Skip to content

pentest-ai

Offensive & Pentesting

An AI‑driven pentesting tool that automatically re‑runs every exploit to prove each finding before reporting it

Track releases GitHub Website
Python Latest v1.1.0 · 28d ago Security brief →

Features

  • Oracle‑verifies findings by re‑executing exploits rather than trusting scanner output
  • Supports 14 verified vulnerability classes (e.g., SQLi, XSS, JWT alg:none, IDOR, SSRF)
  • Provides portable proof capsules that can be replayed on demand
  • Runs locally with no cloud telemetry or external API keys

Recent releases

View all 19 releases →
Review required
v1.1.0 Mixed
Auth RCE / SSRF

New oracles + bug fixes

Open
Review required
v1.0.0 Breaking risk

Machine‑oracle verification

Open
No immediate action
v0.17.2 Bug fix

Duplicate installs fix + cargo/manual support

Open
No immediate action
v0.17.1 Bug fix

Failure mode fixes

Open
Config change
v0.16.2 Bug fix
Auth

`PENTEST_AI_MODEL` honored

Open

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
1,387
Forks
275
Languages
Python Jinja JavaScript
View on GitHub Homepage Documentation

Install & Platforms

Install via
pip

Community & Support

Discord

Similar tools

ASCIT31/Dark-Moon
Z3r0
OpenHack
cyntrisec/cyntrisec-cli
grisuno/LazyOwn

Beta — feedback welcome: [email protected]