DEDUPED Hot AI repos, turned into use cases Get 5 a day

What you can do with Autonomous Pentest Agent

Autonomous Pentest Agent is an open source Go and Next.js system where LLM agents run penetration tests autonomously, with a web UI for tasks, assets, findings, and approvals.

Trended earlier

kutukam/autonomous-pentest-agent on GitHub

Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk.

Authorization notice. This tool is dual-use. Only use it on software, sites and systems you own or have explicit permission to test, and follow the relevant licenses and terms of service.

What do you want to do?

3 use cases

  • Install the pentest agent locally and reach the web UI

    Clone the repo, run the install script, and open the admin setup page on localhost.

    View prompt
    Using the repo kutukam/autonomous-pentest-agent, clone it, run ./install.sh, and choose the all-Docker option. Report the URL that responds on port 8787 and confirm the /setup page loads. Verify that the process is listening with a plain HTTP request before you report success.

  • Import asset data from ScopeSentry into the asset graph

    Connect ScopeSentry with its address and API key, then import domains, IPs, and ports by project or task.

    View prompt
    Using the repo kutukam/autonomous-pentest-agent, connect it to a ScopeSentry instance at <scopesentry-url> with the API key <api-key>. Import the assets from project <project-name> and report the count of assets in the asset graph. Verify by listing the imported assets in the 资产 page before you start any exploration.

  • Retest a fixed vulnerability and record whether it still reproduces

    Start a retest on one finding and get a result of still reproducible, fixed, or cannot confirm.

    View prompt
    Using the repo kutukam/autonomous-pentest-agent, start a retest for finding <finding-id> in task <task-id> with the fixed version <version>. Report the verdict and the session link. Verify that the verdict and the evidence are saved in the finding details before you close the task.

How to use Autonomous Pentest Agent

  1. Check you have what it needs: A PostgreSQL database, or Docker so the install script can start one; An LLM API key: ANTHROPIC_API_KEY or OPENAI_API_KEY, or the key entered later in the UI's LLM 配置 page; Docker for the one-click install path, or the Go toolchain and Node.js for a local build from source.
  2. Open kutukam/autonomous-pentest-agent on GitHub and read the README and license.
  3. Run git clone https://github.com/kutukam/autonomous-pentest-agent.git and then cd autonomous-pentest-agent.
  4. Run ./install.sh, then choose ① 全部 Docker for the container path or ② 本地编译运行 for a local binary.
  5. Enter a Postgres password when asked, or press Enter to generate one.
  6. Open http://localhost:8787 and go to /setup to set the admin password.

These steps come from our top use case, Install the pentest agent locally and reach the web UI, which also has a copy-paste agent prompt.

Autonomous Pentest Agent alternatives · Best AI repos for Security and science

About this repo

Requirements

  • A PostgreSQL database, or Docker so the install script can start one
  • An LLM API key: ANTHROPIC_API_KEY or OPENAI_API_KEY, or the key entered later in the UI's LLM 配置 page
  • Docker for the one-click install path, or the Go toolchain and Node.js for a local build from source
  • Written authorization to test the target systems
Maintain Autonomous Pentest Agent? Add the Featured on Deduped badge

Paste this into your README:

[![Featured on Deduped](https://dedupedai.com/badge/kutukam-autonomous-pentest-agent.svg)](https://dedupedai.com/use-cases/kutukam-autonomous-pentest-agent/?ref=badge)

More badge styles and HTML

Questions about Autonomous Pentest Agent

What is Autonomous Pentest Agent?

Autonomous Pentest Agent is an open source Go and Next.js system where LLM agents run penetration tests autonomously, with a web UI for tasks, assets, findings, and approvals. It is an open-source project on GitHub: https://github.com/kutukam/autonomous-pentest-agent.

Who is Autonomous Pentest Agent for?

Security engineers and red team operators who want to run LLM-driven penetration tests against targets they are authorized to test.

What can I do with Autonomous Pentest Agent?

3 use cases so far, for example: Install the pentest agent locally and reach the web UI; Import asset data from ScopeSentry into the asset graph; Retest a fixed vulnerability and record whether it still reproduces. Each has steps and a copy-paste agent prompt.

What do I need to run Autonomous Pentest Agent?

A PostgreSQL database, or Docker so the install script can start one; An LLM API key: ANTHROPIC_API_KEY or OPENAI_API_KEY, or the key entered later in the UI's LLM 配置 page; Docker for the one-click install path, or the Go toolchain and Node.js for a local build from source; Written authorization to test the target systems.

What are alternatives to Autonomous Pentest Agent?

Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.

Is Autonomous Pentest Agent safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.