{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SOYHTN3AGIW2USJZFKKUFFFXLO","short_pith_number":"pith:SOYHTN3A","canonical_record":{"source":{"id":"2505.07089","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-11T18:38:00Z","cross_cats_sorted":[],"title_canon_sha256":"031cfaf7e5e2a8d54df1f3fc45238d7e2ec979de192fda8369e7213215706757","abstract_canon_sha256":"45e16e3bd5982fafe338a52f23d92a91973985e55c6a965613b53385c460b2fc"},"schema_version":"1.0"},"canonical_sha256":"93b079b760322daa49392a954294b75b8749602815cd04b4916dba36110673d0","source":{"kind":"arxiv","id":"2505.07089","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.07089","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"arxiv_version","alias_value":"2505.07089v3","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.07089","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_12","alias_value":"SOYHTN3AGIW2","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_16","alias_value":"SOYHTN3AGIW2USJZ","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_8","alias_value":"SOYHTN3A","created_at":"2026-07-05T11:26:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SOYHTN3AGIW2USJZFKKUFFFXLO","target":"record","payload":{"canonical_record":{"source":{"id":"2505.07089","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-11T18:38:00Z","cross_cats_sorted":[],"title_canon_sha256":"031cfaf7e5e2a8d54df1f3fc45238d7e2ec979de192fda8369e7213215706757","abstract_canon_sha256":"45e16e3bd5982fafe338a52f23d92a91973985e55c6a965613b53385c460b2fc"},"schema_version":"1.0"},"canonical_sha256":"93b079b760322daa49392a954294b75b8749602815cd04b4916dba36110673d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:26:51.134523Z","signature_b64":"SdEPoxQDbP0lcjmEicGitb2dX061856Q3DWXS8qEx0FPYPn4bchfSy/Fd/ReRbxo2GrKYT9C1Pf5/S7qq2+DDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"93b079b760322daa49392a954294b75b8749602815cd04b4916dba36110673d0","last_reissued_at":"2026-07-05T11:26:51.134057Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:26:51.134057Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.07089","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NoPcwinTTf84JPeqeY8RKwrN9Wd8xlu+N4CRaWl0C15KU3jiOu5SRhCTABhRqoPb4U0tVZ0mnT2F5pOR05BqBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:57:49.724239Z"},"content_sha256":"c23a1e27e8796204304eeeba65840117a124ba2458b76f176facda4864b717d9","schema_version":"1.0","event_id":"sha256:c23a1e27e8796204304eeeba65840117a124ba2458b76f176facda4864b717d9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SOYHTN3AGIW2USJZFKKUFFFXLO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RefPentester: A Knowledge-Informed Self-Reflective Penetration Testing Framework Based on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Hanzheng Dai, Jun Yan, Yuanliang Li, Zhibo Zhang","submitted_at":"2025-05-11T18:38:00Z","abstract_excerpt":"Automated penetration testing (AutoPT) powered by large language models (LLMs) has gained attention for its ability to automate ethical hacking processes and identify vulnerabilities in target systems by leveraging the inherent knowledge of LLMs. However, existing LLM-based AutoPT frameworks often underperform compared to human experts in challenging tasks for several reasons: the imbalanced knowledge used in LLM training, short-sightedness in the planning process, and hallucinations during command generation. Moreover, the trial-and-error nature of the PT process is constrained by existing fr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.07089","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.07089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DCrodEBu0Dgjim8CZWCIPq7/JoJokFrFYVxQaIiwUv3ztPbykR4JxfTeYoiBD8NKHcHqaxLGc/lZ/InhHe9BAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:57:49.724621Z"},"content_sha256":"ee7580b3bf6ae81ed9001ea5c0b63df699d6250ab69f9b2272c5cef0074e3962","schema_version":"1.0","event_id":"sha256:ee7580b3bf6ae81ed9001ea5c0b63df699d6250ab69f9b2272c5cef0074e3962"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/bundle.json","state_url":"https://pith.science/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T04:57:49Z","links":{"resolver":"https://pith.science/pith/SOYHTN3AGIW2USJZFKKUFFFXLO","bundle":"https://pith.science/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/bundle.json","state":"https://pith.science/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SOYHTN3AGIW2USJZFKKUFFFXLO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SOYHTN3AGIW2USJZFKKUFFFXLO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"45e16e3bd5982fafe338a52f23d92a91973985e55c6a965613b53385c460b2fc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-11T18:38:00Z","title_canon_sha256":"031cfaf7e5e2a8d54df1f3fc45238d7e2ec979de192fda8369e7213215706757"},"schema_version":"1.0","source":{"id":"2505.07089","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.07089","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"arxiv_version","alias_value":"2505.07089v3","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.07089","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_12","alias_value":"SOYHTN3AGIW2","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_16","alias_value":"SOYHTN3AGIW2USJZ","created_at":"2026-07-05T11:26:51Z"},{"alias_kind":"pith_short_8","alias_value":"SOYHTN3A","created_at":"2026-07-05T11:26:51Z"}],"graph_snapshots":[{"event_id":"sha256:ee7580b3bf6ae81ed9001ea5c0b63df699d6250ab69f9b2272c5cef0074e3962","target":"graph","created_at":"2026-07-05T11:26:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.07089/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Automated penetration testing (AutoPT) powered by large language models (LLMs) has gained attention for its ability to automate ethical hacking processes and identify vulnerabilities in target systems by leveraging the inherent knowledge of LLMs. However, existing LLM-based AutoPT frameworks often underperform compared to human experts in challenging tasks for several reasons: the imbalanced knowledge used in LLM training, short-sightedness in the planning process, and hallucinations during command generation. Moreover, the trial-and-error nature of the PT process is constrained by existing fr","authors_text":"Hanzheng Dai, Jun Yan, Yuanliang Li, Zhibo Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-11T18:38:00Z","title":"RefPentester: A Knowledge-Informed Self-Reflective Penetration Testing Framework Based on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.07089","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c23a1e27e8796204304eeeba65840117a124ba2458b76f176facda4864b717d9","target":"record","created_at":"2026-07-05T11:26:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"45e16e3bd5982fafe338a52f23d92a91973985e55c6a965613b53385c460b2fc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-05-11T18:38:00Z","title_canon_sha256":"031cfaf7e5e2a8d54df1f3fc45238d7e2ec979de192fda8369e7213215706757"},"schema_version":"1.0","source":{"id":"2505.07089","kind":"arxiv","version":3}},"canonical_sha256":"93b079b760322daa49392a954294b75b8749602815cd04b4916dba36110673d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"93b079b760322daa49392a954294b75b8749602815cd04b4916dba36110673d0","first_computed_at":"2026-07-05T11:26:51.134057Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:26:51.134057Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SdEPoxQDbP0lcjmEicGitb2dX061856Q3DWXS8qEx0FPYPn4bchfSy/Fd/ReRbxo2GrKYT9C1Pf5/S7qq2+DDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:26:51.134523Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.07089","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c23a1e27e8796204304eeeba65840117a124ba2458b76f176facda4864b717d9","sha256:ee7580b3bf6ae81ed9001ea5c0b63df699d6250ab69f9b2272c5cef0074e3962"],"state_sha256":"653e27a7e7ca32f9aaf6af0e2a2fd06ddeb6cfe194aa5294affc19c21d545f8d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QLqQNqnAY7O1jL1fhNb7MCq6xyj3MmhNT5Z3O7jMZG3K1HwM/CN2ESSUIRmQ6lUK8s75owM/JV5VSyJhvV97Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T04:57:49.726802Z","bundle_sha256":"83dfc490e512fc6bad5471d8f76bf23311ab1881ab60917767f0264fb95d9909"}}