InfoSecBulletin Cybersecurity for mankind
A new open-source project named CyberStrike aims to be the first AI tool made for offensive security. It can turn any subscription of Claude, GPT, or LLM into an independent red-team operator.
CyberStrike is not just a chatbot. It works as a tool that runs in a terminal. It helps find flaws and weaknesses, exploits them, and creates reports without needing a person to guide it all the time. This makes it useful for penetration testers, bug bounty hunters, and security teams wanting to improve their assessments.
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
“PentesterFlow” AI Automation Tool for Penetration Testers and Bug Hunters
Getting started requires a single command, npm i -g @cyberstrike-io/cyberstrike@latest && cyberstrike, which launches a terminal interface that asks for an LLM provider and API key on first run.
The real change is in what the developers call the intelligence layer. This system adds OWASP testing methods, vulnerability patterns, and attack-chain reasoning to every model interaction.
This means the underlying AI does not need built-in security knowledge; CyberStrike provides security knowledge by organizing data, monitoring context, detecting providers automatically, and managing tools smartly.
The platform has more than 150 AI providers and 5,300 models. This includes Anthropic, OpenAI, Google, Amazon Bedrock, Azure, and offline options like Ollama and LM Studio for secure environments.
CyberStrike AI-Powered Security Platform
CyberStrike ships with 13 or more specific agents. These include special tools for testing web applications based on the OWASP WSTG guide, mobile testing that follows MASTG and MASVS, cloud security based on CIS benchmarks, and checking internal networks for Active Directory and lateral movement.
There are over 7,600 security skill files with Ed25519 signatures. They cover attack methods like JWT abuse, SSRF, SSTI, and GraphQL exploitation. They also include post-exploitation techniques for AWS, Azure, Kubernetes, Windows, and macOS.
A special part is the included Chromium browser named HackBrowser. It records live HTTP traffic while testers manually explore a target or automatically scan it using different accounts.
This traffic supports eight parallel proxy sub-testers. They look for problems like IDOR, bypassing authorization, mass assignment, and errors in business logic. Each tester uses a three-step confirmation method to prevent wrong alerts.
The Bolt part of the platform lets security tools work on remote servers instead of a local laptop. It uses Ed25519 key pairs to manage many toolkits and attack points from one terminal.
CyberStrike works with an MCP system that has 176 extra tools. These tools help with cloud checks, GitHub security, CVE information, and OSINT searches. It also has a web interface that can be accessed remotely using Cloudflare Tunnel, ensuring no open ports and secure encryption.
CyberStrike uses the AGPL-3.0 license. It is free for personal and open-source use. There is a paid license available for businesses. You can install it using npm, Homebrew, Scoop, or a curl script. This makes it easy to set up on macOS, Windows, and Linux.
The project clearly says it is only for approved security tests. It follows its ethical use rules and code of behavior while welcoming community support for agents, skills, and MCP servers.
