{
 "schema_version": 1,
 "generated": "2026-10-20",
 "id": "s1n6h-pentest-harness--run-authorized-pentest-workspace",
 "repo": "S1N6H/pentest-harness",
 "repo_url": "https://github.com/S1N6H/pentest-harness",
 "repo_slug": "s1n6h-pentest-harness",
 "title": "Run an authorized pentest workspace on your own machine",
 "page_title": "How to run an authorized pentest workspace on your own machine with Pentest Harness",
 "summary": "Start a local AI agent workspace in Pentest Mode for an authorized engagement.",
 "who": "A penetration tester who has a signed scope for a client engagement and wants an AI agent workspace that keeps session data local.",
 "problem": "Engagement notes, commands, and AI conversations need a dedicated workspace that the tester controls, not a generic chat tab.",
 "outcome": "A running Web UI at http://127.0.0.1:2323 with Pentest Mode available for the engagement.",
 "steps": [
  "Clone the repository with `git clone https://github.com/S1N6H/pentest-harness.git`.",
  "Enter the folder with `cd pentest-harness` and install dependencies with `pnpm install`.",
  "Build the project with `pnpm build`.",
  "Start the Web UI with `pnpm dsh web` and open http://127.0.0.1:2323 in your browser.",
  "Open Settings, then Models, connect your AI provider, and pick a model in the composer before starting the engagement."
 ],
 "agent_prompt": "Clone https://github.com/S1N6H/pentest-harness, run `pnpm install`, `pnpm build`, and `pnpm dsh web`, then confirm http://127.0.0.1:2323 returns a page. Report the URL and the output of the start command. Only use this workspace against <target> after written authorization for that target is confirmed.",
 "agents": [
  "any"
 ],
 "difficulty": "Intermediate",
 "time": "30 minutes",
 "basis": "readme",
 "caveat": "The README does not describe which targets or actions Pentest Mode permits, so the authorization check stays with you.",
 "category": "Security and science",
 "tags": [
  "Security and science"
 ],
 "lang": "typescript",
 "requirements": [
  "Node.js 20+ (Node 22 recommended) and pnpm installed",
  "An API key from a supported provider such as OpenAI, Anthropic, DeepSeek, or any OpenAI-compatible gateway",
  "Written authorization for every target you point the agent at"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [
  {
   "tag": "credentials",
   "notice": "Your provider API key is entered into the app, so keep the local credential store owner-only and never paste the key into shared logs or settings files."
  }
 ],
 "best": true,
 "score": 1.0,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/s1n6h-pentest-harness/run-authorized-pentest-workspace/",
 "md": "https://dedupedai.com/use-cases/s1n6h-pentest-harness/run-authorized-pentest-workspace/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/s1n6h-pentest-harness--run-authorized-pentest-workspace.json",
 "api_version": "v1"
}