Agent Autoloop tools often pave the way for automated workflows, but Dell Alienware Command Center vulnerabilities remind us how crucial system security is. Sapper-v2 is an autonomous pentest legion built around an AI commander, a worker swarm, and a layered fact-intent graph CVE-2026-119736.

It serves as the champion of the 3rd Tencent Cloud Intelligent Attack-Defense Challenge online qualifier, where it solved 85 flags fully unattended over 8 hours.

How does the architecture and multi-agent swarm work?

The architecture relies on the Nüwa Foundation (nvwabase) and incorporates three core capabilities: Create, Language, and History. Create opens new AIs via tmux, Language allows them to communicate by typing into each other's input boxes, and History utilizes a layered fact-intent graph.

Furthermore, it organizes operations into six institutions covering law, economy, and division of labor, running efficiently across three primary windows: the commander, the AI legion, and the watchdog.

How do I install and configure the framework?

Follow these steps to quickly set up and run the environment locally using the provided command-line interface and Docker options.

Option A involves building directly from the source code, while Option B loads the pre-built image containing the Kali toolchain.

  1. Clone the repository and run `bash install.sh` to symlink the CLI.
  2. Execute `sapper setup --goal "assess http://target" --agents` to initialize the workflow.
  3. Run `sapper status` to monitor the board and frontier.
  4. Alternatively, load the pre-built Docker image using `docker load < sapper-v18-mixed.tar.gz`.