Benchmarks & Fine-Tuning Performance

All training performance, loss metrics, and hardware requirements for PoCSmith are measured directly from the training campaign run on consumer-grade hardware.

Hardware Performance & VRAM Budget

The entire fine-tuning campaign was completed on a single consumer laptop GPU under strict memory bounds.

ParameterMeasured ValueNotes
GPUNVIDIA GeForce RTX 4050 Laptop GPU6GB VRAM total
Peak VRAM Usage5.9 GB / 6.0 GB96% memory utilization
VRAM Headroom~228 MBThin margin, successfully absorbed evaluation spikes
GPU Temperature~73°CStable thermal envelope during sustained load
Training Duration3 hours 17 minutesComplete run over 3 epochs
Step Latency~12 seconds/stepBatch size 1, gradient accumulation 4
Total Steps885 steps295 steps per epoch

Training Curve & Token Accuracy

The QLoRA fine-tune achieved a 30% reduction in training loss and a 5.8-point improvement in next-token accuracy on the exploit code structure dataset.

Epoch Progress Metrics

Training MilestoneTraining LossToken-Level AccuracyEvaluation Loss
Start1.2072.6%
Epoch 0.341.0375.4%
Epoch 1.000.8978.0%
Epoch 2.000.8578.2%
Epoch 3.000.8478.4%0.926 (stable)

Learning Curve Analysis

  • Epoch 1 Dominance: Approximately 93% of the total next-token accuracy improvement (5.4 out of 5.8 points) was achieved within the first epoch.
  • Plateau Behavior: Epochs 2 and 3 yielded minimal accuracy improvements (+0.4 points total), indicating that the LoRA adapter capacity and dataset bounds had reached their optimal transfer limit.
  • Generalization Stability: The training loss (0.84) and validation evaluation loss (0.926) maintain a healthy, narrow margin, confirming that QLoRA regularization (dropout 0.05, 4-bit frozen base) successfully guarded against severe overfitting.

Dataset Partitioning

The model was specialized on a curated instruction-tuning dataset containing 1,472 samples distributed as follows:

  • Train Set (80%): 1,177 samples
  • Validation Set (10%): 147 samples
  • Test Set (10%): 148 samples

Dataset Split by Feature Type

  • Shellcode Payloads: 1,065 samples (72%) — covers Linux, Windows, and ARM architectures.
  • CVE-to-Exploit Pairs: 407 samples (28%) — maps CVE descriptions directly to python/C exploits.