Skip to content

pentest-ai

v1.1.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 28d Offensive & Pentesting
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-security bug-bounty claude ctf security exploit
+12 more
exploit-chaining hacking-tools mcp model-context-protocol nmap offensive-security osint penetration-testing pentest-ai pentesting python vulnerability-scanning

Affected surfaces

auth rce_ssrf

Summary

AI summary

Fixed scope safety and verify resilience bugs; added ten new verification oracles covering fourteen vulnerability classes.

Full changelog

ptai 1.1.0 — verification coverage + resilience

Roughly doubles the vulnerability classes ptai oracle-verifies, and fixes the bug that made a scan of a live vulnerable app report 0 verified.

Added

  • Ten new verification oracles (each with a control that must fail on a safe target): trusted-header bypass, JWT alg:none, host-header poisoning, XXE, type confusion, stored XSS, sequential IDOR, mass-assignment, non-blind SSRF, SQLi login-bypass. 14 distinct classes now verify.
  • Path-traversal oracle (ptai demo → 4 findings, all 4 oracle-VERIFIED).

Fixed

  • Scope safety: active tools (sqlmap/dalfox) are host-locked to the engagement target; no more attacking third-party URLs scraped from a target's content.
  • Verify resilience: the verify phase waits for a wobbled target to recover instead of failing every oracle against it. Took OWASP Juice Shop from 0 → 12 oracle-verified in a scan.

Validation

  • Juice Shop scoped scan: 12 verified. Multi-vuln honeypot: 23 verified across 14 classes, 100% precision, 0 false positives. Reproducible (honeypot + clean-app gates in the repo).
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track pentest-ai

Get notified when new releases ship.

Sign up free

About pentest-ai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

All releases →

Related context

Beta — feedback welcome: [email protected]