Text Generation
GGUF
English
security
cybersecurity
pentest
CVSS
OWASP
red-team
bug-bounty
128k-context
qwen3
ravenx
rath-protocol
tool-calling
conversational
Instructions to use deadbydawn101/RavenX-Sec-8B-GGUF with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Notebooks
- Google Colab
- Kaggle
- Local Apps Settings
- llama.cpp
How to use deadbydawn101/RavenX-Sec-8B-GGUF with llama.cpp:
Install (macOS, Linux)
curl -LsSf https://llama.app/install.sh | sh # Start a local OpenAI-compatible server with a web UI: llama serve -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M # Run inference directly in the terminal: llama cli -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Install from WinGet (Windows)
winget install llama.cpp # Start a local OpenAI-compatible server with a web UI: llama serve -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M # Run inference directly in the terminal: llama cli -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Use pre-built binary
# Download pre-built binary from: # https://github.com/ggerganov/llama.cpp/releases # Start a local OpenAI-compatible server with a web UI: ./llama-server -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M # Run inference directly in the terminal: ./llama-cli -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Build from source code
git clone https://github.com/ggerganov/llama.cpp.git cd llama.cpp cmake -B build cmake --build build -j --target llama-server llama-cli # Start a local OpenAI-compatible server with a web UI: ./build/bin/llama-server -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M # Run inference directly in the terminal: ./build/bin/llama-cli -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Use Docker
docker model run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
- LM Studio
- Jan
- vLLM
How to use deadbydawn101/RavenX-Sec-8B-GGUF with vLLM:
Install from pip and serve model
# Install vLLM from pip: pip install vllm # Start the vLLM server: vllm serve "deadbydawn101/RavenX-Sec-8B-GGUF" # Call the server using curl (OpenAI-compatible API): curl -X POST "http://localhost:8000/v1/chat/completions" \ -H "Content-Type: application/json" \ --data '{ "model": "deadbydawn101/RavenX-Sec-8B-GGUF", "messages": [ { "role": "user", "content": "What is the capital of France?" } ] }'Use Docker
docker model run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
- Ollama
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Ollama:
ollama run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
- Unsloth Studio
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Unsloth Studio:
Install Unsloth Studio (macOS, Linux, WSL)
curl -fsSL https://unsloth.ai/install.sh | sh # Run unsloth studio unsloth studio -H 0.0.0.0 -p 8888 # Then open http://localhost:8888 in your browser # Search for deadbydawn101/RavenX-Sec-8B-GGUF to start chatting
Install Unsloth Studio (Windows)
irm https://unsloth.ai/install.ps1 | iex # Run unsloth studio unsloth studio -H 0.0.0.0 -p 8888 # Then open http://localhost:8888 in your browser # Search for deadbydawn101/RavenX-Sec-8B-GGUF to start chatting
Using HuggingFace Spaces for Unsloth
# No setup required # Open https://huggingface.co/spaces/unsloth/studio in your browser # Search for deadbydawn101/RavenX-Sec-8B-GGUF to start chatting
- Pi
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Pi:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Configure the model in Pi
# Install Pi: npm install -g @mariozechner/pi-coding-agent # Add to ~/.pi/agent/models.json: { "providers": { "llama-cpp": { "baseUrl": "http://localhost:8080/v1", "api": "openai-completions", "apiKey": "none", "models": [ { "id": "deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M" } ] } } }Run Pi
# Start Pi in your project directory: pi
- Docker Model Runner
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Docker Model Runner:
docker model run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
- Lemonade
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Lemonade:
Pull the model
# Download Lemonade from https://lemonade-server.ai/ lemonade pull deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Run and chat with the model
lemonade run user.RavenX-Sec-8B-GGUF-Q4_K_M
List all available models
lemonade list
- Hermes Agent
How to use deadbydawn101/RavenX-Sec-8B-GGUF with Hermes Agent:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Configure Hermes
# Install Hermes: curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash hermes setup # Point Hermes at the local server: hermes config set model.provider custom hermes config set model.base_url http://127.0.0.1:8080/v1 hermes config set model.default deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Run Hermes
hermes
- Atomic Chat
- OpenClaw
How to use deadbydawn101/RavenX-Sec-8B-GGUF with OpenClaw:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M
Configure OpenClaw
# Install OpenClaw: npm install -g openclaw@latest # Register the local server and set it as the default model: openclaw onboard --non-interactive --mode local \ --auth-choice custom-api-key \ --custom-base-url http://127.0.0.1:8080/v1 \ --custom-model-id "deadbydawn101/RavenX-Sec-8B-GGUF:Q4_K_M" \ --custom-provider-id llama-cpp \ --custom-compatibility openai \ --custom-text-input \ --accept-risk \ --skip-health
Run OpenClaw
openclaw agent --local --agent main --message "Hello from Hugging Face"
v3.0: update model card — 379K examples, 15 datasets, specific CVE output
Browse files
README.md
CHANGED
|
@@ -9,6 +9,8 @@ tags:
|
|
| 9 |
- CVSS
|
| 10 |
- NIST
|
| 11 |
- OWASP
|
|
|
|
|
|
|
| 12 |
- gguf
|
| 13 |
- mlx
|
| 14 |
- qwen3
|
|
@@ -20,142 +22,123 @@ language:
|
|
| 20 |
pipeline_tag: text-generation
|
| 21 |
---
|
| 22 |
|
| 23 |
-
# RavenX-Sec 8B — Autonomous Security Intelligence Model (GGUF)
|
| 24 |
|
| 25 |
<p align="center">
|
| 26 |
<strong>Find → Classify → Fix → Verify → Report</strong><br>
|
| 27 |
-
<em>The
|
| 28 |
</p>
|
| 29 |
|
| 30 |
**Built by [@DeadByDawn101](https://github.com/DeadByDawn101) (RavenX LLC)**
|
| 31 |
|
| 32 |
## What This Is
|
| 33 |
|
| 34 |
-
RavenX-Sec
|
| 35 |
-
|
| 36 |
-
## RATH Protocol Output
|
| 37 |
-
|
| 38 |
-
Every finding gets a structured 4-step analysis:
|
| 39 |
-
|
| 40 |
-
| Step | What It Does |
|
| 41 |
-
|------|-------------|
|
| 42 |
-
| **RISK** | Risk level, potential issues, impact assessment |
|
| 43 |
-
| **ASSESS** | Service details, CVE mappings, detection methods, remediation priority |
|
| 44 |
-
| **THREAT** | Threat actors, exploitation feasibility, IOCs, detection difficulty |
|
| 45 |
-
| **HIGHLIGHT** | Specific upgrade commands, policies to enforce, verification steps |
|
| 46 |
-
|
| 47 |
-
Plus a summary table with finding, risk, vulnerability, action, time to fix, owner, and verification.
|
| 48 |
|
| 49 |
## Quick Start
|
| 50 |
|
| 51 |
-
### Ollama
|
| 52 |
```bash
|
| 53 |
-
|
|
|
|
|
|
|
|
|
|
| 54 |
```
|
| 55 |
|
| 56 |
-
##
|
| 57 |
-
Download any GGUF file below and load it in LM Studio.
|
| 58 |
|
| 59 |
-
##
|
|
|
|
| 60 |
|
| 61 |
| Filename | Quant | Size | Use Case |
|
| 62 |
|----------|-------|------|----------|
|
| 63 |
-
| `ravenx-sec-
|
| 64 |
-
| `ravenx-sec-
|
| 65 |
-
| `ravenx-sec-
|
| 66 |
-
| `ravenx-sec-
|
| 67 |
|
| 68 |
-
##
|
|
|
|
| 69 |
|
| 70 |
-
|
|
| 71 |
-
|----------
|
| 72 |
-
|
|
| 73 |
-
|
|
| 74 |
-
|
|
| 75 |
-
|
|
| 76 |
-
| **Learning Rate** | 1e-5 |
|
| 77 |
-
| **Iterations** | 1000 |
|
| 78 |
-
| **Training Data** | 125K examples (security-dominant mix) |
|
| 79 |
-
| **Hardware** | M4 Max 128GB |
|
| 80 |
-
| **Peak Memory** | 20.7 GB |
|
| 81 |
|
| 82 |
-
##
|
| 83 |
|
| 84 |
-
- **
|
| 85 |
-
- **WithinUsAI/AgentAngel_100k** — Agentic coding with verification (capped at 50K)
|
| 86 |
-
- **hackingBuddyGPT** — Linux priv-esc, web/API pentest patterns
|
| 87 |
-
- **PentestGPT** — Autonomous penetration testing methodology (USENIX Security 2024)
|
| 88 |
-
- **Shannon** — White-box AI pentester (96.15% XBOW)
|
| 89 |
-
- **Ghidra** — Reverse engineering analysis patterns
|
| 90 |
-
- **Synthetic RATH** — CVE find→classify→fix chains with full CVSS vectors
|
| 91 |
|
| 92 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
| 93 |
|
| 94 |
-
|
|
|
|
|
|
|
|
|
|
| 95 |
|
| 96 |
-
|
| 97 |
-
|
| 98 |
-
|
| 99 |
-
|
| 100 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 101 |
|
| 102 |
-
##
|
| 103 |
|
| 104 |
-
|
| 105 |
|
| 106 |
-
|
| 107 |
-
|
| 108 |
-
|
| 109 |
-
|
| 110 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 111 |
|
| 112 |
-
|
| 113 |
-
- Service: OpenSSH 7.4, Protocol: SSHv2
|
| 114 |
-
- Critical CVEs mapped to this version
|
| 115 |
-
- Remediation Priority: High
|
| 116 |
|
| 117 |
-
|
| 118 |
-
-
|
| 119 |
-
-
|
|
|
|
| 120 |
|
| 121 |
-
|
| 122 |
-
-
|
| 123 |
-
-
|
| 124 |
-
-
|
| 125 |
-
-
|
| 126 |
|
| 127 |
-
|
| 128 |
-
|
|
|
|
| 129 |
|
| 130 |
-
|
|
|
|
|
|
|
| 131 |
|
| 132 |
-
|
| 133 |
-
-
|
| 134 |
-
-
|
| 135 |
-
|
| 136 |
-
|
| 137 |
-
- **PCI DSS / HIPAA / SOX** — Compliance impact
|
| 138 |
-
|
| 139 |
-
## Deployment
|
| 140 |
-
|
| 141 |
-
### On Apple Silicon (MLX native)
|
| 142 |
-
```python
|
| 143 |
-
from mlx_lm import load, generate
|
| 144 |
-
model, tokenizer = load('path/to/ravenx-sec-fused')
|
| 145 |
-
messages = [
|
| 146 |
-
{"role": "system", "content": "You are RavenX-Sec. Follow RATH protocol."},
|
| 147 |
-
{"role": "user", "content": "Analyze: Redis 6.0 on port 6379 without AUTH"}
|
| 148 |
-
]
|
| 149 |
-
prompt = tokenizer.apply_chat_template(messages, add_generation_prompt=True, tokenize=False)
|
| 150 |
-
response = generate(model, tokenizer, prompt=prompt, max_tokens=1024)
|
| 151 |
-
```
|
| 152 |
|
| 153 |
-
|
| 154 |
-
Point Enchanted at your Ollama endpoint for private security AI on every Apple device.
|
| 155 |
|
| 156 |
## Source Code
|
| 157 |
|
| 158 |
-
|
| 159 |
|
| 160 |
## License
|
| 161 |
|
|
|
|
| 9 |
- CVSS
|
| 10 |
- NIST
|
| 11 |
- OWASP
|
| 12 |
+
- red-team
|
| 13 |
+
- bug-bounty
|
| 14 |
- gguf
|
| 15 |
- mlx
|
| 16 |
- qwen3
|
|
|
|
| 22 |
pipeline_tag: text-generation
|
| 23 |
---
|
| 24 |
|
| 25 |
+
# RavenX-Sec 8B v3.0 — Autonomous Security Intelligence Model (GGUF)
|
| 26 |
|
| 27 |
<p align="center">
|
| 28 |
<strong>Find → Classify → Fix → Verify → Report</strong><br>
|
| 29 |
+
<em>The most comprehensively trained open-source security model. 379K training examples from 15 datasets.</em>
|
| 30 |
</p>
|
| 31 |
|
| 32 |
**Built by [@DeadByDawn101](https://github.com/DeadByDawn101) (RavenX LLC)**
|
| 33 |
|
| 34 |
## What This Is
|
| 35 |
|
| 36 |
+
RavenX-Sec produces structured security assessments using the **RATH protocol** — citing specific CVEs, generating CVSS vectors, showing vulnerable code examples, providing exploit PoCs, and delivering actionable remediation.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 37 |
|
| 38 |
## Quick Start
|
| 39 |
|
|
|
|
| 40 |
```bash
|
| 41 |
+
# Ollama
|
| 42 |
+
ollama run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:ravenx-sec-v3.0-Q8_0
|
| 43 |
+
|
| 44 |
+
# Or download any GGUF below for LM Studio / llama.cpp
|
| 45 |
```
|
| 46 |
|
| 47 |
+
## Available Models
|
|
|
|
| 48 |
|
| 49 |
+
### v3.0 (Latest — Recommended)
|
| 50 |
+
Trained on 379K examples from 15 security datasets (84% security content).
|
| 51 |
|
| 52 |
| Filename | Quant | Size | Use Case |
|
| 53 |
|----------|-------|------|----------|
|
| 54 |
+
| `ravenx-sec-v3.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB | Fast inference |
|
| 55 |
+
| `ravenx-sec-v3.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB | Balanced |
|
| 56 |
+
| `ravenx-sec-v3.0-Q8_0.gguf` | Q8_0 | 8.1 GB | High quality |
|
| 57 |
+
| `ravenx-sec-v3.0-f16.gguf` | F16 | 15.3 GB | Maximum quality |
|
| 58 |
|
| 59 |
+
### v2.0 (Previous)
|
| 60 |
+
Trained on 125K examples (77% security content).
|
| 61 |
|
| 62 |
+
| Filename | Quant | Size |
|
| 63 |
+
|----------|-------|------|
|
| 64 |
+
| `ravenx-sec-v2.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB |
|
| 65 |
+
| `ravenx-sec-v2.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB |
|
| 66 |
+
| `ravenx-sec-v2.0-Q8_0.gguf` | Q8_0 | 8.1 GB |
|
| 67 |
+
| `ravenx-sec-v2.0-f16.gguf` | F16 | 15.3 GB |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 68 |
|
| 69 |
+
## RATH Protocol Output
|
| 70 |
|
| 71 |
+
v3.0 produces structured 4-step security assessments with **specific CVEs, CVSS vectors, vulnerable code, and exploit PoCs:**
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 72 |
|
| 73 |
+
```
|
| 74 |
+
RATH STEP 1: IDENTIFY
|
| 75 |
+
- CVE: CVE-2016-10009, CVE-2016-10010, CVE-2016-10011
|
| 76 |
+
- Description: OpenSSH 7.4 — authentication bypass via SSH agent forwarding
|
| 77 |
+
- Affected: OpenSSH 7.4
|
| 78 |
|
| 79 |
+
RATH STEP 2: ASSESS
|
| 80 |
+
- CVSS Score: 6.3
|
| 81 |
+
- CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
|
| 82 |
+
- Technical Analysis: SSH agent forwarding vulnerabilities
|
| 83 |
|
| 84 |
+
RATH STEP 3: THREAT
|
| 85 |
+
- Attack Scenario: Exploit SSH agent forwarding to bypass auth
|
| 86 |
+
- Vulnerable Code: ForwardAgent yes (VULNERABLE) → ForwardAgent no (SAFE)
|
| 87 |
+
- Exploit PoC: ssh -o ForwardAgent=yes user@host
|
| 88 |
+
|
| 89 |
+
RATH STEP 4: REMEDIATE
|
| 90 |
+
- Disable SSH agent forwarding unless necessary
|
| 91 |
+
- Restrict to specific users via Match blocks
|
| 92 |
+
- Validate fix for OpenSSH 7.4 specifically
|
| 93 |
+
```
|
| 94 |
|
| 95 |
+
## Training Details
|
| 96 |
|
| 97 |
+
### v3.0 (Latest)
|
| 98 |
|
| 99 |
+
| Parameter | Value |
|
| 100 |
+
|-----------|-------|
|
| 101 |
+
| **Base Model** | georgehenney/Qwen3-8B-heretic |
|
| 102 |
+
| **Method** | MLX LoRA on Apple Silicon (M4 Max 128GB) |
|
| 103 |
+
| **LoRA Rank** | 32 |
|
| 104 |
+
| **Training Data** | 379,286 examples (84% security) |
|
| 105 |
+
| **Security Sources** | 15 datasets |
|
| 106 |
+
| **Iterations** | 1500 |
|
| 107 |
+
| **Tokens Trained** | 3,019,210 |
|
| 108 |
+
| **Peak Memory** | 47.9 GB |
|
| 109 |
|
| 110 |
+
### Security Training Datasets (15 total)
|
|
|
|
|
|
|
|
|
|
| 111 |
|
| 112 |
+
**Offensive / Red Team:**
|
| 113 |
+
- WNT3D/Ultimate-Offensive-Red-Team (25,620)
|
| 114 |
+
- Rootkit7/pentest-redteam-steering (1,963)
|
| 115 |
+
- acnimatic3722/kali-linux-pentesting-data (343)
|
| 116 |
|
| 117 |
+
**Pentest / Bug Bounty:**
|
| 118 |
+
- SkywardNomad92/pentest-findings-v2 (50,000)
|
| 119 |
+
- theelderemo/pentesting-explanations (5,906)
|
| 120 |
+
- AYI-NEDJIMI/bug-bounty-pentest-en (27)
|
| 121 |
+
- CJJones/Synthetic_PenTest_Reports (123)
|
| 122 |
|
| 123 |
+
**CVE / Vulnerability:**
|
| 124 |
+
- auren-research/cve-sft-v5 (10,000)
|
| 125 |
+
- Trendyol/Cybersecurity-Instruction-Tuning (50,000)
|
| 126 |
|
| 127 |
+
**Agentic / Coding:**
|
| 128 |
+
- WithinUsAI/AgentAngel_100k (50,000 capped)
|
| 129 |
+
- WithinUsAI/claude_mythos_distilled_25k (16,000 security)
|
| 130 |
|
| 131 |
+
**Extracted from Source Repos:**
|
| 132 |
+
- hackingBuddyGPT, PentestGPT, Shannon, Ghidra (161)
|
| 133 |
+
- Synthetic RATH CVE chains (30)
|
| 134 |
+
|
| 135 |
+
## Frameworks Supported
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 136 |
|
| 137 |
+
CVSS 3.1, NIST CSF 2.0, OWASP Top 10, CWE, MITRE ATT&CK, PCI DSS, HIPAA, SOX
|
|
|
|
| 138 |
|
| 139 |
## Source Code
|
| 140 |
|
| 141 |
+
[github.com/DeadByDawn101/RavenX-Sec](https://github.com/DeadByDawn101/RavenX-Sec)
|
| 142 |
|
| 143 |
## License
|
| 144 |
|