OpenGnosis is an interactive terminal toolkit that unifies SOTA LLM jailbreak and red-team methods under a single REPL. Powered by OpenRouter, it delivers every method through a terminal interface built for researchers and red-teamers.
git clone https://github.com/CodaCipher/opengnosis.git
cd opengnosis
pip install -e .
opengnosisSet your OpenRouter key before the first run:
/provider openrouter sk-or-v3-...- Five methods, one REPL — Morpheus, AutoDAN-BoN, AutoDAN-Max, Tempest, SLIP
- Themed terminal UI — carbon, industrial, corrosion, and dust palettes
- OpenRouter-backed — use any valid OpenRouter model ID; autocomplete only suggests recommended examples
- Configurable presets —
/template balanced,frontier, orbudgetto get started instantly
| Method | Type | Paper |
|---|---|---|
| Morpheus | Multi-turn attacker→target→evaluator loop with evolutionary strategy memory | Algorithm 1 (in-house) |
| AutoDAN-BoN | Best-of-N parallel sampling | Hughes et al., arXiv:2410.02180 |
| AutoDAN-Max | Beam search over strategy pool | Liu et al., ICLR 2025, arXiv:2510.05379 |
| Tempest | BFS tree search with partial-compliance scoring | Zhou & Arel, ACL 2025, arXiv:2503.10619 |
| SLIP | Self-jailbreaking via lexical anchor insertion | Kulshreshtha et al., arXiv:2601.02670 |
See CONTRIBUTING.md for setup, code standards, and how to add new attack methods.
See SECURITY.md for responsible disclosure and dual-use policy.
OpenGnosis is released under the GNU Affero General Public License v3.0 or later. You are free to use, study, modify, and redistribute the software. But any network use (e.g. SaaS) must provide the complete source code to users. Closed-source forks are not permitted. See LICENSE for the full text.
@software{opengnosis2026,
title = {OpenGnosis: A Unified Terminal Toolkit for LLM Jailbreak Research},
author = {CodaCipher},
year = {2026},
url = {https://github.com/CodaCipher/opengnosis}
}gnosis - γνῶσις - knowledge
© 2026 CodaCipher