Ai! Jack!v2026.04.01-f12

← 홈GitHub 라이징

S1N6H/pentest-harness

★ 34753 forksTypeScript인도

AI 분석

•승인된 침투 테스트·버그 바운티·CTF용 셀프호스팅 AI 작업 환경 → 모델 API와 보안 작업 도구 연결

•교체 가능한 플러그인 구조에 세션 영속화·재개·컨텍스트 압축을 결합한 구성이 특징

•셸·파일 접근 권한 통제와 테스트 범위 제한 필요, 로컬 세션 저장과 외부 모델 전송은 별개

Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.

검증 정보

출처: github.com
피드: GitHub 라이징
수집/분석 기준: 2026. 9. 8. 오전 9:00
원문 확인: 원문 열기

본문

# Pentest Harness

Heaven for Hackers — the professional security testing workspace.

An open-source, dark-first AI agent harness for authorized penetration tests, bug bounty

research, security labs, and CTF engagements. Built on a plugin architecture where every

layer — model adapters, tools, sessions, settings, and credentials — is replaceable from

configuration.

Works with any AI model API. Bring your own key from OpenAI, Anthropic, DeepSeek,

Google, Mistral, Groq, OpenRouter, Azure OpenAI, or any OpenAI-compatible gateway — one

click auto-discovers your models and you're running.

## Screenshots

Workspace	Provider cards

## Features

•Multi-provider LLM engine — OpenAI Chat Completions & Responses, Anthropic Messages, DeepSeek, and any custom OpenAI-compatible gateway with one-click model auto-discovery

•Full agent toolset — shell, filesystem, web research, skills, goals, subagents, background jobs, and workflow control

•Pentest Mode — a professional offensive-security operating standard for authorized engagements

•Provider cards — live connection testing, enabled/disabled toggles, per-model context badges

•Durable sessions — JSONL/SQLite persistence with replay; resume exactly where you left off

•Context that never dies — token metering, automatic compaction, and tool-result pruning

•Secure by default — API keys live in an owner-only credential store as references; never in settings files or logs

•Dark-only theme — a focused, low-glare interface built for long engagements

•Everything is a plugin — built on Cordis; no closed core to fight

## Demo

Download the full video

## Quick start

git clone https://github.com/S1N6H/pentest-harness.git
cd pentest-harness
pnpm install
pnpm build
pnpm dsh web

The Web UI opens at http://127.0.0.1:2323 in your browser.

If pnpm dsh is not on your PATH, use pnpm exec dsh web or

node apps/cli/lib/index.js web.

### Requirements

•Node.js 20+ (Node 22 recommended)

•pnpm (npm i -g pnpm)

### Run on another port

pnpm dsh web --port 3000

## First run — connect any AI model

1.Open Settings → Models.

2.Click Add a custom provider (or Edit an existing one).

3.Paste your API base URL — the provider ID and display name auto-fill.

4.Enter your API key (stored in your local credential store, never in settings).

5.Models auto-discover from the endpoint — click one to add it, or add by hand.

6.Pick a model in the composer and start your engagement.

## Defaults

Setting	Value
Web UI	`http://127.0.0.1:2323`
Settings file	`$DSH_HOME/settings.yaml` (default `~/.dsh/settings.yaml`)
Credentials	`$DSH_HOME/.credentials.yaml` (owner-only permissions)

## License

MIT

### ⚡ Sponsored by HackWithClaude

Unlimited AI models · One platform · Zero limits

Access every major model — Claude, GPT, Gemini, and more — in one place.

Built for builders who ship.

🚀 Visit HackWithClaude.com · 💡 Explore the models

S1N6H/pentest-harness

AI 분석

검증 정보

본문

관련 아이템