIF report. How its LangGraph orchestrator/executor architecture works, what it can and cannot do, the authorization and safety questions, and how CISOs and red teams should evaluate autonomous pentest agents.

Z.ai released OpenVuln, a free public tool that points its GLM-5.3 model at any GitHub repo to hunt vulnerabilities — built on a model whose exploitation reasoning reportedly advanced faster than its developers expected. Here is how it actually works, the numbers behind it, and what it means for anyone maintaining open-source code.

Arsenal-NG gives penetration testers instant fuzzy search across 2,800+ pentest commands in a terminal UI written in Go. Here's why it's worth adding to your toolkit — and what security leaders need to understand about the tools their red teams use.