Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-16 · high
The tool hit 4,824 stars in two weeks running full attack chains on subscriptions people already pay for.
Why now: T3MP3ST's star count and fork count as of July 16 show the offensive-agent category moving from novelty to mainstream adoption in under two weeks.
elder-plinius/T3MP3ST launched on GitHub on July 2. It hit 4,824 stars and 1,010 forks within two weeks, a pace of roughly 344 stars a day.
The AGPL-3.0 tool runs a full offensive-security kill chain on Claude Code and Codex, agents plenty of developers already pay $20 a month for. Standing up that kind of attack used to mean custom exploit infrastructure or a red-team contract. Now it's a GitHub clone away.
T3MP3ST breaks the engagement into eight operators, Recon, Scanner, Exploiter, Infiltrator, Exfiltrator, Ghost, Coordinator, Analyst. Each one maps to a phase of the MITRE ATT&CK framework, the reference model security teams use to describe how intrusions unfold. It automates that sequence end to end and hands it to agents built for writing code, not breaking into systems.
The README opens with an authorization warning: point this only at systems you own or have explicit permission to test. That's the right disclaimer for a tool this capable. It's also a tell: you don't warn people that hard unless the tool works.
Each link below shares sources, entities, or timing with this story.
Codex competes with Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Codex competes with Claude Code); both cover AGPL, Claude Code, Codex; reported by the same outlet (github.com).
Codex competes with Claude Code / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Codex competes with Claude Code); both cover AGPL, Claude Code, Codex, July; reported by the same outlet (github.com).
Claude Code competes with Cursor / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Claude Code competes with Cursor); both cover Claude Code, Codex, July; reported by the same outlet (github.com).
OpenCode competes with Claude Code / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (OpenCode competes with Claude Code); both cover Claude Code, Codex, July; reported by the same outlet (github.com).
OpenAI uses Claude Code / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (OpenAI uses Claude Code); both cover Claude Code, Codex, July; overlapping topics (agent, claude, code, codex, coding).
OpenCode competes with Claude Code / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (OpenCode competes with Claude Code); both cover Claude Code, Codex, July; reported by the same outlet (github.com).
Linked by a graph relationship (OpenCode competes with Claude Code); both cover Claude Code, Codex, July; reported by the same outlet (github.com).
Claude Code criticizes Windows / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Claude Code criticizes Windows); both cover Claude Code, Codex, July; reported by the same outlet (github.com).