Fintech Alerting & Reliability Platform
OpsGuard is a cybersecurity project with a very specific (and slightly terrifying) mission: find zero-day vulnerabilities in industrial control systems before the bad guys do.
⚠️ Context: Programmable Logic Controllers (PLCs) run power grids, water treatment plants, manufacturing lines. They're also notoriously insecure—many run outdated firmware with no patch management.
🕵️ The Approach: AI-Powered Fuzzing
Traditional vulnerability scanners use predefined signatures (like antivirus definitions). OpsGuard uses LLMs to generate novel attack payloads that exploit unexpected behavior:
- Firmware analysis: Disassemble PLC binaries (ARM/MIPS architectures) to identify input validation routines
- LLM prompt engineering: Feed GPT-4 with Assembly snippets + known CVE patterns → Generate 1000s of mutation-based test cases
- Automated testing: Deploy payloads to sandboxed PLC emulators (QEMU-based virtual devices)
- Anomaly detection: Monitor for crashes, memory corruption, privilege escalation using runtime instrumentation (Frida hooks)
🎯 Discovered Vulnerabilities (Proof-of-Concept)
| Buffer Overflow | Malformed Modbus packet → remote code execution (CVE-pending) |
| Auth Bypass | Default credentials in undocumented admin panel (vendor notified) |
| Timing Attack | Password check leaks length via response time differential |
💻 Technical Stack
- LLM Integration: OpenAI API + Anthropic Claude for diversity in payload generation
- Binary Analysis: Ghidra (NSA's reverse engineering tool) + custom Python scripts
- Virtualization: Docker containers running QEMU ARM emulators for safe testing
- Alerting: Slack webhooks for instant notification when a crash is detected
🔒 Responsible disclosure: All findings reported to vendors via coordinated vulnerability disclosure (CVD) process. Security, not chaos.
This project sits at the intersection of AI, cybersecurity, and critical infrastructure—areas that desperately need more attention
- StackJavaScript, LLM, Cybersecurity
- Sourcehttps://github.com/Shorya-agarwal/OpsGuard
