0xSteph/pentest-ai
github Python analyzed 85b5509
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
0xSteph/pentest-ai is an MCP server distributed on github, maintained by 0xSteph, tracked here since May 2026. It has shipped 25 releases and exposes 52 tools. Tools include authenticated_scan, browser_inspect, builtin_scan, close_engagement, discover_attack_chains, ensure_tools_installed, and 46 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.
what we found
Reading the source raised 2 review prompts — dangerous code and exfiltration combo — each a pattern worth a human look rather than a finding of fault.
full security breakdown →tools
-
authenticated_scan -
browser_inspect -
builtin_scan -
close_engagement -
discover_attack_chains -
ensure_tools_installed -
generate_detection_rules -
generate_report -
get_attack_chains -
get_campaign_summary -
get_config -
get_engagement_status -
get_engagement_summary -
get_evidence -
get_findings -
health -
http_request -
kill_process -
list_engagements -
list_plugins
release cadence · 90d
2026-07-19 2026-09-01 now
recent releases
| version | date | src |
|---|---|---|
| v1.5.0 | 2026-10-06 | github |
| v1.4.0 | 2026-09-02 | github |
| v1.3.1 | 2026-08-16 | github |
| v1.3.0 | 2026-08-16 | github |
| v1.2.1 | 2026-08-08 | github |
| v1.2.0 | 2026-08-05 | github |
| v1.1.0 | 2026-06-29 | github |
| v1.0.0 | 2026-06-25 | github |
| v0.17.2 | 2026-06-09 | github |
| v0.17.1 | 2026-05-27 | github |