autonomous-pentest

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

ASP (Autonomous Security Pentester), the four pillars of ASP - vulnerability knowledge graph, agent-driven penetration, evaluation center, and compliance system.

Plugin OpenCode untuk web red-team otonom: AI memimpin serangan, kode menegakkan proses. Alur: scope default-deny → scan semua kelas kerentanan → verifikasi tiap temuan → gerbang tanya wajib → chaining eksploit → laporan dengan bukti. Otonom sampai objektif tercapai atau terbukti mustahil. Untuk penggunaan pribadi/internal.

Fork of Armur-Ai/Pentest-Swarm-AI tuned for local/self-hosted LLMs: --guided interactive mode (LLM-ranked next-step suggestions at every checkpoint, CTF milestone ladder), deterministic-first recon analysis (no more omitted-discoveries warning), and a host-tool catalog. Works with any OpenAI-compatible endpoint.

Redex — autonomous offensive security console (fork of ARTEX, AGPL-3.0). Dangerous tool: authorized targets only.

Autonomous AI penetration testing benchmark: an honest AI security testing leaderboard of a local-first autonomous AI pentester across OWASP Juice Shop, cloud (AWS, Azure, GCP), infrastructure and IoTGoat labs. Every finding proven by exploit. Part of Darkmoon.