Skip to content
NewA calmer, faster ZeroHour
StoryResearchmedium

GitGuardian finds AI pentest frameworks exposed online

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

GitGuardian found dual-use AI pentest frameworks reachable online, including unauthenticated Agent Zero consoles, after ARTEX was removed.

GitGuardian catalogued about 45 open-source frameworks that loop a large language model through offensive tools, sorting 32 into five families and fingerprinting 41. A November 7 Shodan snapshot matched 1,428 ARTEX services, 419 PentAGI services and 173 Agent Zero services. Of the Agent Zero matches, 39 had no login and 134 showed a login page; 233 PentAGI matches used the default certificate. Eleven of 41 assessed tools serve a web interface by default, and Cairn, HexStrike and Agent Zero ship with no authentication. ARTEX’s creator removed the project on October 8 after abuse reports, yet 102 forks appeared that week, and GitGuardian said the matches do not prove criminal use.

Key facts
  • November 7 Shodan: 1,428 ARTEX, 419 PentAGI and 173 Agent Zero services.
  • 39 Agent Zero services had no login; 134 showed a login page.
  • 233 PentAGI matches used the project’s default certificate.
  • ARTEX was removed October 8, 2026; 102 forks appeared that week.
  • Only Pojun, Cybermes, Xalgorix and AIRecon connect a secret scanner.
  • Eleven of 41 assessed frameworks expose a web interface by default.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 8, 2026ARTEX creator removed the original project after abuse reports. · Cyber Security News
  2. Nov 7, 2026Shodan snapshot matched exposed AI pentest framework services. · GBHackers
  3. Nov 9, 2026GitGuardian reported internet-reachable dual-use AI frameworks. · Cyber Security News

What each outlet adds

beyond the shared facts
  • GBHackersFive framework families, 13 pattern-reusing forks, and Cairn and HexStrike defaults.
  • Cyber Security NewsMatches do not prove crime; detections published, not a target list.
Products
ARTEXPentAGIRedAmonAgent ZeroPojunCybermesXalgorixAIRecon
Organizations
GitGuardian

Coverage

oldest first · one row per article · UTC
  1. · 9h ago GBHackersFirst report

    Researchers map 45 AI hacking frameworks and exposed consoles

    Shodan matches on November 7 included 1,428 ARTEX-family services; 11 of 41 fingerprinted tools expose a web UI by default.

  2. · 3h ago Cyber Security News

    ARTEX, PentAGI and Agent Zero consoles found open on the internet

    A November 7 Shodan snapshot matched 1,428 ARTEX, 419 PentAGI and 173 Agent Zero services; 39 Agent Zero consoles had no login.