mantishack

项目介绍

stalk - wait - strike - hold Ethically hack and discover vulnerabilities in any software with the power of AI.

Mantishack is Mantis AI: an autonomous vulnerability-discovery agent built on top of OpenAI's Codex CLI (Rust, Apache-2.0), rebranded and wired end-to-end as an offensive-AppSec harness. It runs a staged detect-then-validate pipeline over a codebase - recon, detect, reachability, attacker-simulation validation, chaining, gated exploitation, fixing, and reporting - with every finding owned by a tool, not tracked in prose.

The core bet is the same one this project has always made: detection is commodity, validation precision is the product. What survives attacker-simulation is…