0xSteph/pentest-ai
#512 of 814 by Stars among GitHub repos
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
About
The pentest tool that proves its findings. No oracle, no badge.
⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓
ptai is an AI-driven pentest tool that re-runs every exploit to confirm it. It runs recon, logs in, and chains findings into multi-step attack paths, but it does not ask you to trust the results. The way TruffleHog confirms a leaked secret by logging in with it, ptai confirms a web finding by re-running the exploit: a finding stays a candidate until a machine oracle reproduces it N out of N, and only then does it earn a VERIFIED badge. Third-party scanner output (nuclei, nikto, zap) is held back until an…
Excerpted from github.com/0xSteph/pentest-ai
Latest metrics
| Stars | 1.8k | 2026-11-09 |
|---|---|---|
| Forks | 333 | 2026-11-09 |
| Commits | 453 | 2026-11-09 |
| Releases | 27 | 2026-11-09 |
| Watchers | 14 | 2026-11-09 |
| Open issues | 2 | 2026-11-09 |
| Open PRs | 2 | 2026-11-09 |