Metadata-Version: 2.4
Name: pentester
Version: 0.0.2
Summary: Full-scale web, network & API penetration testing with AI on demand — reserved for insom.ai.
Project-URL: Homepage, https://github.com/vulnz/pentester
Project-URL: Source, https://github.com/vulnz/pentester
Project-URL: Issues, https://github.com/vulnz/pentester/issues
Author: vulnz
License: MIT
License-File: LICENSE
Keywords: ai,appsec,dast,dynamic-analysis,pentest,pentesting,scanner,security,vulnerability
Classifier: Development Status :: 2 - Pre-Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Topic :: Security
Requires-Python: >=3.8
Description-Content-Type: text/markdown

# pentester

```
 ██████╗ ███████╗███╗   ██╗████████╗███████╗███████╗████████╗███████╗██████╗
 ██╔══██╗██╔════╝████╗  ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝██╔════╝██╔══██╗
 ██████╔╝█████╗  ██╔██╗ ██║   ██║   █████╗  ███████╗   ██║   █████╗  ██████╔╝
 ██╔═══╝ ██╔══╝  ██║╚██╗██║   ██║   ██╔══╝  ╚════██║   ██║   ██╔══╝  ██╔══██╗
 ██║     ███████╗██║ ╚████║   ██║   ███████╗███████║   ██║   ███████╗██║  ██║
 ╚═╝     ╚══════╝╚═╝  ╚═══╝   ╚═╝   ╚══════╝╚══════╝   ╚═╝   ╚══════╝╚═╝  ╚═╝
        full-scale  web · network · api  pentesting  —  AI on demand
```

**`pentester`** is a full-scale offensive security toolkit that brings **web**,
**network**, and **API** penetration testing under one command line — with
**AI on demand** to drive recon, mutate requests, and triage findings.

> 🚧 **Name reserved for [insom.ai](https://insom.ai).** This release secures
> the package on PyPI and ships a working CLI shell. The full dynamic-analysis
> engine lands in upcoming releases — watch this space.

[![PyPI](https://img.shields.io/pypi/v/pentester.svg)](https://pypi.org/project/pentester/)
[![Python](https://img.shields.io/pypi/pyversions/pentester.svg)](https://pypi.org/project/pentester/)
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

## What it will do

| Surface | Capabilities (shipping incrementally) |
|---------|----------------------------------------|
| **Web** | Crawling & spidering, authenticated sessions, fuzzing, OWASP-class detection (injection, XSS, SSRF, auth flaws), tech/CMS fingerprinting |
| **Network** | Host & port discovery, service fingerprinting, protocol enumeration, known-CVE matching, misconfiguration checks |
| **API** | REST / GraphQL / gRPC discovery, schema-aware fuzzing, auth / BOLA / mass-assignment testing |
| **AI on demand** | Attack-surface reasoning, request mutation, exploit-path suggestion, finding triage, and natural-language report narration — opt-in, bring-your-own model |

## Install

```bash
pip install pentester
# or, isolated and always on PATH:
pipx install pentester
```

## Usage

```bash
pentester --version
pentester scan https://example.com   # engine coming soon
```

If the `pentester` command isn't found after a `pip install --user`, run it as
a module (works regardless of `PATH`):

```bash
python -m pentester --version
```

## Roadmap

- [ ] Live web/network/API target fingerprinting
- [ ] Active scanning & fuzzing engine
- [ ] Component & dependency vulnerability detection
- [ ] AI-assisted request mutation and finding triage
- [ ] HTML / JSON / SARIF reports with CI exit-code gating

## License

MIT — see [LICENSE](LICENSE).

---

© CQR Cybersecurity LLC · part of the [insom.ai](https://insom.ai) security platform.
