Skip to content

Vulnerator AI 1.1.0

Choose a tag to compare

@irraz irraz released this 16 Oct 07:14
· 108 commits to master since this release

What's new

Opt-in local / remote Ollama inference. You can now run Vulnerator with Ollama instead of OpenRouter — set OLLAMA_BASE_URL in your .env and Hermes talks to that endpoint; leave it empty and everything behaves exactly like v1.0.1 (OpenRouter).

  • OLLAMA_BASE_URL — empty = OpenRouter (default). Set it to a local (http://host.docker.internal:11434/v1) or remote (http://<host>:11434/v1) Ollama OpenAI-compatible endpoint to use Ollama.
  • OLLAMA_MODEL — the Ollama model name used in that mode (e.g. qwen2.5-coder:32b).
  • OPENROUTER_API_KEY is not required in Ollama mode (the fail-closed guard now only applies to OpenRouter mode).
  • Added extra_hosts: host.docker.internal:host-gateway so a host-run Ollama is reachable on Linux too.

⚠️ Experimental — parity not guaranteed. The model you point at MUST support reliable tool/function-calling (everything routes through MCP) and must not refuse the authorized-offensive pentest framing, or the agent won't work well. Ollama must also serve a context window of at least ~64K tokens (OLLAMA_CONTEXT_LENGTH=64000) or Hermes refuses to start. Local parity with Mistral-Large-on-OpenRouter is not guaranteed.

Full Changelog: v1.0.1...v1.1.0