gfranrp/Auto-Pentest-LLM
🔍 Automate penetration testing with an intelligent agent that organizes security assessments, leveraging local LLMs and Kali Linux for effective exploitation.
What's novel
🔍 Automate penetration testing with an intelligent agent that organizes security assessments, leveraging local LLMs and Kali Linux for effective exploitation.
Code Analysis
9 files read · 3 roundsAn LLM-driven automation script that orchestrates standard penetration testing tools (nmap, gobuster, sqlmap) on a remote Kali Linux instance via SSH.
Strengths
Clean separation of concerns between the decision-making brain, execution layer, and tool definitions. Uses lightweight local-first architecture with ChromaDB for memory and dynamic prompt swapping for multi-agent behavior without heavy framework dependencies.
Weaknesses
Critical security vulnerability allowing unrestricted shell command execution via LLM hallucinations. Lacks robust error handling (no retry logic, brittle JSON parsing) and has zero test coverage.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
7
Contributors
2
Files
30
Active weeks
2
Repository
Language
Python
Stars
2
Forks
1
License
—