bugbasesecurity/pentest-copilot

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1327 stars · 251 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Pentest Copilot is an open-source, AI-driven penetration testing agent that connects to a Kali attack box, autonomously runs security tools, analyzes results, and iterates on commands. It offers agentic execution with 16 built-in tools, Burp Suite integration, and a registry of 100+ security capabilities for real-world engagements, boot2root boxes, and CTFs.

Use cases

• automate penetration testing workflows with an ai agent
• solve ctf and boot2root boxes autonomously
• integrate burp suite with an llm pentesting assistant
• run autonomous security tooling on a kali attack box
• find auth bypasses in web apps like owasp juice shop
• ai assistant for ethical hacking engagements

When to choose

• you want an agentic AI to run pentest commands and iterate without manual nudging
• you need Burp Suite integration (proxy history, Repeater, Intruder, Collaborator) in an AI workflow
• you practice CTFs or boot2root machines and want automation
• you want a self-hosted, MIT-licensed alternative to closed pentest copilots

When to avoid

• you need guaranteed-safe automation for production systems without human oversight
• you require a passive vulnerability scanner rather than an active agent
• you lack a Kali attack box or the infrastructure to run autonomous shell commands
• compliance policies prohibit LLM-driven execution on your targets

Facets

application · maturity active

agent-framework llm-inference penetration-testing security developer-tools penetration-testing security artificial-intelligence self-hosted pentesting ethical-hacking burp-suite kali-linux ctf agentic-ai offensive-security ai-agents web-server linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bugbasesecurity/pentest-copilot")