Autonomous Penetration Testing: Solving Capture-the-Flag Challenges with LLMs

Isabelle Bakker, John Hastings

This study evaluates the ability of GPT-4o to autonomously solve beginner-level offensive security tasks by connecting the model to OverTheWire's Bandit capture-the-flag game. Of t…