LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks

Geer D, Harthorne J (2002) Penetration testing: a duet. In: 18th Annual Computer Security Applications Conference, 2002. Proceedings., pp 185–195, DOI

2002

Earlier work this paper cites.

Bishop M (2007) About penetration testing. IEEE Security & Privacy 5(6):84–87, DOI

2007

Earlier work this paper cites.

Sommer R, Paxson V (2010) Outside the closed world: On using machine learning for network intrusion detection. In: 2010 IEEE symposium on security and privacy, IEEE, pp 305–316

2010

Earlier work this paper cites.

Weidman G (2014) Penetration testing: a hands-on introduction to hacking. No starch press

2014

Earlier work this paper cites.

Shah S, Mehtre BM (2015) An overview of vulnerability assessment and penetration testing techniques. Journal of Computer Virology and Hacking Techniques 11:27–49

2015

Earlier work this paper cites.

Vaswani A, Shazeer N, Parmar N, Uszkoreit J, Jones L, Gomez AN, Kaiser Ł, Polosukhin I (2017) Attention is all you need. Advances in neural information processing systems 30

2017

Earlier work this paper cites.

Harang R, Ducau FN (2018) Measuring the speed of the red queen’s race. BlackHat: Las Vegas, NV, USA

2018

Earlier work this paper cites.

Shebli HMZA, Beheshti BD (2018) A study on penetration testing process and tools. In: 2018 IEEE Long Island Systems, Applications and Technology Conference (LISAT), pp 1–7, DOI

2018

Earlier work this paper cites.

Singh A, Jaswal N, Agarwal M, Teixeira D (2018) Metasploit Penetration Testing Cookbook: Evade antiviruses, bypass firewalls, and exploit complex environments with the most widely used penetration testing framework. Packt Publishing Ltd

2018

Earlier work this paper cites.

Strom BE, Applebaum A, Miller DP, Nickels KC, Pennington AG, Thomas CB (2018) Mitre att&ck: Design and philosophy. In: Technical report, The MITRE Corporation

2018

Earlier work this paper cites.

Lewis P, Perez E, Piktus A, Petroni F, Karpukhin V, Goyal N, Küttler H, Lewis M, Yih Wt, Rocktäschel T, Riedel S, Kiela D (2020a) Retrieval-augmented generation for knowledge-intensive nlp tasks. In: Larochelle H, Ranzato M, Hadsell R, Balcan M, Lin H (eds) Advances in Neural Information Processing Systems, Curran Associates, Inc., vol 33, pp 9459–9474, URL

2020

Earlier work this paper cites.

Sarker IH, Kayes A, Badsha S, Alqahtani H, Watters P, Ng A (2020) Cybersecurity data science: an overview from machine learning perspective. Journal of Big data 7:1–29

2020

Earlier work this paper cites.

Bender EM, Gebru T, McMillan-Major A, Shmitchell S (2021) On the dangers of stochastic parrots: Can language models be too big? In: Proceedings of the 2021 ACM conference on fairness, accountability, and transparency, pp 610–623

2021

Earlier work this paper cites.

Andreas J (2022) Language models as agent models. arXiv preprint arXiv:221201681

2022

Earlier work this paper cites.

Dong Q, Li L, Dai D, Zheng C, Wu Z, Chang B, Sun X, Xu J, Sui Z (2022) A survey for in-context learning. arXiv preprint arXiv:230100234

2022

Earlier work this paper cites.

He X, Yang D, Feng W, Fu TJ, Akula A, Jampani V, Narayana P, Basu S, Wang WY, Wang XE (2022) Cpl: Counterfactual prompt learning for vision and language models. arXiv preprint arXiv:221010362

2022

Earlier work this paper cites.

Wei J, Tay Y, Bommasani R, Raffel C, Zoph B, Borgeaud S, Yogatama D, Bosma M, Zhou D, Metzler D, Chi EH, Hashimoto T, Vinyals O, Liang P, Dean J, Fedus W (2022) Emergent abilities of large language models. arXiv preprint arXiv:220607682 URL

2022

Earlier work this paper cites.

Abdelnabi S, Greshake K, Mishra S, Endres C, Holz T, Fritz M (2023) Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection. URL

2023

Earlier work this paper cites.

Bubeck S, Chandrasekaran V, Eldan R, Gehrke J, Horvitz E, Kamar E, Lee P, Lee YT, Li Y, Lundberg S, Nori H, Palangi H, Ribeiro MT, Zhang Y (2023) Sparks of artificial general intelligence: Early experiments with gpt-4

2023

Earlier work this paper cites.

Community O (2023) What is the actual cutoff date for gpt-4?

2023

Earlier work this paper cites.

Dagan G, Keller F, Lascarides A (2023) Dynamic planning with a llm. arXiv preprint arXiv:230806391

2023

Earlier work this paper cites.

Dai D, Sun Y, Dong L, Hao Y, Ma S, Sui Z, Wei F (2023) Why can gpt learn in-context? language models implicitly perform gradient descent as meta-optimizers. In: ICLR 2023 Workshop on Mathematical and Empirical Understanding of Foundation Models

2023

Earlier work this paper cites.

Deng G, Liu Y, Mayoral-Vilches V, Liu P, Li Y, Xu Y, Zhang T, Liu Y, Pinzger M, Rass S (2023) Pentestgpt: An llm-empowered automatic penetration testing tool. arXiv preprint arXiv:230806782

2023

Cited alongside, same era.

Dutta TS (2023) Hackers released new black hat ai tools xxxgpt and wolf gpt

2023

Cited alongside, same era.

Gatlan S (2023) The dark side of generative ai: Five malicious llms found on the dark web

2023

Cited alongside, same era.

Gupta M, Akiri C, Aryal K, Parker E, Praharaj L (2023) From chatgpt to threatgpt: Impact of generative ai in cybersecurity and privacy. IEEE Access

2023

Cited alongside, same era.

Happe A, Cito J (2023a) Getting pwn’d by ai: Penetration testing with large language models. In: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, Association for Computing Machinery, New York, NY, USA, ESEC/FSE 2023, DOI

Huang J, Zhu Q (2024) Penheal: A two-stage llm framework for automated pentesting and optimal remediation. arXiv preprint arXiv:240717788

2024

Closest in time.

Jin H, Huang L, Cai H, Yan J, Li B, Chen H (2024) From llms to llm-based agents for software engineering: A survey of current, challenges and future. URL

Original

2024

Closest in time.

Kowira EM, Suki NN, Nathan Y (2024) Automated privilege escalation enumeration and execution script for linux. In: AIP Conference Proceedings, AIP Publishing, vol 2802

2024

Closest in time.

Lee J, Chen A, Dai Z, Dua D, Sachan DS, Boratko M, Luan Y, Arnold SMR, Perot V, Dalmia S, Hu H, Lin X, Pasupat P, Amini A, Cole JR, Riedel S, Naim I, Chang MW, Guu K (2024) Can long-context language models subsume retrieval, rag, sql, and more? URL

Original

2024

Closest in time.

Li X, Cao Y, Ma Y, Sun A (2024) Long context vs. rag for llms: An evaluation and revisits. URL