I ran Codex, Claude, and Gemini through some cybersecurity tasks to see where they start refusing. A bit of RouterSploit, a few absurd refusals, and an attempt to squeeze as much as possible out of the models :)