{"repo":"s0ld13rr/pentestcode","free":true,"listed":false,"github":"https://github.com/s0ld13rr/pentestcode","clone":"git clone https://github.com/s0ld13rr/pentestcode.git","description":"PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.","language":"TypeScript","stars":331,"topics":["ai-agents","ai-security","ai-security-tool","anthropic","gpt","openai","penetration-testing","security-testing","autonomous-agents","multi-agent-system"],"license":"MIT","category":"ai-agents","readme_excerpt":"PentestCode AI penetration testing agent in your terminal. Multi-agent architecture • Engagement state tracking • 20+ LLM providers --- PentestCode is an autonomous pentesting agent for your terminal. Point it at a target and it runs the tools, reads the output, updates its picture of the network, and decides what to do next — the way an operator would. A hard fork of OpenCode (MIT), stripped of the code-editing focus and rebuilt for offensive security. Beta — it holds up on real engagements and CTFs, but expect rough edges. File an issue when something breaks; that's what makes it better. What it does One instruction in, a full attack chain out: Stage What the agent does ------- --------------------- Scan nmap -sS -p- finds 7 open ports and parses the XML straight into engagement state Recognize Ports 88 + 389 → Domain Controller. Fans out three enumerators in parallel (SMB, LDAP, HTTP) Enumerate Null SMB session → writable share. LDAP → user list. Gobuster → web dirs Attack AS-REP roast → crackable hash → first valid credential Spray That credential sprayed across SMB, WinRM, LDAP and RDP on every known host Exploit WinRM foothold → post-exploit agent dumps SAM / LSA / DPAPI Result Domain admin hash in hand — every step recorded with its evidence chain It's methodical where people get lazy: it sprays every credential against every service on every host, and it doesn't forget to check things. Everything it learns lands in a structured state you can query mid-run wi","default_branch":null,"files":null,"tree":[],"storefront":"/r/s0ld13rr","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/s0ld13rr/pentestcode/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}