andreashappe / cochise
Autonomous Assumed Breach Penetration-Testing Active Directory Networks
Why this job: says: penetration testing; topics: pentesting
What it does
Cochise is a minimal, readable prototype that uses LLMs to autonomously pen-test enterprise networks using Microsoft Active Directory. Point it at a testbed, pick an LLM, and watch it plan attack chains, execute commands, harvest credentials, and escalate to domain admin.
Get started
git clone https://github.com/andreashappe/cochise.git
cd cochise You need: Python 3.12+; A target environment/testbed (I am using GOAD); SSH access to a Linux attacker VM (e.g., Kali) inside the testbed
- Maintenance
- Active
- Last commit 16 days ago
- Stars
- 152
- +1 this week
- Licence
- MIT
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v0.4.1
- Released 3 months ago
- Built with
- Python
- 97% of the code
Is it looked after?
- Contributors
- 2
- Last 90 days
- Issues
- 33% closed
- 2 still open
- Pull requests
- 8 merged
- 1 waiting
- Releases
- 7
- 7 in the last year
- No contributing guide
- No security policy
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| j3ssie / osmedeus | 6,645 | 3 days ago | MIT | Mac, Linux |
| BitterSecurity / Decepticon | 6,568 | 2 days ago | Apache-2.0 | Mac, Windows, Linux |
| ASCIT31 / Dark-Moon | 1,211 | 13 days ago | GPL-3.0 | No downloads |
More: languages, topics and project record
Languages
- Python 97%
- Jinja 2%
- Dockerfile <1%
Topics
- active-directory
- agentic-ai
- hacking
- llm
- penetration-testing
- pentesting
Project record
- JobAI security
- StatusListed
- Commits213
- Forks34
- Watching3
- Stars in 28 days+10
- CreatedJan 20, 2025
- First seen by usNov 7, 2026
- CheckedNov 7, 2026