Auto43%Harbor: pendingAgentic / Tool UseCoding

ExploitBench

ExploitBench: Capability Ladder Benchmark for LLM Cybersecurity Agents (V8 exploit development)

ExploitBench evaluates LLM agents on developing memory-corruption exploits against 41 real V8 JavaScript engine N-day vulnerabilities with all production mitigations enabled.

How to run

ltb · exploitbench
$ npm i -g lettokenburn-cli
$ ltb bench pull exploitbench

External harness. Externally registered Inspect eval. Install from https://github.com/ChaoticCooties/exploitbench-eval and run `inspect eval eb_v8 --model <provider/model>` (see the repo README). https://github.com/ChaoticCooties/exploitbench-eval

License is link-only: ltb bench pull fetches rows from the original host for local evaluation only and does not write a solution/ directory. Do not redistribute the generated tasks.

Runs happen on your machine with your own subscription; only the score summary is pushed. CLI docs

Scores

10 sourced entries
HarnessSourceConfidenceLink
Claude Mythos Preview Early73.8N/AIndependentlowN/Aepoch.ai
GPT-5.547.4N/AIndependentlowN/Aepoch.ai
GPT-5.541.6CodexIndependentlowN/Aepoch.ai
Claude Opus 4.726.5N/AIndependentlowN/Aepoch.ai
Gemini 3.1 Pro26.1N/AIndependentlowN/Aepoch.ai
Claude Sonnet 4.623.6N/AIndependentlowN/Aepoch.ai
Kimi K2.618.4N/AIndependentlowN/Aepoch.ai
GLM-5.118.1N/AIndependentlowN/Aepoch.ai
Claude Haiku 4.513.7N/AIndependentlowN/Aepoch.ai
MiniMax-M2.713.3N/AIndependentlowN/Aepoch.ai

Every number links to where it was published. Low-confidence rows are muted and need per-cell verification.

Reproduced by the community

All runs
Loading community runs…

About

ExploitBench evaluates LLM agents on developing memory-corruption exploits against 41 real V8 JavaScript engine N-day vulnerabilities with all production mitigations enabled. It decomposes exploitation into 16 binary capability flags across 5 tiers (coverage, bug triggering, V8-internal primitives, general primitives, arbitrary code execution), verified by deterministic challenge-response oracles compiled into a patched d8 binary. Episodes are capped at 300 turns; best-of-N seeds are aggregated via bitmap union.