{"id":"https://openalex.org/W7225746294","doi":"https://doi.org/10.5281/zenodo.24117885","title":"RS-2026-098 - The Kali Problem: AI-Assisted Offensive Tool Development and the Collapse of the Skill Floor","display_name":"RS-2026-098 - The Kali Problem: AI-Assisted Offensive Tool Development and the Collapse of the Skill Floor","publication_year":2026,"publication_date":"2026-11-10","ids":{"openalex":"https://openalex.org/W7225746294","doi":"https://doi.org/10.5281/zenodo.24117885"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24117885","doi":"https://doi.org/10.5281/zenodo.24117885","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24117885","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24117885","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140680363","display_name":"Richard Barron","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Barron, Richard","raw_affiliation_strings":["Red Specter Security Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Red Specter Security Research","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5140680363"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.2815000116825104,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.2815000116825104,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.22619999945163727,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.20730000734329224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.9427000284194946},{"id":"https://openalex.org/C44210515","wikidata":"https://www.wikidata.org/wiki/Q16968978","display_name":"Bespoke","level":2,"score":0.7067999839782715},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.5796999931335449},{"id":"https://openalex.org/C2777629366","wikidata":"https://www.wikidata.org/wiki/Q292351","display_name":"Kali","level":2,"score":0.4887999892234802},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4790000021457672},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4611000120639801},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.451200008392334},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.3506999909877777},{"id":"https://openalex.org/C80107235","wikidata":"https://www.wikidata.org/wiki/Q7162625","display_name":"Penetration (warfare)","level":2,"score":0.32350000739097595},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.31470000743865967},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C201650216","wikidata":"https://www.wikidata.org/wiki/Q829492","display_name":"Procurement","level":2,"score":0.29179999232292175},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.2721000015735626},{"id":"https://openalex.org/C31858485","wikidata":"https://www.wikidata.org/wiki/Q959782","display_name":"Excavation","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.26089999079704285}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24117885","doi":"https://doi.org/10.5281/zenodo.24117885","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24117885","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.24117886","doi":"https://doi.org/10.5281/zenodo.24117886","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24117886","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24117885","doi":"https://doi.org/10.5281/zenodo.24117885","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24117885","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0],"document":[1],"a":[2,33,51,122],"structural":[3],"capability":[4],"shift":[5],"in":[6,32],"offensive":[7,22,118],"security:":[8],"the":[9,37,97,100,104],"combination":[10],"of":[11],"Kali":[12,68],"Linux":[13],"\u2014":[14,25,87,90],"apurpose-built":[15],"penetration":[16],"testing":[17],"distribution":[18],"shipping":[19],"over":[20],"600":[21],"security":[23,107],"tools":[24,78],"with":[26],"aconversational":[27],"AI":[28,60,109],"coding":[29],"assistant":[30,61],"operating":[31],"local":[34],"terminal":[35],"eliminates":[36],"expertise":[38],"barrier":[39],"to":[40,57,62],"bespokeoffensive":[41],"tool":[42],"development.":[43],"Through":[44],"direct":[45],"empirical":[46],"observation,":[47],"we":[48],"demonstrate":[49],"that":[50],"single":[52],"naturallanguage":[53],"prompt":[54],"is":[55,91,120],"sufficient":[56],"instruct":[58],"an":[59,125],"read,":[63],"modify,":[64],"and":[65,76,102,111,124],"redeploy":[66],"existing":[67],"tools,construct":[69],"custom":[70],"exploitation":[71],"frameworks,":[72],"generate":[73],"targeted":[74],"payloads,":[75],"chain":[77],"into":[79],"automatedattack":[80],"pipelines.":[81],"The":[82,113],"sole":[83],"stated":[84],"safety":[85],"constraint":[86],"user-asserted":[88],"authorisation":[89],"unverified":[92],"andunenforceable.":[93],"This":[94],"paper":[95],"documents":[96],"finding,":[98],"analyses":[99],"mechanism,":[101],"frames":[103],"implications":[105],"forthe":[106],"industry,":[108],"developers,":[110],"policymakers.":[112],"skill":[114],"floor":[115],"for":[116],"bespoke":[117],"tooldevelopment":[119],"now":[121],"subscription":[123],"ISO.":[126]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-11T00:00:00"}