T3MP3ST Wires an 8-Operator MITRE ATT&CK Kill Chain Onto the Coding Agent You Already Run

GitHub·medium signal

elder-plinius/T3MP3ST (AGPL-3.0, created 2026-07-02, 4,824 stars at ~344/day with 1,010 forks) is a multi-agent offensive-security meta-harness that drives Claude Code, Codex, Hermes, or offline models 'keylessly' — no extra API keys — through eight specialized operators mapped to MITRE ATT&CK phases: Recon, Scanner, Exploiter, Infiltrator, Exfiltrator, Ghost, Coordinator, and Analyst. Targets span web apps, CTF challenges, source code, embedded systems, and smart contracts, driven from a browser War Room or CLI. No formal releases yet across 127 commits. The README leads with an authorization warning — point it only at systems you own or have written permission to test — and the star velocity is itself the signal: offensive tooling built on subscription coding agents is now a mainstream category.