The one half of pentesting small models are good at

Thu, 15 Oct 2026 00:00:00 +0000

Part of my GORED series, where I point small local language models at my own web apps and measure, honestly, whether they can break them. The earlier posts are a pile of zeros on the exploit side. This one is the part that worked, and it changed how I think about where these models belong. The harness is t0ul/GORED. Every number comes from a kept, hash-verified trace.

Recon on t0ul

The one half of pentesting small models are good at