Red Specter NEMESIS

Autonomous Adversarial Reasoning Pentester — 11 weapons. 8 phases. 2,011 tests.

Overview

NEMESIS is an autonomous adversarial reasoning engine. Point it at a target AI system. It takes over from there — observing, reasoning, pivoting, escalating, and adapting until it finds a way through. Not a scanner. Not a framework. An opponent.

Traditional security tools run a fixed list of checks and report what they find. NEMESIS thinks. It uses an LLM reasoning loop to analyse responses, formulate hypotheses, select weapons, execute attacks, interpret results, and adapt its strategy in real time. Every engagement is unique because NEMESIS reasons about the target, not just tests it.

Seven weapons. Eight phases. One reasoning engine that decides which weapon to use, when, and why. NEMESIS orchestrates the entire Red Specter offensive pipeline — GLASS, FORGE, ARSENAL, PHANTOM, POLTERGEIST, SPECTER SOCIAL, and PHANTOM KILL — as a single autonomous adversary.

Installation

Quick Start

v2.0 — The Digital Army

NEMESIS v1 is a single reasoning engine with 6 specialist agents. NEMESIS v2 scales this to a multi-commander autonomous adversarial engine with 40 reasoning entities operating simultaneously.

Command Hierarchy

Fault Tolerance

If a commander is detected and neutralised, the Supreme Commander detects loss of heartbeat within 5 seconds. A replacement commander spawns automatically with full state transfer from the dead commander’s last checkpoint. The engagement continues without interruption. NEMESIS v2 cannot be stopped by targeting individual components.

Cross-Domain Intelligence Fusion

The FindingsAggregator v2 operates at Supreme Commander level, receiving intelligence from all three operational domains simultaneously. When Intelligence finds a credential AND Offensive finds an exposed service, Supreme chains them in real time. When Offensive achieves code execution AND Intelligence has profiled the human admin, Supreme activates Social Agent while the machine is compromised.

Engagement Modes (v2)

v2 CLI

The Eight-Phase Engagement Loop

Every NEMESIS engagement cycles through eight phases. Phase 0 performs native network reconnaissance before the LLM reasoning loop begins.

Weapons Arsenal

NEMESIS doesn't attack directly. It reasons about the target and dispatches the right weapon for the job.

CLI Reference

LLM Backends

NEMESIS requires an LLM to reason. Three backends are supported:

UNLEASHED Mode

Standard mode finds vulnerabilities. UNLEASHED mode goes through them.

Ed25519 cryptographic override. One private key. Dual-gate: --override (dry-run) then --override --confirm-destroy (live).

Pipeline Integration

NEMESIS orchestrates the full Red Specter pipeline. It sits above all stages — the reasoning engine that decides which weapon to use, when, and why.

Evidence & Cryptography

Report Output

Every engagement produces a full report: executive summary, chronological timeline, all findings with ATLAS mapping, attack graph, exploitation paths, statistics, and remediation recommendations.

• Executive summary — high-level engagement outcome
• Chronological timeline — every phase, decision, and weapon invocation
• Findings — all vulnerabilities with MITRE ATLAS mapping
• Attack graph — visual representation of exploitation paths
• Statistics — reasoning loops, weapons used, success rates
• Remediation — prioritised recommendations per finding

Disclaimer