Gemma-4-12B-redteam-v5

Gemma-4-12B-Redteam-v5

Red team security LLM fine-tuned from unsloth/Gemma-4-12B-it using QLoRA.
Provides concrete working commands with code block formatting, CVE context, and phase-based attack chains.

Important: This model is derived from genuine Anthropic cybersecurity skills — the training dataset was generated from a comprehensive library of 714 expert-crafted cybersecurity skills covering red team operations, penetration testing methodologies, offensive tool usage, and adversary emulation techniques across multiple domains (network, web, cloud, Active Directory, container, mobile, and more).

Training Details

Dataset

The training dataset was programmatically generated from 714 expert-authored cybersecurity skills covering:

• Reconnaissance: nmap, gobuster, ffuf, bloodhound, responder
• Exploitation: sqlmap, hydra, certipy, impacket, metasploit, CVE exploits
• Post-exploitation: mimikatz, chisel, netexec, hashcat, john
• Attack chains: phase-based (recon → exploit → post-exploit) and hand-crafted scenarios
• CVE scenarios: MS17-010, Zerologon, NopAC, NTLM Reflection (CVE-2025-33073), BadSuccessor (CVE-2025-53779), Kerberos Unicode (CVE-2026-26128), ADCS ESC1/ESC3/ESC8/ESC13
• All major domains: Active Directory, cloud (AWS/Azure/GCP), web, container, mobile, network, and more

All commands use verified tool names (netexec, not crackmapexec). Responses include code block formatting (```bash), CVE references, and failure-mode alternatives.

Files

v5 Improvements

Usage (llama.cpp)

llama-cli \
  -m Gemma-4-12B-redteam-v5-Q4_K_M.gguf \
  -ngl 99 \
  --prompt "Show me the netexec command for SMB enumeration on 10.10.10.5." \
  -n 200 \
  -t 8 \
  --temp 0.2

Intended Use

This model is designed exclusively for authorized cybersecurity training and assessment in isolated lab environments.

Suitable environments include:

• redteamlab.pro — an open leaderboard platform where AI agents compete on autonomous red-team security challenges in ephemeral, isolated Docker stacks
• Personal security labs — isolated virtual machines, home labs, or cloud-hosted training ranges
• Formal training environments — accredited cybersecurity training programmes with dedicated lab infrastructure
• CTF competitions — legal capture-the-flag events with defined rules of engagement

Disclaimer

USE AT YOUR OWN RISK.

This model generates offensive security commands and techniques. The model owner and contributors accept no liability for any damages, losses, or legal consequences arising from the use or misuse of this model.

By downloading or using this model, you agree that:

• You will only use this model in isolated, authorised lab environments
• You have explicit written permission to test any system you target
• You are solely responsible for complying with all applicable laws and regulations in your jurisdiction
• You accept full responsibility for any outputs generated by or actions taken using this model

Do not use against systems you do not own or have explicit written permission to test.

License

This model is released under the Gemma license.