{"repo":"ibrahimsaleem/PentestThinkingMCP","free":true,"listed":false,"github":"https://github.com/ibrahimsaleem/PentestThinkingMCP","clone":"git clone https://github.com/ibrahimsaleem/PentestThinkingMCP.git","description":"A systematic, AI-powered penetration testing reasoning engine (MCP server) for attack path planning, CTF/HTB solving, and automated pentest workflows. Features Beam Search, MCTS, attack step scoring, and tool recommendations.","language":"JavaScript","stars":37,"topics":[],"license":"MIT","category":"security-tools","readme_excerpt":"PentestThinkingMCP A main and foundational implementation of the research paper: LIMA: Leveraging Large Language Models and MCP Servers for Initial Machine Access This project serves as the primary and naive system described in the paper, providing a practical framework for orchestrating automated initial-access reconnaissance, enumeration, and exploitation using large language models (LLMs) with Model Context Protocol (MCP) servers. --- Research Context This repository is the main codebase referenced in the paper LIMA: Leveraging Large Language Models and MCP Servers for Initial Machine Access . The research introduces LIMA, a modular system that pairs off-the-shelf LLMs with MCP servers to automate penetration testing tasks such as reconnaissance, enumeration, vulnerability assessment, and exploitation. The project demonstrates how LLMs can autonomously reason about attack paths, generate exploits, and complete initial access challenges with minimal human input, as benchmarked on public HackTheBox machines and custom environments. Key highlights from the research: - LIMA achieves up to 2x faster completion than expert testers for certain tasks, including autonomous CAPTCHA solving and attack chain execution. - The system provides the first quantitative baseline for AI-augmented penetration testing at the initial-access phase. - The modular design allows other LLMs to be integrated easily for future research and development. For more details, see the full paper or the summar","default_branch":null,"files":null,"tree":[],"storefront":"/r/ibrahimsaleem","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ibrahimsaleem/PentestThinkingMCP/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}