MindLoom

Your AI-powered creative assistant

MindLoom

Building open-source tools at the intersection of artificial intelligence and cybersecurity. From autonomous AI agents to offensive security frameworks — everything we build is free, transparent, and built to perform.

Our Mission

We believe the future belongs to those who can build and defend in equal measure. MindLoom exists to advance open artificial intelligence — making capable, uncensored models and autonomous agents available to everyone — while simultaneously making the world a more secure place by releasing professional-grade security tools that arm defenders, red teams, and researchers with the same capabilities as the most sophisticated operators.

Open source. Open knowledge. Open security.

MindLoom Security

Sentinel

C · Python
gitlab.com/mind-loom/Scanner
An automated reconnaissance and vulnerability scanner that runs the full discovery pipeline over a rotating Tor proxy network.
Tor Proxy Pool Subdomain Enumeration Vulnerability Scan WPScan XSS Detection Report
Tor Rotation: Auto-burn on 429/503 XSS Engine: 1,200+ payload variants Takeover Detection: Subjack + Subzy Exploit Modules: Lighttpd CVEs Pipeline: Nuclei · Nikto · WPScan

Sentinel starts by launching a multi-instance Tor proxy pool that automatically rotates when rate-limited. It discovers subdomains through passive sources (Subfinder, Assetfinder, WaybackURLs, Gau) and active brute-force (Gobuster), then filters live hosts with Httpx. Nuclei and Nikto scan for vulnerabilities, WPScan audits WordPress targets, and the XSS module generates over a thousand obfuscated payloads — firing them through Dalfox and XSStrike at every discovered route. Results are severity-ranked into a clean report.

KillChain

C
gitlab.com/mind-loom/killchain
A rule-based exploitation engine that matches targets by product and version, then automatically dispatches the appropriate exploit.
Rule DSL: Product + version matching Metasploit: Auto-dispatch modules Shodan: Live target ingestion Verification: Pre-exploit checks Custom Tools: Any script or binary Multi-Threaded: C engine

Write a rules file pointing at a target inventory or a Shodan query. Define cases that match on product name and version — when a target matches, KillChain runs verification modules, then dispatches the exploit through Metasploit (with RHOSTS set automatically) or a custom script. Targets are simple pipe-delimited rows — |IP|PORT|PRODUCT|VERSION|ORG| — so feeding scanner output into KillChain takes seconds. The engine is written in C with minimal dependencies: gcc, libcjson, and optionally msfconsole.

CoffeeshopKiller

Bash
gitlab.com/mind-loom/coffeshopkiller
An evil-twin and DNS-spoofing attack framework for wireless security assessments. Fully automated from handshake capture to MITM.
WPA Handshake: airodump + deauth MAC Spoofing: Random or custom DNS Spoof: Redirect domains ARP Spoof: Bettercap MITM Port Redirection: iptables NAT Auto-Connect: wpa_supplicant

CoffeeshopKiller automates the full wireless attack chain. It scans for the target SSID, captures a WPA handshake via aireplay-ng deauthentication, then spoofs its MAC address and connects to the network using wpa_supplicant. Once inside, it launches ARP spoofing through Bettercap to position itself as a man-in-the-middle, DNS spoofs chosen domains to an attacker-controlled IP, and uses iptables NAT to redirect HTTP/HTTPS traffic to a custom listening port — all in a single command.

Sentinel → KillChain → CoffeeshopKiller

Sentinel discovers web-facing vulnerabilities at scale. KillChain automates exploitation of those findings. CoffeeshopKiller handles the wireless and physical access vectors. Together they cover the full spectrum — from external reconnaissance to network-level compromise.

Reconnaissance → Exploitation → Network Access

MindLoom AI

Nova

Python · LLM
gitlab.com/mind-loom/nova
An autonomous AI agent — Jarvis — powered by a local uncensored LLM capable of multi-step reasoning, tool use, and self-directed research.
Local LLM: Gemma-2b GGUF 100-Loop Reasoning: Multi-step Tool Use: SerpAPI · GuardianAPI File Ops: Read/write files Command Execution: Safe sandbox Email: Automated sending

Nova runs Jarvis, an autonomous reasoning agent built on an uncensored Gemma-2b model running locally via llama.cpp. It operates in a 100-loop reasoning cycle, maintaining context across iterations and deciding when to call tools (web search via SerpAPI, knowledge lookup via GuardianAPI, email), execute internal functions (read/write files, run commands), or deliver a final answer. Everything is pure JSON — no markdown, no fluff. It's designed for research automation, intelligence gathering, and tasks that require sustained reasoning without API dependency.

Axiom

Python · ML
gitlab.com/mind-loom/axiom
An open-source AI training project — curated datasets and a 175M parameter model trainer for code generation, built from scratch.
175M Params: From scratch Code Datasets: Python · JSON · Math Topic Datasets: Science · Math · CI/GI LoRA: Fine-tuning support nanoGPT: Karpathy-inspired

Axiom is an open-source AI training pipeline for code generation models. It includes curated training datasets covering Python (core, imports, JSON, math, random), scientific and mathematical topics, and a 175M parameter model trainer built from scratch — inspired by Karpathy's nanoGPT. The project also includes LoRA fine-tuning scripts for adapting the base model to specific code generation tasks. Everything is transparent: the data, the training scripts, and the model architecture.

Nova + Axiom

Nova runs a capable local AI agent today. Axiom is building the next generation — training custom models from scratch with open data. One runs intelligence, the other creates it. Together they represent MindLoom's commitment to open, capable, uncensored AI.

Run AI today · Build AI tomorrow