CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·3d ago · 9 min readMy AI pentest agent reported 23 root shells. It had actually popped zero. I've been building an autonomous penetration-testing agent — an LLM driving real tools (nmap, masscan, hydra, Metasploit, searchsploit) around a loop: recon a target, pick an exploit, fire it, decide 00
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·6d ago · 2 min readHALO v2.7: One Registry, 29 Tools, and a More Reliable MCP ArchitectureI just finished a major refactor of HALO, my open source AI-powered security agent. The biggest change wasn’t adding another feature. It was simplifying the architecture. Instead of scattering tool de00
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·Jul 18 · 7 min readFrom Tool-Runner to Decision Engine: Upgrading an Autonomous Security Agent's HarnessYesterday I did something that sounds like paperwork and is actually the whole point: I graduated a batch of next-gen modules out of a staging package and into the running harness of HALO, the local, 00
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·Jul 13 · 4 min readAnatomy of a Pentest Dropbox: How Remote Internal Assessments Actually WorkWhen people imagine a penetration test, they picture someone on-site — badge on a lanyard, laptop open in a conference room. That still happens, but a large share of internal assessments now run remot00
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·Jul 12 · 4 min readOnline vs. Offline Password Attacks: A Field Guide Password attacks are one of the first things people learn in offensive security, and one of the most commonly muddled. The confusion usually comes down to a single distinction that determines which to00
