LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks

arXiv:2310.11409v3 Announce Type: replace
Abstract: Penetration testing, an essential component of software security testing, allows organizations to proactively identify and remediate vulnerabilities in their systems, thus bolstering their defense mechanisms against potential cyberattacks. One recent advancement in the realm of penetration testing is the utilization of Language Models (LLMs).
We explore the intersection of LLMs and penetration testing to gain insight into their capabilities and challenges in the context of privilege escalation. We create an automated Linux privilege-escalation benchmark utilizing …

advancement arxiv attacks autonomous cs.ai cs.cr cyberattacks defense escalation hackers identify language language models linux llms organizations penetration penetration testing privilege privilege escalation realm security security testing software software security systems testing vulnerabilities