----------------🎯 AI===================A new piece by Utku Sen explains how LLM-based penetration testing harnesses work...

----------------🎯 AI===================A new piece by Utku Sen explains how LLM-based penetration testing harnesses work and why the situation changed recently. The argument is that the shift is plumbing, not a new exploit class: what matters is what lets an LLM act on a live target.The mechanicsAn LLM is a text generator. Give it a task like pentest example.com, credentials in credentials.txt and it can only emit text describing intent, for example Read credentials.txt, open example.com. The harness is the code that parses that output, executes the requested actions, and returns results so the model can iterate. Without a harness, nothing happens.The author's analogy comes from apartment buildings in Turkey: residents leave notes with errands, the janitor runs them without thinking and returns with results. The LLM is the resident, the harness is the janitor.Claude Code as referenceThe model (Opus/Sonnet) produces text only. Claude Code is the software that contains the harness: logic...