Sikaworld1990/gemma3-12B-hereticx-sikaworld-ltx-2
Updated • 12
🤝 Open to Collab
Cody Baker
fullsend-global
·
AI & ML interests
None yet
Recent Activity
liked a model about 10 hours ago
Sikaworld1990/gemma3-12B-hereticx-sikaworld-ltx-2 liked a Space about 23 hours ago
multimodalart/wan2-1-fast liked a Space about 24 hours ago
M3st3rJ4k3l/FLUX.2-Klein-Multi-LoRAOrganizations
None yet
liked a
model about 10 hours ago
liked a
Space about 23 hours ago
liked a
Space about 24 hours ago
liked 2
models 1 day ago
liked 3
Spaces 2 days ago
upvoted an article 2 days ago
Article
Chitos: From Detection to Proof — An Autonomous Security AI That Actually Exploits
FINAL-Bench
• • 19 liked 5
models 3 days ago
Tesslate/OmniCoder-9B-GGUF
9B • Updated • 10.1k • 319
Tesslate/OmniCoder-9B
Text Generation • 9B • Updated • 2.65k • 653
Tesslate/UIGEN-FX-4B-Preview
Text Generation • 4B • Updated • 87 • • 18
audreyt/CyberNeurova-DeepSeek-V4-Flash-abliterated-GGUF
Text Generation • 284B • Updated • 65.8k • 11
nvidia/Qwen3.6-27B-NVFP4
Text Generation • 18B • Updated • 27.2k • 208
reacted to SeaWolf-AI's post with 🧠🔥 3 days ago
Post
5008
🐯 Chitos — The Security Scanner That Actually Proves It
Most security scanners hand you a suspect list and walk away. That gap between detection and proof is where attackers live — and it's exactly the gap that Chitos was built to close.
Chitos is the successor to Mythos, a static analyzer built for quick code health checks. Mythos was good at pattern matching — spotting dangerous sinks, mapping CWEs, producing readable reports. But static analysis has a structural ceiling. A rule that sees eval(user_input) can tell you that looks dangerous. It cannot tell you whether the input is reachable, whether sanitization three layers up covers this path, or whether there's a live exploit chain for your exact framework version. Chitos was built to answer those questions.
🔍 Phase 1 applies 50 language-agnostic rules across Python, JavaScript, Go, Java, C/C++, Rust, PHP, YAML and more — covering injection sinks, deserialization gadgets, credential leakage, broken crypto, and prototype pollution. Every candidate is re-verified before reaching the report. Findings that can't be substantiated are excluded, not handed to you as noise.
🔬 Phase 2 dispatches an autonomous web-search agent to hunt live CVE databases, exploit advisories, and public PoC repositories. It formulates hypotheses, verifies them, and synthesizes a structured threat narrative. This phase needs a user-supplied Claude API key — Phases 1 and 3 run entirely free.
🎯 Phase 3 is where Chitos diverges from everything else. Against targets you own or are authorized to test, it fires real payloads — XSS, SQLi, path traversal, command injection — mutates on block, captures hard evidence, and connects every proven finding into a kill-chain showing which vulnerabilities to remediate first.
No installation. No account. No code sent to third-party APIs.
Article: https://huggingface.co/blog/FINAL-Bench/chitos
Try it now 👉 https://chitos.vidraft.net
Most security scanners hand you a suspect list and walk away. That gap between detection and proof is where attackers live — and it's exactly the gap that Chitos was built to close.
Chitos is the successor to Mythos, a static analyzer built for quick code health checks. Mythos was good at pattern matching — spotting dangerous sinks, mapping CWEs, producing readable reports. But static analysis has a structural ceiling. A rule that sees eval(user_input) can tell you that looks dangerous. It cannot tell you whether the input is reachable, whether sanitization three layers up covers this path, or whether there's a live exploit chain for your exact framework version. Chitos was built to answer those questions.
🔍 Phase 1 applies 50 language-agnostic rules across Python, JavaScript, Go, Java, C/C++, Rust, PHP, YAML and more — covering injection sinks, deserialization gadgets, credential leakage, broken crypto, and prototype pollution. Every candidate is re-verified before reaching the report. Findings that can't be substantiated are excluded, not handed to you as noise.
🔬 Phase 2 dispatches an autonomous web-search agent to hunt live CVE databases, exploit advisories, and public PoC repositories. It formulates hypotheses, verifies them, and synthesizes a structured threat narrative. This phase needs a user-supplied Claude API key — Phases 1 and 3 run entirely free.
🎯 Phase 3 is where Chitos diverges from everything else. Against targets you own or are authorized to test, it fires real payloads — XSS, SQLi, path traversal, command injection — mutates on block, captures hard evidence, and connects every proven finding into a kill-chain showing which vulnerabilities to remediate first.
No installation. No account. No code sent to third-party APIs.
Article: https://huggingface.co/blog/FINAL-Bench/chitos
Try it now 👉 https://chitos.vidraft.net
- 4 replies
liked 4
models 3 days ago
