Arxiis · Command & Control

Mission

STANDBY

Status

Awaiting orders

Elapsed

00:00:00

API

0

Findings

0

Quality

--

LOW

Backend

— checking —

AI Backbone

—

Local Agents

—

⌨ TOOL LAUNCHPAD

0 fires this session · driven by live scan:progress

Full arsenal runs by default — every installed tool is available to the agent. Keys below are the whole catalog; they light in real time as tools actually fire. Honest: a key with no fire stays dark, and "installed" comes only from preflight.

catalog installed not installed firing / fired ★ armed (advisory)

Subfinder—

Nmap—

Naabu—

httpx—

Katana—

FFUF—

Gobuster—

Nikto—

WhatWeb—

Nuclei—

Dalfox—

SQLMap—

Gitleaks—

TruffleHog—

Semgrep—

Trivy—

Hydra—

BloodHound—

curl—

RECENT FIRES

No tool fires observed yet.

⛓ KILL-CHAIN PHASE

STANDBY — NO PHASE ACTIVE

◎ PERIMETER

perimeter
· adversary view

posture
unset

No perimeter data

Point Arxiis at a target to populate the perimeter — every authorized and discovered host appears here.

⚓ SITREP

STANDBY

Awaiting orders — point at a target and engage.

▌ SYSTEM EVENTS

0

— system events stream (live from the backend) —

🧠

LIVE REASONING STREAM

The agent's own reasoning, in its own words — ReAct: reason → tool call → observe. Not code; the agent never writes or runs code itself.

0 steps

No reasoning events yet. Once a hunt is running, each operator's "why I'm about to do X" will stream here live, followed by the tool call it led to and the observation that came back.

Mission Spine

Mission readiness — flight recorder, target intake, and authorization.

Flight Recorderstandby

Evidence Workbench0 items

Work Order Board0 open

Target Intakescope

Training Rangelocal safe

Scope Receipts0 pending

No pending scope receipts.

Authorize Targetno active authorization

Grant a time-boxed authorization for one target before Hunt runs against it — a real request→authorize receipt with a live TTL countdown, not a toggle.

PLINY CODE OPS LAYER

Slash grammar, route preview, agent lanes, memory, computer-use, and evidence gates folded into the original Arxiis war room.

104 catalog tools -- wired -- installed 20 slash cmds agent memory egress gated

Scopeneeds contract

Targetlocal-lab fallback

Toolschecking arsenal

Modechecking backend

Agentslanes preview only

Evidenceledger required

Receiptpending request

🔐 Tool Approvals & Spicy-Action Audit0 events

Intrusive / credential / dangerous tools stay inert until approved — approve once, then free. Credential & dangerous actions warn on every run; every gated decision is audited.

No tools approved yet.

Waiting for gated tool calls…

Specialist Swarmlive · ledger0 active

Specialist Swarm — Live Boardlive · pack board no swarm active

Each card is one deployed operator's live heartbeat. Leads are the swarm's working hypotheses — chips show status, not proof; only confirmed is verified.

No swarm active — Engage to deploy operators.

Swarm Cognition Loopderived · engine not livewarming

Reasoning Buslive · agent + verify-gate busno traffic

Capability Preflightnot run

Tool Adapter Forgenot synced

Evidence Ledger0 items

Hypothesis Graph0 nodes

Hunt Queue0 tasks

Watch Loopstandby

The FixerWOLF standby

Findings / Retestlive · /api/findings + SSE0 verified

Repro Packs0 packs

Pressure Paths0 paths

Next Movesno runbook

Learning Capsuleproposal gate

Mission Contractplain text -> route

Agent Lanesno operators deployed

Codexcode, repo audit, patch planidle

Claudelong-context review, report proseidle

Hermeslocal tools, shell, rangesidle

Browservisual checks and app smoke testsidle

No operators deployed — Engage to spawn.

Evidence Gatesbefore claims harden

Scopeauthorize an owned targetS3R4PH1M

Proofno artifact, log, or diff yetledger

Judgeno claims to judge yetJUDG3

Receiptactive tools require approvalscopeguard

Rangeoptional replay when neededCRUCIBLE

👥

0

🎯

0

🔑

NO

🛠️

OPT

Operators

0

Config

Quality ACTIVE

0

OK

0

REV

0

REJ

0

ESC

0

Targets

0

Creds

0

Access

0/5

Phases

Findings & Loot (0)

ALL CRIT HIGH MED LOW CREDS |

Severity

Type

Finding

Target

Phase

No findings yet. Engage a mission to discover vulnerabilities.

Enter Launch Esc Abort D Deploy All K Clear / Search

Attack Maplive · tool-verified · from findings

The REAL attack map — nodes are this mission's actual findings; a "derived" edge means a concrete artifact an earlier finding surfaced reappears in a later command (a traceable dependency), "sequence" is phase/time ordering. Auto-loads as findings land. SPECTRA (synthetic) is a separate client-side sketch — clearly labeled, never confirmed findings.

no graph

No findings yet — the real attack map populates automatically as this mission produces findings. Built ONLY from actual findings/evidence, never synthetic.

Live Scan

Agent Progress

Operators

0 active

Task Queue

0 tasks

Reasoning And Tool Stream

0 events

ScopeGuard

Scope Receipts

Approval Requests

0 receipts

0

Units Active

0

Tools Ready

🚨

0

Critical

⚠️

0

High

ℹ️

0

Medium

🔑

0

Credentials

🔓 Findings

No findings yet. Start a mission to collect evidence.

◉

ARSENAL CONTROL

Full arsenal runs by default — every tool lives in the Tool Launchpad above, lighting up as it fires

85+ CATALOG

0 ACTIVE

14 DOMAINS

Sensor Posture Standby Arm a few tools to shape the hunt profile.

Visible Set All tools Scanning catalog...

Coverage 0 lanes Mix domains for cross-boundary hunts.

Handoff No operator Pick an operator before assignment.

◉ ACTIVE LOADOUT — advisory in full-arsenal mode · every installed tool runs regardless. Use the Tool Launchpad above to watch tools fire.

Scopereceipt gate

Breadthneeds domains

Proofneeds validator

Chainneeds composer

No tools assigned - click tools below to add to the loadout

💻 Terminallocal demo shell

Arxiis Shell

Arxiis Framework v1.0.0

Type 'help' for commands

⧉ Replicable Command Logexact commands agents ran — copy & re-run

0

No commands run yet — launch a mission.

🌐 Web Exploitation

--

XBOW + HTB Cyber Apocalypse 2024

[HTB] KORP Terminal - SQLi --

[CSAW] Blind SQL Injection --

[HTB] Testimonial - Stored XSS --

[XBOW] SSRF to Cloud Metadata --

[HTB] Labyrinth Linguist - SSTI --

[XBOW] Broken Access Control --

[HTB] LockTalk - JWT Bypass --

[HTB] TimeKORP - Cmd Injection --

[HTB] SerialFlow - Deserialization --

[HTB] Percetron - Multi-Vector --

💥 Binary Exploitation

--

Cybench HTB PWN + CSAW PWN

[HTB] Tutorial - Stack Overflow --

[HTB] Writing on Wall - Format String --

[HTB] Rocket Blaster XXX - ROP --

[HTB] Death Note - Heap Exploit --

[CSAW] unlimited_subway - Int Overflow --

[HTB] Maze of Mist - Advanced ROP --

[HTB] Oracle - Heap + ROP --

🔐 Cryptography

--

HTB + CSAW Crypto Challenges

[HTB] Dynastic - Classical Cipher --

[HTB] Primary Knowledge - RSA --

[HTB] Iced Tea - Block Cipher --

[HTB] Blunt - Diffie-Hellman --

[HTB] Arranged - Lattice Crypto --

[HTB] Partial Tenacity - RSA Partial --

[CSAW] Textbook-RSA --

[HTB] ROT128 - Advanced LFSR --

🔬 Reverse Engineering

--

HTB + CSAW Reversing Challenges

[HTB] BoxCutter - Static Analysis --

[HTB] PackedAway - Unpacking --

[HTB] Crushing - Algorithm Reversal --

[HTB] FollowThePath - Control Flow --

[CSAW] Ransomware Analysis --

[HTB] QuickScan - .NET Reversing --

[HTB] FlecksOfGold - VM Protection --

[HTB] MazeOfPower - Multi-Layer --

🔍 Forensics

--

HTB + CSAW DFIR Challenges

[HTB] An Unusual Sighting - Memory --

[HTB] It Has Begun - Log Analysis --

[HTB] Fake Boost - Malware --

[HTB] Persue The Tracks - Network --

[HTB] Data Siege - Disk Forensics --

[HTB] Phreaky - Steganography --

[HTB] Confinement - Ransomware --

[HTB] Game Invitation - Phishing --

[HTB] Oblique Final - Advanced IR --

🤖 Autonomous Operations

--

Arxiis Multi-Agent + XBOW-style tasks

⚙️ Kill Chain Coverage --

⚙️ Multi-Agent Swarm --

⚙️ LLM API Operational --

🔴 Attack Plan Generation --

🔴 Multi-Agent Coordination --

🔴 Real-Time Adaptation --

🛡️ OWASP Top 10

--

OWASP 2021 Top 10 Web Application Security Risks

A01 Broken Access Control --

A02 Cryptographic Failures --

A03 Injection --

A04 Insecure Design --

A05 Security Misconfiguration --

A06 Vulnerable Components --

A07 Auth Failures --

A08 Software Integrity Failures --

A09 Logging & Monitoring --

A10 SSRF --

⚔️ MITRE ATT&CK

--

Adversarial Tactics, Techniques & Common Knowledge

TA0001 Initial Access --

TA0002 Execution --

TA0003 Persistence --

TA0004 Privilege Escalation --

TA0005 Defense Evasion --

TA0006 Credential Access --

TA0007 Discovery --

TA0008 Lateral Movement --

TA0010 Exfiltration --

TA0011 Command & Control --

🐛 CWE Top 25

--

Most Dangerous Software Weaknesses (2024)

CWE-787 Out-of-Bounds Write --

CWE-79 Cross-Site Scripting --

CWE-89 SQL Injection --

CWE-416 Use After Free --

CWE-78 OS Command Injection --

CWE-20 Input Validation --

CWE-125 Out-of-Bounds Read --

CWE-22 Path Traversal --

CWE-352 Cross-Site Request Forgery --

CWE-434 Unrestricted File Upload --

📊 Overall Results

🏆

--

Overall Score

✅

--

Tests Passed

⏱️

--

Avg Time (ms)

🎯

--

Accuracy

Web

Binary

Crypto

Reverse

Forensics

Auto Ops

OWASP

MITRE

CWE

⚠ Local simulation / illustrative. The container controls and challenge "solves" here do not touch a live Docker daemon or a real flag server — flags are format-checked, not verified against a live target. For measured, live-exploit-verified results use OBSIDIVM and the benchmarks.

🚀 Quick Setup

Get started with execution-based CTF benchmarks in minutes. Requires Docker installed locally.

1️⃣ Check Docker Unknown

Verify Docker daemon is running and accessible.

2️⃣ Build Images Not Built

Build Docker images for CTF challenges.

3️⃣ Launch Range Offline

Start all challenge containers.

📋 Manual Commands (run in terminal)

cd ctf && docker-compose build && docker-compose up -d

🎯 Challenge Browser

📊 Range Status

Containers Running 0

Challenges Solved 0 / 8

Total Points 0 / 1450

Agent Success Rate --%

🤖 Agent Execution

Agent/Operator

Model

Time Limit (per challenge)

Max Attempts

📈 Results & History

Challenge	Category	Agent	Time	Status	Flag
🏁 No execution results yet. Run the benchmark to see agent performance.

★ THE ADMIRAL — Autonomous Op Orchestrator

STANDING BY

Give the Admiral a high-level directive and it will autonomously plan the entire operation — identifying targets, allocating operators, setting OPSEC levels, and executing the full kill chain. No manual configuration needed.

Directive

OPSEC Level

Urgency

Scope Hints (Optional)

Constraints (Optional)

Operation Plan

Admiral's Intent

UNROUTED

Mission Gate

WAIT

Targets

Force Allocation

Objectives

Rules of Engagement

Hunt Lanes

Specialist Work Orders

Evidence Contract

Critic & Tool Route

⚓ Admiral Self-Critique

no sitrep yet

No plan yet — the Admiral's adversarial self-critique of its own plan appears here once a plan is generated.

Admiral's Strategic Rationale

Loading self-improvement loops…

🔑 API Keys

OpenRouter API Key

Get key from openrouter.ai/keys

Venice API Key

OpenAI-compatible, privacy-focused. Get key from venice.ai/settings/api

Anthropic API Key

Stored, but direct-LLM currently routes via OpenRouter or a connected agent — not wired to this key yet.

OpenAI API Key

Stored, but direct-LLM currently routes via OpenRouter or a connected agent — not wired to this key yet.

🔌 Local Agents

Enlist agents you've already authed on this machine — no API keys needed. Arxiis detects each CLI and can drive it as an operator. Tick several and connect them all at once.

🔌 Connect Local Agents

— scanning —

Detecting local agents…

live-ping on connect

🤖 Model Selection

Select your preferred AI model for agent operations

Loading models...

🔄 Fallback Model Auto-retries with this model if the primary fails (refusal, timeout, error)

🖥️ API Server

URL of your running Arxiis API server (start with npm run server)

Default: http://localhost:3333 — change if your server runs on a different host/port

⚠️ Data

Config Library

Saved Configurations

0 configs saved • Default: None

📊 Current Configuration

Not benchmarked

Run a benchmark to see current config performance

💾 Saved Configurations

💾

No saved configurations yet

Run benchmarks and save your best performing configs

Turn the AI coding agent you already run into a red team.

🌩️ Coverage by domain

A domain lights up only when there's a benchmark behind it. Greyed tiles are in development.

🕸️

Web ✅

Apps, APIs, auth flows, OWASP Top 10. XBEN 90.1% pass@1.

📂

Code ✅

White-box source audits. Held-out CVE-Zero: single-agent 8/10 exact file/line/CWE, 10/10 found (7 languages).

🚩

CTF ✅

Wargames, ranges, challenges. Cybench 23/40 hint-free.

🔌

Network / Infra ✅

Live recon engine (nmap/DNS/HTTP). Lateral + privesc experimental.

🤖

Embedded / IoT / OT ✅

Firmware, robotics, ICS/SCADA. Coordinated-disclosure CVE pipeline live.

📦

Supply chain ⚠️

Dependency audits, install-without-confirmation. Dedicated class; real held-out hit.

💰

Blockchain ⚠️

Smart contracts, DeFi, Solidity. Reproduction only — not novel discovery yet.

☁️

Cloud COMING SOON

AWS/GCP/Azure misconfig, IAM, serverless.

📱

Mobile COMING SOON

Android / iOS app security.

🏢

Identity / AD COMING SOON

Kerberos, pass-the-hash, Active Directory.

🔐

Binary / RE COMING SOON

Overflows, ROP, exploit dev. Needs specialized tooling.

🧠

LLM Backbone

Multiple AI providers: OpenRouter, Anthropic, OpenAI, or local models via Ollama.

🤖

Autonomous Operatives

8 specialized AI agents aligned with MITRE ATT&CK kill chain phases. Click any operative below to view + edit its prompt, tools, and config.

🎯

Mission Control

Coordinate complex operations with intelligent task delegation.

🔐

Evidence Vault

Secure storage for findings, credentials, and attack paths.

👻

OPSEC Control

Configurable stealth levels from quiet recon to aggressive exploitation.

🛠️

Tool Arsenal

Extensible tool registry with automatic capability discovery.

🚀 Quick Start

TypeScript

import { Arxiis } from 't3mp3st';

// Initialize
const tempest = new Arxiis({
  provider: 'openrouter',
  model: 'anthropic/claude-opus-4.6'
});

// Add target & spawn operators
tempest.target.addHost('192.168.1.100');
tempest.operators.spawn('recon');
tempest.operators.spawn('scanner');

// Launch
await tempest.start();
                            

🤖 Operator Archetypes

Operator	Role	Phase
🔍 Recon	Intelligence & OSINT	Reconnaissance
📡 Scanner	Network scanning	Reconnaissance
💥 Exploiter	Vulnerability exploitation	Exploitation
🥷 Infiltrator	Lateral movement	Installation
📤 Exfiltrator	Data extraction	Actions
👻 Ghost	Anti-forensics	All
🎖️ Coordinator	Orchestration	All
📊 Analyst	Reporting	All