From 7cc2f07ea58649bed55e5901e742a6a92f11c29b Mon Sep 17 00:00:00 2001 From: Orhan Yildirim Date: Mon, 31 Aug 2026 09:15:30 -0400 Subject: [PATCH 1/2] README: refresh hero tagline for accuracy and discoverability Replace the unverifiable 'first open-source AI agent' claim (several comparable open-source AI pentesting agents predate this repo) with a tagline centered on the genuine differentiator: provider-agnostic, zero lock-in. Also surfaces 'AI red teaming' phrasing alongside 'penetration testing', matching current search and GitHub-topic language in this space. --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index f25d9ee208..6d1c4304ff 100644 --- a/README.md +++ b/README.md @@ -32,10 +32,10 @@

-

The first open-source AI agent built for offensive security.

+

The provider-agnostic AI agent for offensive security.

- Automated penetration testing from your terminal — plug in your Claude, GPT, or any LLM subscription
+ Autonomous penetration testing and AI red teaming from your terminal — plug in your Claude, GPT, or any LLM subscription
and turn it into an autonomous red team agent with 13+ specialized agents, 7,600+ security skills, and 120+ OWASP test cases.
150+ AI providers • 5,300+ models • 56+ built-in tools • 176+ MCP tools

@@ -326,7 +326,7 @@ All open source. All installable with `npx`. Plug them into CyberStrike or use t CyberStrike agents have direct access to **56+ tools** without any external dependencies: | Category | Tools | -| --------------------- | ----------------------------------------------------------------------------------- | +| --------------------- | ------------------------------------------------------------------------------------- | | **Execution** | Shell (bash), file read/write/edit/patch, directory listing, batch operations | | **Discovery** | Web fetch, web search, code search, glob, grep, intel gathering | | **Offensive** | HackBrowser, attack script execution, vulnerability reporting & triage | @@ -345,7 +345,7 @@ Plus a **plugin SDK** with 15+ hook types (tool interception, message transforma CyberStrike includes built-in post-exploitation capabilities across multiple platforms — no external tools required. | Platform | Capabilities | -| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **macOS** | Chrome credential extraction, Keychain dumping, keylogging, TCC bypass, GateKeeper bypass, XProtect checks, SSH key extraction, DTrace system tracing | | **Windows** | Post-exploitation hooks for privilege escalation and persistence | | **Linux/eBPF** | 29 kernel-level scripts — process execution monitoring, SSL/TLS sniffing, keystroke logging, namespace manipulation detection, rootkit detection, process/file/connection hiding | @@ -412,7 +412,7 @@ Read the [Contributing Guide](./CONTRIBUTING.md) before submitting a PR. All con CyberStrike is the core platform. These MCP servers extend its capabilities: | Project | Domain | Tools | -| ---------------------------------------------------------------------- | --------------------------------------- | ----------------------------------------------------------- | +| ---------------------------------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------- | | **CyberStrike** | **Autonomous offensive security agent** | **13+ agents, 56+ tools, 7,600+ skills, 150+ AI providers** | | [cloud-audit-mcp](https://github.com/badchars/cloud-audit-mcp) | Cloud security (AWS/Azure/GCP) | 38 tools, 60+ checks | | [github-security-mcp](https://github.com/badchars/github-security-mcp) | GitHub security posture | 39 tools, 45 checks | From ffcdfd0f379b22aad7b74cbf6f834cf4d646aec3 Mon Sep 17 00:00:00 2001 From: Orhan Yildirim Date: Mon, 31 Aug 2026 09:17:29 -0400 Subject: [PATCH 2/2] Fix stray whitespace from previous commit, keep diff to hero section only --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 6d1c4304ff..09bfd310b2 100644 --- a/README.md +++ b/README.md @@ -326,7 +326,7 @@ All open source. All installable with `npx`. Plug them into CyberStrike or use t CyberStrike agents have direct access to **56+ tools** without any external dependencies: | Category | Tools | -| --------------------- | ------------------------------------------------------------------------------------- | +| --------------------- | ----------------------------------------------------------------------------------- | | **Execution** | Shell (bash), file read/write/edit/patch, directory listing, batch operations | | **Discovery** | Web fetch, web search, code search, glob, grep, intel gathering | | **Offensive** | HackBrowser, attack script execution, vulnerability reporting & triage | @@ -345,7 +345,7 @@ Plus a **plugin SDK** with 15+ hook types (tool interception, message transforma CyberStrike includes built-in post-exploitation capabilities across multiple platforms — no external tools required. | Platform | Capabilities | -| -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **macOS** | Chrome credential extraction, Keychain dumping, keylogging, TCC bypass, GateKeeper bypass, XProtect checks, SSH key extraction, DTrace system tracing | | **Windows** | Post-exploitation hooks for privilege escalation and persistence | | **Linux/eBPF** | 29 kernel-level scripts — process execution monitoring, SSL/TLS sniffing, keystroke logging, namespace manipulation detection, rootkit detection, process/file/connection hiding | @@ -412,7 +412,7 @@ Read the [Contributing Guide](./CONTRIBUTING.md) before submitting a PR. All con CyberStrike is the core platform. These MCP servers extend its capabilities: | Project | Domain | Tools | -| ---------------------------------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------- | +| ---------------------------------------------------------------------- | --------------------------------------- | ----------------------------------------------------------- | | **CyberStrike** | **Autonomous offensive security agent** | **13+ agents, 56+ tools, 7,600+ skills, 150+ AI providers** | | [cloud-audit-mcp](https://github.com/badchars/cloud-audit-mcp) | Cloud security (AWS/Azure/GCP) | 38 tools, 60+ checks | | [github-security-mcp](https://github.com/badchars/github-security-mcp) | GitHub security posture | 39 tools, 45 checks |