Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-16 · high
The tool hit 4,824 stars in two weeks running full attack chains on subscriptions people already pay for.
Why now: T3MP3ST's star count and fork count as of July 16 show the offensive-agent category moving from novelty to mainstream adoption in under two weeks.
elder-plinius/T3MP3ST launched on GitHub on July 2. It hit 4,824 stars and 1,010 forks within two weeks, a pace of roughly 344 stars a day.
The AGPL-3.0 tool runs a full offensive-security kill chain on Claude Code and Codex, agents plenty of developers already pay $20 a month for. Standing up that kind of attack used to mean custom exploit infrastructure or a red-team contract. Now it's a GitHub clone away.
T3MP3ST breaks the engagement into eight operators, Recon, Scanner, Exploiter, Infiltrator, Exfiltrator, Ghost, Coordinator, Analyst. Each one maps to a phase of the MITRE ATT&CK framework, the reference model security teams use to describe how intrusions unfold. It automates that sequence end to end and hands it to agents built for writing code, not breaking into systems.
The README opens with an authorization warning: point this only at systems you own or have explicit permission to test. That's the right disclaimer for a tool this capable. It's also a tell: you don't warn people that hard unless the tool works.
Each link below shares sources, entities, or timing with this story.
T3MP3ST uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover AGPL, Claude Code, Codex; reported by the same outlet (github.com).
T3MP3ST uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover Claude Code, Codex, July; reported by the same outlet (github.com).
T3MP3ST uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover Claude Code, Codex; reported by the same outlet (github.com).
T3MP3ST uses Codex / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (T3MP3ST uses Codex); both cover Claude Code, Codex; reported by the same outlet (github.com).
T3MP3ST uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover Claude Code, Codex; reported by the same outlet (github.com).
T3MP3ST uses Codex / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (T3MP3ST uses Codex); both cover Claude Code, Codex; reported by the same outlet (github.com).
T3MP3ST uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover Claude Code, Codex; reported by the same outlet (github.com).
Linked by a graph relationship (T3MP3ST uses Claude Code); both cover Claude Code, Codex; reported by the same outlet (github.com).