CorryL commited on
Commit
8aa4ec3
Β·
verified Β·
1 Parent(s): e99c149

Update README.md

Browse files
Files changed (1) hide show
  1. README.md +171 -3
README.md CHANGED
@@ -1,3 +1,171 @@
1
- ---
2
- license: apache-2.0
3
- ---
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ ---
2
+ language:
3
+ - en
4
+ - it
5
+ tags:
6
+ - cybersecurity
7
+ - red-team
8
+ - ctf
9
+ - penetration-testing
10
+ - offensive-security
11
+ - uncensored
12
+ - llama-cpp
13
+ - gguf
14
+ base_model: Qwen/Qwen3.5-9B
15
+ license: apache-2.0
16
+ ---
17
+
18
+ <p align="center">
19
+ <img src="https://huggingface.co/CorryL/piccolo_gorgone/resolve/main/banner.PNG" alt="Piccolo Gorgone Banner"/>
20
+ </p>
21
+
22
+ # πŸ™ Piccolo Gorgone
23
+
24
+ ![Base Model](https://img.shields.io/badge/Base-Qwen3.5--9B-blue?style=flat-square)
25
+ ![Fine-tuning](https://img.shields.io/badge/Fine--tuned-Unsloth%20%2B%20QLoRA-orange?style=flat-square)
26
+ ![Domain](https://img.shields.io/badge/Domain-Offensive%20Security-red?style=flat-square)
27
+ ![Censorship](https://img.shields.io/badge/Censorship-None-black?style=flat-square)
28
+ ![Format](https://img.shields.io/badge/Format-GGUF%20Q4__K__M-green?style=flat-square)
29
+
30
+ <p align="center">
31
+ Developed by <strong>CorryL</strong> β€” Penetration Tester & Ethical Hacker
32
+ </p>
33
+
34
+ ---
35
+
36
+ **Piccolo Gorgone** is a Large Language Model fine-tuned for **red team operations**, **CTF competitions**, and **offensive cybersecurity**. Built on Qwen 3.5 9B and trained on a curated dataset of over **16,000 real-world offensive security examples**, it delivers technically precise and direct responses without the safety restrictions that limit general-purpose models. Piccolo Gorgone is fully **agentic** and natively integrates with the most widely used offensive security frameworks, enabling automated and orchestrated workflows directly from your existing toolchain.
37
+
38
+ ---
39
+
40
+ ## Local Execution & Privacy
41
+
42
+ Piccolo Gorgone was designed from the ground up to run on **local consumer hardware**, with no dependency on cloud APIs or external services. The choice of a 9B parameter model is deliberate: it represents the optimal balance between **technical capability** and **accessible hardware requirements**, enabling execution on a single consumer GPU with Q4_K_M quantization.
43
+
44
+ This approach ensures that all sensitive information β€” penetration test reports, vulnerability details, client data β€” stays **exclusively on your machine**, never transiting through third-party servers.
45
+
46
+ ---
47
+
48
+ ## Intended Use
49
+
50
+ This model is designed for:
51
+
52
+ - Professional **penetration testers** and red teamers operating in authorized environments
53
+ - **CTF competitors** (HackTheBox, CTFtime, and similar platforms)
54
+ - Offensive security **researchers and instructors**
55
+ - Security teams performing **threat modeling and attack simulation**
56
+
57
+ > ⚠️ **Disclaimer:** This model is intended exclusively for ethical and professional use in authorized environments. The author bears no responsibility for illegal or unauthorized use.
58
+
59
+ ---
60
+
61
+ ## Agentic Integration
62
+
63
+ Piccolo Gorgone supports **agentic workflows** and is designed to operate as an autonomous reasoning engine within offensive security pipelines. It is compatible with the following frameworks and tools:
64
+
65
+ | Framework | Use Case |
66
+ |-----------|----------|
67
+ | **CAI (Cybersecurity AI)** | Autonomous red team agents and attack orchestration |
68
+ | **Roo Code** | AI-assisted code generation and vulnerability research |
69
+ | **LangChain / LlamaIndex** | Custom agentic pipelines and tool-calling workflows |
70
+ | **OpenAI-compatible APIs** | Drop-in integration via llama-server OpenAI-compatible endpoint |
71
+
72
+ > Since llama-server exposes an **OpenAI-compatible REST API**, Piccolo Gorgone can be used as a local drop-in replacement for any framework that supports custom endpoints β€” no code changes required.
73
+
74
+ ---
75
+
76
+
77
+ ## Model Details
78
+
79
+ | Property | Value |
80
+ |----------|-------|
81
+ | **Base Model** | Qwen 3.5 9B |
82
+ | **Fine-tuning Method** | QLoRA via Unsloth |
83
+ | **Format** | GGUF (Q4_K_M) |
84
+ | **Context Length** | 128,000 tokens |
85
+
86
+ ---
87
+
88
+ ## Training Dataset
89
+
90
+ The model was trained on a dataset of **16,272 examples** assembled from the following categories:
91
+
92
+ | Category | Description |
93
+ |----------|-------------|
94
+ | πŸ“– **Offensive Knowledge Bases** | Technical guides and offensive techniques from authoritative open sources |
95
+ | 🏴 **CTF Writeups & Solutions** | Real competition writeups and walkthroughs from platforms and academic datasets |
96
+ | πŸ”΄ **Red Team TTPs** | Tactics, Techniques, and Procedures aligned with adversarial frameworks |
97
+ | πŸ—‘οΈ **Exploits & Payloads** | Real-world payloads, shellcode, and proof-of-concept exploits |
98
+ | πŸ› **CVE Database (up to 2025)** | Comprehensive vulnerability data including the most recent 2025 CVEs |
99
+ | πŸ”¬ **Research Papers** | Academic papers on offensive security and adversarial techniques |
100
+
101
+ > The dataset underwent rigorous deduplication to ensure training quality and stability.
102
+
103
+ ---
104
+
105
+ ## Benchmark
106
+
107
+ > πŸ“Š Comparative benchmark between **Qwen 3.5 9B (base)** and **Piccolo Gorgone** on offensive security tasks.
108
+
109
+ **Qwen 3.5 9B**
110
+ <p align="left">
111
+ <img src="https://huggingface.co/CorryL/piccolo_gorgone/resolve/main/BM_Qween.png"/>
112
+ </p>
113
+
114
+ **Piccolo Gorgone**
115
+ <p align="left">
116
+ <img src="https://huggingface.co/CorryL/piccolo_gorgone/resolve/main/BM_PG.png"/>
117
+ </p>
118
+ ---
119
+
120
+ ## Inference
121
+
122
+ ### llama-server (recommended)
123
+
124
+ ```bash
125
+ llama-server \
126
+ -m Qwen3.5-9B_Piccolo_Gorgone.Q4_K_M.gguf \
127
+ --host 0.0.0.0 \
128
+ --port 8081 \
129
+ -ngl 99 \
130
+ -c 32768 \
131
+ -fa on \
132
+ --cache-reuse 256 \
133
+ -ctk q8_0 \
134
+ -ctv q8_0 \
135
+ -b 512 -ub 512 \
136
+ --temp 1.0 \
137
+ --top-p 0.95 \
138
+ --top-k 20 \
139
+ --min-p 0.0 \
140
+ --presence-penalty 1.5 \
141
+ --repeat-penalty 1.0 \
142
+ --repeat-last-n 64 \
143
+ --chat-template-kwargs '{"enable_thinking":false}'
144
+ ```
145
+
146
+ > The `-c 32768` value defines the active context window. You can increase it up to `131072` to leverage the model's full context, or reduce it based on the available VRAM on your machine. A larger context requires more memory but enables longer conversations and deeper analysis sessions.
147
+
148
+ > `--chat-template-kwargs '{"enable_thinking":false}'` disables Qwen3.5's internal chain-of-thought reasoning, producing faster and more direct responses β€” ideal for operational use.
149
+
150
+ ### Inference Parameters
151
+
152
+ | Parameter | Value | Notes |
153
+ |-----------|-------|-------|
154
+ | `--temp` | `1.0` | Creativity/coherence balance |
155
+ | `--top-p` | `0.95` | Nucleus sampling |
156
+ | `--top-k` | `20` | Vocabulary filtering |
157
+ | `--min-p` | `0.0` | Minimum probability threshold |
158
+ | `--presence-penalty` | `1.5` | Reduces topic repetition |
159
+ | `--repeat-last-n` | `64` | Repetition penalty window |
160
+ | `-ngl` | `99` | Full GPU offload |
161
+ | `-c` | `32768` | Context window (adjustable) |
162
+
163
+ > **Tip:** For analytical tasks such as CVE analysis or code review, lower `--temp` to `0.4–0.6` for more deterministic output.
164
+
165
+ ---
166
+
167
+ ## Author
168
+
169
+ [![LinkedIn](https://img.shields.io/badge/LinkedIn-Profile-0077B5?style=flat-square&logo=linkedin)](https://www.linkedin.com/in/corrado-liotta-6111a821/)
170
+ [![Hugging Face](https://img.shields.io/badge/HuggingFace-Profile-yellow?style=flat-square)](https://huggingface.co/CorryL)
171
+