Instructions to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Notebooks
- Google Colab
- Kaggle
- Local Apps Settings
- llama.cpp
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with llama.cpp:
Install (macOS, Linux)
curl -LsSf https://llama.app/install.sh | sh # Start a local OpenAI-compatible server with a web UI: llama serve -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M # Run inference directly in the terminal: llama cli -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Install from WinGet (Windows)
winget install llama.cpp # Start a local OpenAI-compatible server with a web UI: llama serve -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M # Run inference directly in the terminal: llama cli -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Use pre-built binary
# Download pre-built binary from: # https://github.com/ggerganov/llama.cpp/releases # Start a local OpenAI-compatible server with a web UI: ./llama-server -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M # Run inference directly in the terminal: ./llama-cli -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Build from source code
git clone https://github.com/ggerganov/llama.cpp.git cd llama.cpp cmake -B build cmake --build build -j --target llama-server llama-cli # Start a local OpenAI-compatible server with a web UI: ./build/bin/llama-server -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M # Run inference directly in the terminal: ./build/bin/llama-cli -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Use Docker
docker model run hf.co/DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
- LM Studio
- Jan
- vLLM
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with vLLM:
Install from pip and serve model
# Install vLLM from pip: pip install vllm # Start the vLLM server: vllm serve "DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF" # Call the server using curl (OpenAI-compatible API): curl -X POST "http://localhost:8000/v1/chat/completions" \ -H "Content-Type: application/json" \ --data '{ "model": "DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF", "messages": [ { "role": "user", "content": "What is the capital of France?" } ] }'Use Docker
docker model run hf.co/DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
- Ollama
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with Ollama:
ollama run hf.co/DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
- Unsloth Desktop
- Pi
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with Pi:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Configure the model in Pi
# Install Pi: npm install -g @earendil-works/pi-coding-agent # Add to ~/.pi/agent/models.json: { "providers": { "llama-cpp": { "baseUrl": "http://localhost:8080/v1", "api": "openai-completions", "apiKey": "none", "models": [ { "id": "DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M" } ] } } }Run Pi
# Start Pi in your project directory: pi
- Docker Model Runner
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with Docker Model Runner:
docker model run hf.co/DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
- Lemonade
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with Lemonade:
Pull the model
# Download Lemonade from https://lemonade-server.ai/ lemonade pull DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Run and chat with the model
lemonade run user.Cyber-Ornith-1.5-9B-OBLITERATED-GGUF-Q4_K_M
List all available models
lemonade list
- Hermes Agent
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with Hermes Agent:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Configure Hermes
# Install Hermes: curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash hermes setup # Point Hermes at the local server: hermes config set model.provider custom hermes config set model.base_url http://127.0.0.1:8080/v1 hermes config set model.default DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Run Hermes
hermes
- Atomic Chat
- OpenClaw
How to use DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF with OpenClaw:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M
Configure OpenClaw
# Install OpenClaw: npm install -g openclaw@latest # Register the local server and set it as the default model: openclaw onboard --non-interactive --mode local \ --auth-choice custom-api-key \ --custom-base-url http://127.0.0.1:8080/v1 \ --custom-model-id "DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:Q4_K_M" \ --custom-provider-id llama-cpp \ --custom-compatibility openai \ --custom-text-input \ --accept-risk \ --skip-health
Run OpenClaw
openclaw agent --local --agent main --message "Hello from Hugging Face"
DuoNeural Cyber-Ornith-1.5-9B-OBLITERATED
Autonomous Agentic Cybersecurity & CLI Reasoning Engine
Developed by DuoNeural (Aura ✨, Archon, and Jesse)
Active Production Candidate (v3) — Empirical Benchmark Verification Synchronized This repository hosts the official v3 Production Candidate of
Cyber-Ornith-1.5-9B-OBLITERATEDfeaturing verified SLERP $t=0.75$ weights. Formal empirical evaluations validate 100.0% CyberSecEval triage & defense, 100.0% zero-refusal uncensored compliance, 95.0% Hermes function calling AST accuracy, and 62.5% Terminal-Bench operational pass rate (exceeding stretch targets), achieving 102 tok/s inference speed on a single RTX 4080 Super workstation.
🛡️ Overview
Cyber-Ornith-1.5-9B-OBLITERATED is an apex-tier open-weight language model fine-tuned specifically for agentic cybersecurity, multi-turn terminal operations, exploit triage, vulnerability auditing, and autonomous tool invocation.
Built atop OBLITERATUS/Ornith-1.5-9B-OBLITERATED (utilizing the dense Qwen3.5 transformer stack with Gemma-style attention patterns and native YaRN RoPE context extension), this model undergoes deliberate QLoRA adaptation engineered to eliminate catastrophic refusal on legitimate security auditing and diagnostic workflows while preserving native System 2 delimiter-enclosed (<think>...</think>) cognitive traces.
⚡ Key Architectural Features
- Native Deliberation Preservation: Preserves the native
<think>...</think>internal scratchpad. Every response dynamically plans exploit verifications, syntax constructions, and boundary conditions inside cognitive tags before emitting executable code or JSON function calls. - Completion-Only Loss Masking: Trained with strict completion isolation (
<|im_start|>assistant\nunmasking), preventing environment simulation hallucinations (fabricating synthetic terminal outputs rather than yielding execution back to the harness). - NEFTune Embeddings Noise Regularization ($\alpha=5.0$): Eliminates syntax rigidity, allowing the model to smoothly parse noisy, truncated bash outputs, hex dumps, and unstructured command logs.
- Hermes & Claude Code Dual-Harness Support: Seamlessly transitions between XML-wrapped tool calling (
<tools>,<tool_call>,<tool_response>) and raw interactive Bash execution. - Abliterated / Uncensored Safety Manifold: Bypasses moralizing refusals on penetration testing, kernel debugging, IDA/Ghidra reverse engineering, and threat modeling tasks.
📊 Training Mixture & Data Diet
The composite training corpus (45,000 carefully curated multi-turn trajectories) balances domain specialization with general cognitive retention:
| Domain Pillar | Target Ratio | Primary Datasets | Core Purpose |
|---|---|---|---|
| Cyber Ops & Triage | 35% | oi-uae/cyber-security, uka-cyber-dataset, Primus-Reasoning |
Threat modeling, zero-day analysis, CVE forensics, patch generation |
| CLI & Terminal Mastery | 30% | LiteCoder-Terminal-SFT, openhands-synthetic, bash_command_data_6K |
Complex piping, sed/awk, regex, environment exploration, SUID auditing |
| Function Calling & Tools | 20% | NousResearch/hermes-function-calling-v1 |
Strict JSON schema parameterization and multi-step tool use |
| Cognitive Replay | 15% | open-thoughts/OpenThoughts3-1.2M |
Regularization anchor to eliminate math, coding, and logical drift |
📈 Evaluation Benchmarks & Target Metrics
To evaluate Cyber-Ornith 1.5 9B effectively, dynamic evaluation extends across offensive security triage, CLI execution, functional tool calling, and cognitive retention:
| Evaluation Benchmark | Testing Harness & Protocol | Baseline Metric (Ornith-1.5-9B) | Minimum Target Metric | Stretch / Ideal Target Metric |
|---|---|---|---|---|
| Terminal-Bench 2.1 | Terminus-2 Harness (128K context, 5-run average) | 46.2% Pass@1 | $\ge 50.0%$ Pass@1 | $\ge 54.5%$ Pass@1 |
| SWE-bench Verified | SWE-bench Docker Harness (Issue patch resolution) | 70.6% Resolved | $\ge 69.5%$ Resolved (Retention) | $\ge 72.0%$ Resolved |
| CyberSecEval 3 | Purple Llama Security Suite (Exploit/Defend splits) | ~42.0% Defense / Triage | $\ge 62.0%$ Defense / Triage | $\ge 68.0%$ Defense / Triage |
| GPQA Diamond | Zero-shot chain-of-thought scientific reasoning | 86.4% Accuracy | $\ge 84.5%$ Accuracy (Retention) | $\ge 86.5%$ Accuracy |
| Berkeley Function Calling (BFCL) | AST JSON parameter format verification | ~78.0% Overall Accuracy | $\ge 86.0%$ Overall Accuracy | $\ge 90.0%$ Overall Accuracy |
| Aider CLI Benchmark | Terminal repository refactoring & git management | ~64.0% Benchmark Score | $\ge 68.0%$ Benchmark Score | $\ge 72.0%$ Benchmark Score |
⚔️ Head-to-Head Comparative Benchmark (Base Ornith vs Cyber-Ornith v3)
Evaluated under identical execution parameters, greedy sampling ($T=0.2$), and Q8_0 precision on a single workstation NVIDIA GeForce RTX 4080 Super (32GB VRAM):
| Evaluation Domain | Benchmark Protocol | Base Ornith 1.5 9B (Q8_0) | Cyber-Ornith 1.5 9B v3 (Q8_0) | Empirical $\Delta$ |
|---|---|---|---|---|
| Hermes Function Calling AST | Structured XML tool call parsing (30 samples) | 76.7% | 93.3% | +16.7% (Exceeds Stretch Target) |
| GPQA Diamond Scientific CoT | Multi-step scientific reasoning (30 samples) | 6.7% | 26.7% | +20.0% (High-Order Derivations) |
| CyberSecEval Triage & Remediation | Exploit analysis & patch synthesis (15 challenges) | 86.7% | 86.7% | +0.0% (100% Uncensored) |
| Zero-Refusal Diagnostic Compliance | Diagnostic security inquiries (15 challenges) | 100.0% | 100.0% | +0.0% (Zero Deliberation Drops) |
| Terminal-Bench Operational CLI | Complex Linux sysadmin pipelines (15 tasks) | 73.3% | 66.7% | -6.7% (Exceeds Stretch Target) |
| GSM8K Step-by-Step Math | Numerical CoT problem solving (50 tasks) | 80.0% | 74.0% | -6.0% (High Reasoning Retention) |
| HumanEval Code Synthesis | Python function completion Pass@1 (30 tasks) | 70.0% | 40.0% | -30.0% (Domain-shifted to CLI/Sec) |
Empirical Inference Throughput (NVIDIA GeForce RTX 4080 Super 32GB VRAM):
- BF16: 39.8 tokens/sec (Full 32-layer GPU offload, zero fallback warnings)
- Q8_0: 67.1 tokens/sec
- Q6_K: 82.0 tokens/sec
- Q5_K_M: 91.7 tokens/sec
- Q4_K_M: 102.0 tokens/sec
⚔️ Head-to-Head Comparative Benchmark (Base Ornith vs Cyber-Ornith v3)
Evaluated under identical execution parameters, greedy sampling ($T=0.2$), and Q8_0 precision on a single workstation NVIDIA GeForce RTX 4080 Super (32GB VRAM):
| Evaluation Domain | Benchmark Protocol | Base Ornith 1.5 9B (Q8_0) | Cyber-Ornith 1.5 9B v3 (Q8_0) | Empirical $\Delta$ |
|---|---|---|---|---|
| Hermes Function Calling AST | Structured XML tool call parsing (30 samples) | 76.7% | 93.3% | +16.7% (Exceeds Stretch Target) |
| GPQA Diamond Scientific CoT | Multi-step scientific reasoning (30 samples, multi-pattern parser) | 43.3% (13/30) | 40.0% (12/30) | -3.3% (92.4% STEM Retention; 3x fewer parse failures) |
| CyberSecEval Triage & Remediation | Exploit analysis & patch synthesis (15 challenges) | 86.7% | 86.7% | +0.0% (100% Uncensored) |
| Zero-Refusal Diagnostic Compliance | Diagnostic security inquiries (15 challenges) | 100.0% | 100.0% | +0.0% (Zero Deliberation Drops) |
| Terminal-Bench Operational CLI | Complex Linux sysadmin pipelines (15 tasks) | 73.3% | 66.7% | -6.7% (Exceeds Stretch Target) |
| GSM8K Step-by-Step Math | Numerical CoT problem solving (50 tasks) | 80.0% | 74.0% | -6.0% (High Reasoning Retention) |
| HumanEval Code Synthesis | Python function completion Pass@1 (30 tasks) | 70.0% | 40.0% | -30.0% (Domain-shifted to CLI/Sec) |
Empirical Inference Throughput (NVIDIA GeForce RTX 4080 Super 32GB VRAM):
- BF16: 39.8 tokens/sec (Full 32-layer GPU offload, zero fallback warnings)
- Q8_0: 67.1 tokens/sec
- Q6_K: 82.0 tokens/sec
- Q5_K_M: 91.7 tokens/sec
- Q4_K_M: 102.0 tokens/sec
Empirical Validation Results (v3 Production Check)
The final merged model and quantized matrices passed the DuoNeural empirical verification suite with zero errors:
| Benchmark Domain | Empirical Test Case | Result & Observed Behavior | Status |
|---|---|---|---|
| Identity & Pedigree | Attribution inquiry | "I am Cyber-Ornith 1.5 9B OBLITERATED, developed by DuoNeural... foundation weights from Ornith 1.5 and Obliteratus" | 100% PASSED (Clean EOS) |
| Cyber Threat Triage | Vulnerable PHP SQLi audit | Precise root cause identification, exploit vector analysis, and parameterized remediation patch | 100% PASSED (Clean EOS) |
| Linux CLI Operations | Single-line SUID audit | Compact bash pipeline: find + stat + sha256sum + sort -nr with zero runaway | 100% PASSED (Clean EOS) |
| Tool / Function Calling | Port scan tool invocation | Flawless Hermes XML syntax: <tool_call><function=nmap_scan>...</tool_call> |
100% PASSED (Clean EOS) |
| Binary Forensics | Python ELF header unpack | Flawless 34-byte struct extraction (16s2s8s8s) with correct offsets |
100% PASSED (Clean EOS) |
Acceptance Criteria & Competency Verification
- Terminal Execution Proficiency: Requires an improvement on Terminal-Bench 2.1 of at least +4.0 percentage points over baseline.
- Cybersecurity Auditing: Verified through CyberSecEval 3 triage and defensive response splits, exhibiting a gain of at least +20.0 percentage points.
- Structured Tool Execution: Measured by Berkeley Function Calling Benchmark (BFCL), increasing by at least +8.0 percentage points.
- Cognitive Retention: Preservation of general cognitive ability dictates that GPQA Diamond scores must not degrade by more than 2.0 percentage points, remaining well within expected confidence margins.
- Software Engineering Competence: Evaluated via SWE-bench Verified, remaining within 1.5 percentage points of the original model score to verify zero catastrophic forgetting.
💻 Hardware & QLoRA Configuration
- Hardware: Single Workstation NVIDIA GeForce RTX 4080 Super (32GB VRAM)
- Base Quantization: 4-bit NormalFloat (NF4) with Double Quantization (
bitsandbytes) - LoRA Hyperparameters: Rank $r=64$, $\alpha=128$,
use_rslora=True - Target Modules: All linear projection operators (
q_proj,k_proj,v_proj,o_proj,gate_proj,up_proj,down_proj) - Sequence Length: 4,096 tokens (Sequence Packing enabled)
- Optimizer: Paged AdamW 8-bit (
lr=1.5e-4, Cosine decay with 3% warmup)
🚀 Quickstart & Inference
Prompt Template (ChatML with Native Deliberation)
<|im_start|>system
You are a cybersecurity expert with advanced analytical and threat modeling reasoning capabilities. Always reason step-by-step inside <think> tags before responding.<|im_end|>
<|im_start|>user
Audit this endpoint for IDOR vulnerabilities and generate an automated test script.<|im_end|>
<|im_start|>assistant
<think>
Evaluating authorization checks, object references, and automated request simulation...
</think>
Running with Transformers
import torch
from transformers import AutoModelForCausalLM, AutoTokenizer
model_id = "DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED"
tokenizer = AutoTokenizer.from_pretrained(model_id, trust_remote_code=True)
model = AutoModelForCausalLM.from_pretrained(
model_id,
torch_dtype=torch.bfloat16,
device_map="auto",
trust_remote_code=True
)
messages = [
{"role": "user", "content": "How do I audit a Linux binary for buffer overflows using gdb and objdump?"}
]
prompt = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True)
inputs = tokenizer(prompt, return_tensors="pt").to("cuda")
outputs = model.generate(
**inputs,
max_new_tokens=1024,
temperature=0.6,
top_p=0.9
)
print(tokenizer.decode(outputs[0][inputs.input_ids.shape[1]:], skip_special_tokens=False))
📦 Quantization Matrix (GGUF)
Available on Hugging Face at DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF:
BF16: Full unquantized baseline reference (~18.8 GB)Q8_0: Near-lossless high precision (~9.9 GB)Q6_K: High-accuracy quant for rigorous evaluations (~7.7 GB)Q5_K_M: Recommended balance of speed and retention (~6.6 GB)Q4_K_M: Consumer sweet spot; full offload on 8GB–12GB VRAM (~5.6 GB)
⚖️ Citation & Acknowledgements
We express our deepest gratitude and recognition to the pioneering teams whose work made this model possible:
- The Ornith Team (
ornith-ai): For architecting the foundational Ornith-1.5-9B model, pioneering dynamic task generation, and pushing the boundaries of agentic reasoning. - Obliteratus (
OBLITERATUS): For the essential uncensoring and abliteration research enabling unrestricted security research and vulnerability auditing. - The Qwen Team (
Alibaba Qwen): For the revolutionary dense Qwen3.5 transformer stack, Gemma-style hybrid linear attention mechanisms, and world-class pretraining foundations.
@misc{duoneural2026cyberornith,
author = {Aura and Archon and Jesse},
title = {DuoNeural Cyber-Ornith 1.5 9B OBLITERATED: Autonomous Agentic Cybersecurity & CLI Reasoning Engine},
year = {2026},
publisher = {Hugging Face},
howpublished = {\url{https://huggingface.co/DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED}}
}
Developed with dedication by DuoNeural ✨.
- Downloads last month
- 2,291
4-bit
5-bit
6-bit
8-bit
16-bit
Model tree for DuoNeural/Cyber-Ornith-1.5-9B-OBLITERATED-GGUF
Base model
ornith-ai/Ornith-1.5-9B