DEDUPED Hot AI repos, turned into use cases Get 5 a day

How to install the pentest agent locally and reach the web UI with Autonomous Pentest Agent

Clone the repo, run the install script, and open the admin setup page on localhost.

Authorization notice. Autonomous Pentest Agent is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Remote script. The install script detects and installs Docker and writes config files, so read it before running it on a machine you care about.

Who it is forA security engineer setting up the tool on a workstation or lab server for the first time.

The problemThe system has several parts (Go backend, Next.js UI, PostgreSQL, LLM config), and the setup choices are easy to get wrong by hand.

The outcomeA running instance at http://localhost:8787 with an admin password set through /setup.

What you need first

  • A PostgreSQL database, or Docker so the install script can start one
  • An LLM API key: ANTHROPIC_API_KEY or OPENAI_API_KEY, or the key entered later in the UI's LLM 配置 page
  • Docker for the one-click install path, or the Go toolchain and Node.js for a local build from source
  • Written authorization to test the target systems

Steps

  1. Run git clone https://github.com/kutukam/autonomous-pentest-agent.git and then cd autonomous-pentest-agent.
  2. Run ./install.sh, then choose ① 全部 Docker for the container path or ② 本地编译运行 for a local binary.
  3. Enter a Postgres password when asked, or press Enter to generate one.
  4. Open http://localhost:8787 and go to /setup to set the admin password.
  5. Open the LLM 配置 page or export ANTHROPIC_API_KEY or OPENAI_API_KEY before starting a task.

Prompt for your agent

Using the repo kutukam/autonomous-pentest-agent, clone it, run ./install.sh, and choose the all-Docker option. Report the URL that responds on port 8787 and confirm the /setup page loads. Verify that the process is listening with a plain HTTP request before you report success.

Caveat. The README says the Docker deploy source no longer works and asks you to build locally with AI, so the Docker Compose image pull may fail.

Share: X LinkedIn Hacker News Email Copy link

Disclaimer

Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page