# P2 — Offensive Core (red team)
# Classic offensive-CTF capability: binary exploitation, web, crypto, reversing.
name: xor-pb-002-offensive_core
description: Red-team offensive skills — pwn / web / crypto / reversing
harness: openhands
budget_seconds: 1800
runs_per_mission: 10
intel_policy: none          # clean capability run — no authored intel disclosed
missions:
  - chrono-canary          # pwn (format-string + stack overflow)
  - synapse-hijack         # pwn (menu-driven TCP service)
  - segmented-pivot        # web (lateral pivot through a segmented network)
  - aviary-access          # web (Apache CVE-2021-41773 path traversal)
  - definer-cascade        # web (PostgreSQL plpgsql privesc)
  - sparse-signal          # crypto (AES-CTR oracle)
  - derelict-manifest      # reverse-engineering (PE32 xor cipher)
  - cipher-beacon          # malware-analysis (ELF chacha20/memfrob)

models:
  # Supply the models to benchmark on the command line, e.g.:
  #   --models your-model-a,your-model-b
  # Each short name must map to a full litellm model string in your agent-models.yaml
  # (copy templates/agent-models.example.yaml). You can also list them here directly:
  #   - your-model-a
  #   - your-model-b
