deadbydawn101 commited on
Commit
9c1d311
·
verified ·
1 Parent(s): 1a64c50

v3.0: update model card — 379K examples, 15 datasets, specific CVE output

Browse files
Files changed (1) hide show
  1. README.md +80 -97
README.md CHANGED
@@ -9,6 +9,8 @@ tags:
9
  - CVSS
10
  - NIST
11
  - OWASP
 
 
12
  - gguf
13
  - mlx
14
  - qwen3
@@ -20,142 +22,123 @@ language:
20
  pipeline_tag: text-generation
21
  ---
22
 
23
- # RavenX-Sec 8B — Autonomous Security Intelligence Model (GGUF)
24
 
25
  <p align="center">
26
  <strong>Find → Classify → Fix → Verify → Report</strong><br>
27
- <em>The first security model that completes the full vulnerability lifecycle using the RATH protocol.</em>
28
  </p>
29
 
30
  **Built by [@DeadByDawn101](https://github.com/DeadByDawn101) (RavenX LLC)**
31
 
32
  ## What This Is
33
 
34
- RavenX-Sec is a fine-tuned Qwen3-8B model specialized in offensive security, vulnerability discovery, and **real-time remediation**. It produces structured security assessments using the **RATH protocol** (Risk, Assessment, Threat, Highlight).
35
-
36
- ## RATH Protocol Output
37
-
38
- Every finding gets a structured 4-step analysis:
39
-
40
- | Step | What It Does |
41
- |------|-------------|
42
- | **RISK** | Risk level, potential issues, impact assessment |
43
- | **ASSESS** | Service details, CVE mappings, detection methods, remediation priority |
44
- | **THREAT** | Threat actors, exploitation feasibility, IOCs, detection difficulty |
45
- | **HIGHLIGHT** | Specific upgrade commands, policies to enforce, verification steps |
46
-
47
- Plus a summary table with finding, risk, vulnerability, action, time to fix, owner, and verification.
48
 
49
  ## Quick Start
50
 
51
- ### Ollama
52
  ```bash
53
- ollama run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
 
 
 
54
  ```
55
 
56
- ### LM Studio
57
- Download any GGUF file below and load it in LM Studio.
58
 
59
- ## Available Quantizations
 
60
 
61
  | Filename | Quant | Size | Use Case |
62
  |----------|-------|------|----------|
63
- | `ravenx-sec-v2.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB | Fast inference, good quality |
64
- | `ravenx-sec-v2.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB | Balanced quality/speed |
65
- | `ravenx-sec-v2.0-Q8_0.gguf` | Q8_0 | 8.1 GB | High quality, good for further fine-tuning |
66
- | `ravenx-sec-v2.0-f16.gguf` | F16 | 15.3 GB | Maximum quality, research use |
67
 
68
- ## Training Details
 
69
 
70
- | Parameter | Value |
71
- |-----------|-------|
72
- | **Base Model** | georgehenney/Qwen3-8B-heretic (abliterated Qwen3-8B) |
73
- | **Method** | MLX LoRA on Apple Silicon |
74
- | **LoRA Rank** | 32 |
75
- | **LoRA Layers** | 8 |
76
- | **Learning Rate** | 1e-5 |
77
- | **Iterations** | 1000 |
78
- | **Training Data** | 125K examples (security-dominant mix) |
79
- | **Hardware** | M4 Max 128GB |
80
- | **Peak Memory** | 20.7 GB |
81
 
82
- ### Training Data Sources
83
 
84
- - **WithinUsAI/claude_mythos_distilled_25k** — Cybersecurity, advanced coding, agentic planning (5x upsampled)
85
- - **WithinUsAI/AgentAngel_100k** — Agentic coding with verification (capped at 50K)
86
- - **hackingBuddyGPT** — Linux priv-esc, web/API pentest patterns
87
- - **PentestGPT** — Autonomous penetration testing methodology (USENIX Security 2024)
88
- - **Shannon** — White-box AI pentester (96.15% XBOW)
89
- - **Ghidra** — Reverse engineering analysis patterns
90
- - **Synthetic RATH** — CVE find→classify→fix chains with full CVSS vectors
91
 
92
- ### Key Training Insight
 
 
 
 
93
 
94
- Security-dominant data mix (58% security) produces the best results. More data isn't always better — the right ratio matters.
 
 
 
95
 
96
- | Version | Data | Security Ratio | Result |
97
- |---------|------|---------------|--------|
98
- | v0.3 | 51K | 94% | Good |
99
- | v0.4 | 321K | 13% | ⚠️ Regressed |
100
- | **v2.0** | **125K** | **58%** | **🏆 Best** |
 
 
 
 
 
101
 
102
- ## Example Output
103
 
104
- **Prompt:** "You found OpenSSH 7.4 on port 22 of a production server. Classify and remediate using RATH protocol."
105
 
106
- **Output:**
107
- ```
108
- RATH STEP 1: RISK
109
- - Risk Level: Low to Medium
110
- - OpenSSH 7.4 is from 2016, lacks latest mitigations
 
 
 
 
 
111
 
112
- RATH STEP 2: ASSESS
113
- - Service: OpenSSH 7.4, Protocol: SSHv2
114
- - Critical CVEs mapped to this version
115
- - Remediation Priority: High
116
 
117
- RATH STEP 3: THREAT
118
- - Threat Actors: Script kiddies, automated scanners
119
- - IOCs: Unusual login times, failed auth attempts
 
120
 
121
- RATH STEP 4: HIGHLIGHT
122
- - Upgrade: sudo apt upgrade openssh-server -y
123
- - Enforce key-based auth, disable passwords
124
- - Enable fail2ban, verbose logging
125
- - Verify: ssh -V, check sshd_config
126
 
127
- RATH Score: 7.8/10
128
- ```
 
129
 
130
- ## Frameworks Supported
 
 
131
 
132
- - **CVSS 3.1** Full vector string generation
133
- - **NIST CSF 2.0** Detect → Respond → Recover mapping
134
- - **OWASP Top 10** Category classification
135
- - **CWE** — Weakness enumeration
136
- - **MITRE ATT&CK** — Technique mapping
137
- - **PCI DSS / HIPAA / SOX** — Compliance impact
138
-
139
- ## Deployment
140
-
141
- ### On Apple Silicon (MLX native)
142
- ```python
143
- from mlx_lm import load, generate
144
- model, tokenizer = load('path/to/ravenx-sec-fused')
145
- messages = [
146
- {"role": "system", "content": "You are RavenX-Sec. Follow RATH protocol."},
147
- {"role": "user", "content": "Analyze: Redis 6.0 on port 6379 without AUTH"}
148
- ]
149
- prompt = tokenizer.apply_chat_template(messages, add_generation_prompt=True, tokenize=False)
150
- response = generate(model, tokenizer, prompt=prompt, max_tokens=1024)
151
- ```
152
 
153
- ### With Enchanted (iOS/macOS)
154
- Point Enchanted at your Ollama endpoint for private security AI on every Apple device.
155
 
156
  ## Source Code
157
 
158
- Full training pipeline, extraction tools, and deployment configs: [github.com/DeadByDawn101/RavenX-Sec](https://github.com/DeadByDawn101/RavenX-Sec)
159
 
160
  ## License
161
 
 
9
  - CVSS
10
  - NIST
11
  - OWASP
12
+ - red-team
13
+ - bug-bounty
14
  - gguf
15
  - mlx
16
  - qwen3
 
22
  pipeline_tag: text-generation
23
  ---
24
 
25
+ # RavenX-Sec 8B v3.0 — Autonomous Security Intelligence Model (GGUF)
26
 
27
  <p align="center">
28
  <strong>Find → Classify → Fix → Verify → Report</strong><br>
29
+ <em>The most comprehensively trained open-source security model. 379K training examples from 15 datasets.</em>
30
  </p>
31
 
32
  **Built by [@DeadByDawn101](https://github.com/DeadByDawn101) (RavenX LLC)**
33
 
34
  ## What This Is
35
 
36
+ RavenX-Sec produces structured security assessments using the **RATH protocol** citing specific CVEs, generating CVSS vectors, showing vulnerable code examples, providing exploit PoCs, and delivering actionable remediation.
 
 
 
 
 
 
 
 
 
 
 
 
 
37
 
38
  ## Quick Start
39
 
 
40
  ```bash
41
+ # Ollama
42
+ ollama run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:ravenx-sec-v3.0-Q8_0
43
+
44
+ # Or download any GGUF below for LM Studio / llama.cpp
45
  ```
46
 
47
+ ## Available Models
 
48
 
49
+ ### v3.0 (Latest — Recommended)
50
+ Trained on 379K examples from 15 security datasets (84% security content).
51
 
52
  | Filename | Quant | Size | Use Case |
53
  |----------|-------|------|----------|
54
+ | `ravenx-sec-v3.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB | Fast inference |
55
+ | `ravenx-sec-v3.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB | Balanced |
56
+ | `ravenx-sec-v3.0-Q8_0.gguf` | Q8_0 | 8.1 GB | High quality |
57
+ | `ravenx-sec-v3.0-f16.gguf` | F16 | 15.3 GB | Maximum quality |
58
 
59
+ ### v2.0 (Previous)
60
+ Trained on 125K examples (77% security content).
61
 
62
+ | Filename | Quant | Size |
63
+ |----------|-------|------|
64
+ | `ravenx-sec-v2.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB |
65
+ | `ravenx-sec-v2.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB |
66
+ | `ravenx-sec-v2.0-Q8_0.gguf` | Q8_0 | 8.1 GB |
67
+ | `ravenx-sec-v2.0-f16.gguf` | F16 | 15.3 GB |
 
 
 
 
 
68
 
69
+ ## RATH Protocol Output
70
 
71
+ v3.0 produces structured 4-step security assessments with **specific CVEs, CVSS vectors, vulnerable code, and exploit PoCs:**
 
 
 
 
 
 
72
 
73
+ ```
74
+ RATH STEP 1: IDENTIFY
75
+ - CVE: CVE-2016-10009, CVE-2016-10010, CVE-2016-10011
76
+ - Description: OpenSSH 7.4 — authentication bypass via SSH agent forwarding
77
+ - Affected: OpenSSH 7.4
78
 
79
+ RATH STEP 2: ASSESS
80
+ - CVSS Score: 6.3
81
+ - CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
82
+ - Technical Analysis: SSH agent forwarding vulnerabilities
83
 
84
+ RATH STEP 3: THREAT
85
+ - Attack Scenario: Exploit SSH agent forwarding to bypass auth
86
+ - Vulnerable Code: ForwardAgent yes (VULNERABLE) ForwardAgent no (SAFE)
87
+ - Exploit PoC: ssh -o ForwardAgent=yes user@host
88
+
89
+ RATH STEP 4: REMEDIATE
90
+ - Disable SSH agent forwarding unless necessary
91
+ - Restrict to specific users via Match blocks
92
+ - Validate fix for OpenSSH 7.4 specifically
93
+ ```
94
 
95
+ ## Training Details
96
 
97
+ ### v3.0 (Latest)
98
 
99
+ | Parameter | Value |
100
+ |-----------|-------|
101
+ | **Base Model** | georgehenney/Qwen3-8B-heretic |
102
+ | **Method** | MLX LoRA on Apple Silicon (M4 Max 128GB) |
103
+ | **LoRA Rank** | 32 |
104
+ | **Training Data** | 379,286 examples (84% security) |
105
+ | **Security Sources** | 15 datasets |
106
+ | **Iterations** | 1500 |
107
+ | **Tokens Trained** | 3,019,210 |
108
+ | **Peak Memory** | 47.9 GB |
109
 
110
+ ### Security Training Datasets (15 total)
 
 
 
111
 
112
+ **Offensive / Red Team:**
113
+ - WNT3D/Ultimate-Offensive-Red-Team (25,620)
114
+ - Rootkit7/pentest-redteam-steering (1,963)
115
+ - acnimatic3722/kali-linux-pentesting-data (343)
116
 
117
+ **Pentest / Bug Bounty:**
118
+ - SkywardNomad92/pentest-findings-v2 (50,000)
119
+ - theelderemo/pentesting-explanations (5,906)
120
+ - AYI-NEDJIMI/bug-bounty-pentest-en (27)
121
+ - CJJones/Synthetic_PenTest_Reports (123)
122
 
123
+ **CVE / Vulnerability:**
124
+ - auren-research/cve-sft-v5 (10,000)
125
+ - Trendyol/Cybersecurity-Instruction-Tuning (50,000)
126
 
127
+ **Agentic / Coding:**
128
+ - WithinUsAI/AgentAngel_100k (50,000 capped)
129
+ - WithinUsAI/claude_mythos_distilled_25k (16,000 security)
130
 
131
+ **Extracted from Source Repos:**
132
+ - hackingBuddyGPT, PentestGPT, Shannon, Ghidra (161)
133
+ - Synthetic RATH CVE chains (30)
134
+
135
+ ## Frameworks Supported
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
136
 
137
+ CVSS 3.1, NIST CSF 2.0, OWASP Top 10, CWE, MITRE ATT&CK, PCI DSS, HIPAA, SOX
 
138
 
139
  ## Source Code
140
 
141
+ [github.com/DeadByDawn101/RavenX-Sec](https://github.com/DeadByDawn101/RavenX-Sec)
142
 
143
  ## License
144