Skip to content
View AshtonVaughan's full-sized avatar
4 followers · 1 following

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Highlights

  • Pro

Block or report AshtonVaughan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
AshtonVaughan/README.md
Ashton Vaughan



> ./about

It started at 9, guessing the passwords on my parents' devices so I could play games. Still at it: 18 now, studying IT at QUT and hunting on HackerOne. Most of what I ship is security and AI tooling - an autonomous bug-bounty agent, an authorization-first LLM red-team framework, a Burp-to-MCP bridge, a hardware-agnostic LLM inference engine, and a browser runtime built for AI agents.

a decade of side projects, with the most recent years highlighted

offensive security  ·  applied ml  ·  agent systems  ·  systems programming

> ./shipping

ProjectTriage

python   agents   offsec   hackerone

Autonomous bug bounty hunting agent. 71K lines of Python. Hypothesis-driven pentesting with 19 reasoning modules, 51+ tools, and HackerOne integration.

DiaxiInject

python   llm   red-team   bug-bounty

Authorization-first LLM red-team framework. Local 70B abliterated attacker LM, 6 novel transformer-architecture attacks, statistically-validated universal jailbreak claims.

burp-mcp-ultimate

kotlin   burp   mcp   agents

Burp Suite extension that exposes the Montoya API as an MCP server. 152 typed tools + cross-extension reflection bridge into Logger++, Hackvertor, Param Miner. Drives Burp from any AI agent.

AgentBrowser

typescript   browser   agents   mcp

Browser runtime built for AI agents. Semantic tools, persistent site memory, self-healing execution, and a built-in MCP server.

PrismLLM

rust   inference   llm   pypi

Hardware-agnostic LLM inference engine — its Sparse Oracle Architecture runs anything from a Raspberry Pi to a B200 cluster. Written in Rust, shipped on PyPI.

somnus

python   re   binary-analysis   agents

Local-first reverse engineering orchestrator. Drives Ghidra, angr, Frida, rizin, QEMU, AFL++ and pwntools through a small-model LLM to triage binaries and find bugs. No API keys, no network calls.

> ./stack

offense            

ai / ml              

systems              

ops            

> ./signal

> ./recent

- `push`     [AshtonVaughan/hermes-agent](https://github.com/AshtonVaughan/hermes-agent) - feat(plugins): add jeeves_presence plugin for the Jeeves orb app
- `push`     [AshtonVaughan/fieldwork-ctf](https://github.com/AshtonVaughan/fieldwork-ctf) - Build Relay: 26 progressive CTF stages with patched comparisons
- `push`     [AshtonVaughan/fieldwork-ctf](https://github.com/AshtonVaughan/fieldwork-ctf) - Version game scripts to prevent stale browser assets
- `push`     [AshtonVaughan/fieldwork-ctf](https://github.com/AshtonVaughan/fieldwork-ctf) - Use inline confirmation for game reset
responsible disclosure only / AEST / always learning

Pinned Loading

  1. somnus somnus Public

    Local-first reverse engineering orchestrator. Drives Ghidra, angr, Frida, rizin, QEMU, AFL++, and pwntools through a small-model LLM to triage binaries and find bugs.

    Python