VULNERATOR AI

Summary from the TLDR InfoSec newsletter

Vulnerator AI runs a pentest as an OODA loop: Nous Research's Hermes agent picks the next tool and runs it on a Kali container through MCP, with nmap, nuclei, ffuf, sqlmap, and Prowler on hand. Unlike most agentic pentest frameworks, it drops the orchestration core, REST API, and UI. That leaves four containers, including a headless Playwright browser for web testing and an MCP front door that lets Claude Code or other clients start, steer, and stop runs. Mistral Large 4 on OpenRouter drives the loop by default and falls back to GLM-5.3 Flash, and local Ollama inference is documented as an option.