Security-Research

ZhiShi is an open-source agent harness purpose-built for security research — a human-in-the-loop workbench for binary exploitation, penetration testing, whitebox code audit, and AI security — that layers a domain-specific research loop on top of the MIT-licensed @earendil-works/pi-agent-core engine. It uses a Tauri (Rust) desktop shell wrapping a TypeScript/Node core, and publishes unusual evidence-first proof of capability: 100% Pwnable.kr CTF completion, 98% Hacker101, and a fully reproduced exploit chain for CVE-2026-34621 (Adobe Acrobat Reader, CVSS 8.6). ...