OffsecCyber dataset combines HackerOne reports and CVEs to train pentesting LLMs
AccBalanced · x · 2026-11-04
Security researcher secfathy released OffsecCyber on Hugging Face, a dataset for training and evaluating LLMs for penetration testing.
- Sources: public HackerOne reports plus CVE records dating back to 2000
- 10K–100K rows, Apache-2.0 licensed, with fields like CWE class, CVSS impact, difficulty, and domain (e.g. webappsec)
- Samples are multi-turn chat format covering vulnerability analysis, CVSS breakdowns, and exploit payload discussion
- The author has already fine-tuned Qwen3.5-4B on it
More from Safety
- Hackers reset French blood service freezers from -30°C to 110°C in supply-chain cyberattack — LuizaJarovsky · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Claude doesn't really forget: Anthropic's privacy policy allows records retention up to 7 years — nikola_mr64990 · 2026-11-04
- Polymarket opens a market on Anthropic's next AI sandbox escape — Polymarket · 2026-11-04
- Rival company blames 'AI gone off the rails' after founder catches it hacking his network — AccBalanced · 2026-11-04
- What AI companies know about you that you never told them, per Claude — alex_verem · 2026-11-04