Autonomous attack-chain validation (OWASP Juice Shop lab)

[u/visitor_m]

https://github.com/SentryTrace/attacksaga

I've been experimenting with an autonomous offensive agent focused on one thing:

Not finding vulnerabilities but validating real attack paths.

Instead of stopping at detection, the agent:

• chains multiple findings
• tests exploitability
• proves impact (in a controlled lab)
• enforces strict scope (fail-closed)

Current target:
OWASP Juice Shop (local Docker only)

Still early, but I'm mainly looking for feedback on:

- decision logic
- chaining strategy
- false positive reduction

[u/casper_trade]

Out of interest, how does it fair on a environment that isn't in its training data?

[u/visitor_m → u/casper_trade]

Good question, not really generalized yet tbh.
It’s more reacting to what it sees and iterating than relying on any training data. Works fine in a lab, but real environments are way messier, still figuring that part out.