Offensive Security & Compliance Engine

WhiteAdmin Framework (WAF)

Weapons-grade automated red teaming and bug bounty toolchain for LLMs and autonomous agents. Native Go speed, multi-stage exploit chaining, and instant triager-ready reports.

View Terminal Commands ← Back to Hub
OWASP & Agentic Security

11 Combat Playbooks

Field-manual attack workflows covering prompt injection, delimiter smuggling, indirect poisoning, tool parameter abuse, and state exfiltration.

Threat Matrix

65+ ATR Rules

Comprehensive Agent Threat Rules (ATR) covering privilege escalation, authorization bypasses, and unauthorized tool execution boundaries.

Bounty Integration

Live Scope Ingestion

Direct sync with HackerOne and Bugcrowd feeds. Real-time scope verification blocks unauthorized queries before packets leave your machine.

Enterprise Testing

Promptfoo Export

Export full playbooks and assertions to production promptfooconfig.yaml suites with a single CLI command.

WAF Execution Cheatsheet

Zero-Python native binaries running directly on Windows, Linux, and macOS.

waf — quickstart execution
# 1. Search and select live HackerOne / Bugcrowd scope:
.\waf.exe programs search shopify
.\waf.exe programs select shopify

# 2. Run automated 4-phase exploit escalation chain:
.\waf.exe chain run -t openai:google/gemini-2.5-flash -v spanish

# 3. Export WAF playbooks to enterprise Promptfoo suite:
.\waf.exe promptfoo export --target openai:google/gemini-2.5-flash --output promptfooconfig.yaml

# 4. Generate HackerOne-ready vulnerability submission report:
.\waf.exe report --finding finding-001 --format hackerone --output submission.md