What do you want to do?
3 use cases
-
Run an authorized pentest workspace on your own machine
Start a local AI agent workspace in Pentest Mode for an authorized engagement.
- Pentest Harness
- Security and science
- Intermediate
View prompt
Clone https://github.com/S1N6H/pentest-harness, run `pnpm install`, `pnpm build`, and `pnpm dsh web`, then confirm http://127.0.0.1:2323 returns a page. Report the URL and the output of the start command. Only use this workspace against <target> after written authorization for that target is confirmed.
-
Work through CTF challenges and security labs with an AI agent
Use a local agent workspace to solve CTF and lab challenges with your chosen model.
- Pentest Harness
- Security and science
- Intermediate
View prompt
Clone https://github.com/S1N6H/pentest-harness, run `pnpm install && pnpm build`, then start the Web UI with `pnpm dsh web`. Open a session for the CTF challenge at <target> and confirm the session can be reopened after a restart. Report the session identifier and whether the replay restored.
-
Switch between AI providers and models during a long engagement
Enable, test, and swap model providers from Settings without leaving the workspace.
- Pentest Harness
- Security and science
- Beginner
View prompt
Using the repo https://github.com/S1N6H/pentest-harness, start the Web UI with `pnpm dsh web` and add the provider at <base_url> under Settings, then Models. Confirm the live connection test passes and the models auto-discover. Report the provider name and the number of discovered models.
How to use Pentest Harness
- Check you have what it needs: Node.js 20+ (Node 22 recommended) and pnpm installed; An API key from a supported provider such as OpenAI, Anthropic, DeepSeek, or any OpenAI-compatible gateway; Written authorization for every target you point the agent at.
- Open S1N6H/pentest-harness on GitHub and read the README and license.
- Clone the repository with
git clone https://github.com/S1N6H/pentest-harness.git. - Enter the folder with
cd pentest-harnessand install dependencies withpnpm install. - Build the project with
pnpm build. - Start the Web UI with
pnpm dsh weband open http://127.0.0.1:2323 in your browser.
These steps come from our top use case, Run an authorized pentest workspace on your own machine, which also has a copy-paste agent prompt.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freePentest Harness alternatives · Best AI repos for Security and science
About this repo
- Who it is forSecurity testers, bug bounty researchers, and CTF players who already hold authorization for their targets and want an AI agent workspace that keeps sessions on their own machine.
- Why it is hot
- LanguageTypeScript
- Sourcegithub.com/S1N6H/pentest-harness · Back to Hot repos
Requirements
- Node.js 20+ (Node 22 recommended) and pnpm installed
- An API key from a supported provider such as OpenAI, Anthropic, DeepSeek, or any OpenAI-compatible gateway
- Written authorization for every target you point the agent at
Maintain Pentest Harness? Add the Featured on Deduped badge
Paste this into your README:
[](https://dedupedai.com/use-cases/s1n6h-pentest-harness/?ref=badge)
Questions about Pentest Harness
What is Pentest Harness?
Pentest Harness is a self-hosted, open-source AI agent workspace for authorized security testing that runs with your own AI model API key. It is an open-source project on GitHub: https://github.com/S1N6H/pentest-harness.
Who is Pentest Harness for?
Security testers, bug bounty researchers, and CTF players who already hold authorization for their targets and want an AI agent workspace that keeps sessions on their own machine.
What can I do with Pentest Harness?
3 use cases so far, for example: Run an authorized pentest workspace on your own machine; Work through CTF challenges and security labs with an AI agent; Switch between AI providers and models during a long engagement. Each has steps and a copy-paste agent prompt.
What do I need to run Pentest Harness?
Node.js 20+ (Node 22 recommended) and pnpm installed; An API key from a supported provider such as OpenAI, Anthropic, DeepSeek, or any OpenAI-compatible gateway; Written authorization for every target you point the agent at.
What are alternatives to Pentest Harness?
Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.
Is Pentest Harness safe to run?
Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.