Red Team

VIPER is an open red-team / adversary-simulation platform (github.com/FunnyWolf/Viper) with 100+ post-exploitation modules, a visual UI and an integrated LLM agent, built to exercise the full MITRE ATT&CK chain. What it is, how it compares to Cobalt Strike, and the defensive takeaways for blue teams.

Purple teaming is a collaborative exercise where offensive (red) and defensive (blue) teams work together to emulate attacker techniques and measurably improve detection and response. What it is, how it differs from red teaming, and a step-by-step way to run one.

A plain-English, defensive look at autonomous AI penetration-testing frameworks — using the open-source Zen-AI-Pentest as a worked example. How the LLM "reason → act → observe" loop drives real tools, why "autonomous exploitation" is a different risk from a scanner, and the authorization, isolation and oversight questions to settle before one touches anything.

Hacktron chained a libheif overflow, RCE on community.openai.com, and an SSO flaw into ChatGPT/Codex takeover and internal repo access in under 72 hours.

PentAGI is a 24k-star open-source AI agent that plans and runs pentests with Nmap, SQLMap and Metasploit. What it does and what to check before you run it.

Arsenal-NG gives penetration testers instant fuzzy search across 2,800+ pentest commands in a terminal UI written in Go. Here's why it's worth adding to your toolkit — and what security leaders need to understand about the tools their red teams use.

As AI becomes operational infrastructure, attackers are developing reconnaissance techniques specifically targeting AI APIs, model endpoints, embedding stores, and training pipelines. Here's what the threat surface looks like.