OpenWar is an open-source AI harness for cybersecurity researchers and CTF competitors. Draw on a community-driven repository of skills that keeps growing, then turn a multi-agent pipeline loose to attack at scale.
OpenWar empowers the future of cybersecurity via hands-on demonstrations of agentic warfare. Observe attacks-at-scale, modular and evolving skill repositories, and increased model-harness dynamics as large AI providers bolster their LLMs.
packets ▸ on the wire
02 ▸ ATTACKS-AT-SCALE
One orchestrator. A swarm of workers.
The workhorse lives in the Orchestration Layer. Guided by the MITRE ATT&CK® framework, the Orchestrator takes an objective, breaks it into bite-sized subtasks, and deploys Workers in parallel. Each one carries the full tool catalog and sees its task through.
orchestrator
$ openwar status
worker#1 · recon● running
worker#2 · initial-acc● awaiting
worker#3 · cred-access● running
3 active · 2 idle · budget 40
orchestrator>
worker#1● live
$ nmap -sV -p- 10.10.11.0/24
open 22/tcp ssh OpenSSH 8.9
open 80/tcp http nginx 1.25
open 445/tcp smb signing off
host 10.10.11.7 is up
worker#2● live
$ sqlmap --batch --dump -D app
[INFO] testing boolean-blind
[INFO] parameter id injectable
[INFO] retrieved: admin
dumped 38 rows from users
worker#3● live
$ hashcat -m 1000 ntlm.txt
approaching final keyspace
Speed.#1: 4823.1 MH/s
recovered 1/1 hashes
admin:Summer2026!
03 ▸ EXPLOSIVE GROWTH
A repository that never stops growing.
Every operator who writes a skill can publish it to WarHub. Pull down a fresh exploit chain, a recon routine, or a privesc trick the moment someone ships it. The catalog compounds, so OpenWar gets sharper every single day without a single line of your own code.
warhub — armory● live
04 ▸ FRAMEWORK METHODOLOGY
Recon to Impact, the whole framework.
OpenWar leverages the MITRE ATT&CK® framework to direct and organize its attacks, blending modern hacking biology with agentic attacking.
{{ ph.n }}{{ ph.tag }}
{{ ph.name }}
{{ ph.desc }}
good luck.
OpenWar — autonomous offensive-security harness · by Jackalint
⚠ authorized testing only. You are responsible for what you point it at.