Package Exports
- pentesting
- pentesting/dist/index.js
This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (pentesting) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.
Readme
██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗██╗███╗ ██╗ ██████╗
██╔══██╗██╔════╝████╗ ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝██║████╗ ██║██╔════╝
██████╔╝█████╗ ██╔██╗ ██║ ██║ █████╗ ███████╗ ██║ ██║██╔██╗ ██║██║ ███╗
██╔═══╝ ██╔══╝ ██║╚██╗██║ ██║ ██╔══╝ ╚════██║ ██║ ██║██║╚██╗██║██║ ██║
██║ ███████╗██║ ╚████║ ██║ ███████╗███████║ ██║ ██║██║ ╚████║╚██████╔╝
╚═╝ ╚══════╝╚═╝ ╚═══╝ ╚═╝ ╚══════╝╚══════╝ ╚═╝ ╚═╝╚═╝ ╚═══╝ ╚═════╝ Autonomous AI Penetration Testing Agent
Quick Start
npm install -g pentesting
# GLM example
export PENTEST_API_KEY="your_api_key"
export PENTEST_BASE_URL="https://api.z.ai/api/anthropic"
export PENTEST_MODEL="glm-4.7"
pentestingEnvironment Variables
| Variable | Required | Default | Description |
|---|---|---|---|
PENTEST_API_KEY |
✅ | - | API key (ANTHROPIC_API_KEY also works) |
PENTEST_BASE_URL |
- | Custom API endpoint URL | |
PENTEST_MODEL |
claude-sonnet-4-20250514 |
LLM model name | |
PENTEST_MAX_TOKENS |
16384 |
Max response tokens |
Features
- Soul Architecture - ReAct pattern: Think → Act → Observe → Reflect
- 9 Specialized Agents - Recon, Exploit, PrivEsc, Web, Crypto...
- 80%+ Confidence Filter - Only high-confidence findings
- D-Mail Time Travel - Auto-recovery from dead ends
- 50+ Security Tools - nmap, sqlmap, gobuster, hydra...
Commands
| Command | Description |
|---|---|
/target <ip> |
Set target |
/start [objective] |
Start autonomous pentest |
/findings |
Show findings |
/status |
Status |
/yolo |
Toggle auto-approve |
/help |
Help |
Documentation
License
MIT
⚠️ For authorized security testing only.