CTF-Agent: Hacking with Reasoning Models

This talk demonstrates an AI agent that solves CTF challenges using reasoning models and HTTP requests, performing SQL injection and cookie spoofing attacks.

Overview

An AI agent that completes CTF (capture-the-flag) challenges using reasoning models, an agent loop and only a single tool: HTTP requests. It successfully does SQL injection and several cookie spoofing attacks of increasing complexity.