elder-plinius/T3MP3ST

What it solves

T3MP3ST is an offensive security framework designed to automate the process of finding vulnerabilities (zero-days) in software. It aims to make professional-grade bug hunting and red-teaming accessible to researchers and educators by automating the kill chain: reconnaissance, exploitation, and reporting.

How it works

The project acts as a "war machine" bolted onto an existing AI coding agent (such as Claude Code, Codex, or local models via Ollama). Instead of requiring new API keys, it leverages the agent already running on the user's machine to drive a suite of security tools. It uses a ReAct loop to execute a multi-agent "swarm" architecture consisting of eight specialized operators (e.g., Recon, Exploiter, Infiltrator) to perform tasks across various domains like web apps, source code, and embedded systems.

Who it’s for

It is intended for authorized security researchers, red-teamers, and students who have explicit permission to test the systems they are targeting.

Highlights

• Keyless Operation: Uses the AI coding agent already installed on the user's machine, avoiding additional API costs or cloud tenants.
• Reproducible Benchmarks: Includes a verify-claims command that re-derives all performance metrics from committed data to prevent "trust-me" numbers.
• Broad Domain Coverage: Supports black-box web app testing, hint-free CTF solves, and a coordinated-disclosure pipeline for robotics/embedded OSS.
• Egress-Scope Containment: Built-in networked tools refuse to target hosts outside the defined mission scope by default.
• C-suite of Tools: Includes a default arsenal of 36 tools, expandable to 111 with an opt-in full arsenal.