Threat Intelligence · Since MMXXVIA SANS SEC590 ArtifactIssue №1

Attack like
a machine.
Answer for it
like a human.

The beat we cover

Six surfaces. One operator.

The attack surface SEC590 teaches you to assess with autonomous agents — and the territory NorseStar's fiction pretends to defend.

01 / 02

Recon & Infrastructure

Outside-in discovery and the exposed edge, mapped the way an agent would.

03 / 04

Web & Supply Chain

Applications, build systems, and the GitHub Actions long game.

05 / 06

AI Systems & Humans

The newest soft target: chatbots, gateways, and the people around them.

The course

SEC590

AI-Driven Penetration Testing. Five days, fifty-fifty lecture and labs. Students enter knowing little about AI and leave building custom pentest agents and supervising autonomous operations.

Day 1Attack surfaces for AI pentesting
Day 2AI pentest harnesses
Day 3Getting it right
Day 4Autonomous operations
Day 5Supervise & govern
Resources · the ledger

The AI Pentest Tool Index

Updated Weekly ● Live

A curated inventory of the open-source AI offensive landscape, drawn each week from the SEC590 research pipeline.

ToolCategoryStarsΔ 7 Days
HexStrike-AIMCP · 150+ tools8.9k+412
StrixAutonomous · web6.1k+288
PentestGPTGuided assistant9.4k+77
CAIFramework · REPL3.7k+154