0xSteph/pentest-ai
#507 of 803 by Stars among GitHub repos
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
About
The pentest tool that proves its findings. No oracle, no badge.
⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓
ptai is an AI-driven pentest tool that re-runs every exploit to confirm it. It runs recon, logs in, and chains findings into multi-step attack paths, but it does not ask you to trust the results. The way TruffleHog confirms a leaked secret by logging in with it, ptai confirms a web finding by re-running the exploit: a finding stays a candidate until a machine oracle reproduces it N out of N, and only then does it earn a VERIFIED badge. Third-party scanner output (nuclei, nikto, zap) is held back until an…
Excerpted from github.com/0xSteph/pentest-ai
Latest metrics
| Stars | 1.7k | 2026-09-12 |
|---|---|---|
| Forks | 313 | 2026-09-12 |
| Commits | 406 | 2026-09-12 |
| Releases | 24 | 2026-09-12 |
| Watchers | 13 | 2026-09-12 |
| Open issues | 0 | 2026-09-12 |
| Open PRs | 1 | 2026-09-12 |