arXiv (Computer Science - Cryptography and Security) • 1d
MazeRunner: Nonlinear LLM Orchestration for Automated Penetration Testing
MazeRunner is a multi-agent orchestration framework designed to eliminate the "linearity trap" in autonomous black-box penetration testing. By utilizing Claude Sonnet 4.5, the system replaces traditional depth-first exploration with a non-linear attack graph model capable of dynamic branch switching and long-range clue correlation. In benchmarks against 10 HackTheBox targets, MazeRunner achieved user-level access on 6/10 targets and root access on 2/10, significantly outperforming baseline agents like PentestGPT-V2 and Claude Code, which failed to achieve root access on any target.