automajicly commited on
Commit
21127d9
Β·
verified Β·
1 Parent(s): 2861378

Update app.py

Browse files

gr.Markdown("""
## About This Project

PenMaster Security is an autonomous penetration testing agent built entirely from scratch by a self-taught developer and security researcher. The project started as a learning exercise and evolved into a fully functional security tool capable of conducting end-to-end penetration tests autonomously against real targets.

The agent runs entirely offline on local hardware β€” a MacBook Pro M1 running Kali Linux in a UTM virtual machine. No cloud services, no API keys, no external dependencies. The LLM (Qwen 2.5-14B Instruct Abliterated) runs locally via LM Studio and communicates with the agent through a custom Flask MCP server.

Every tool in the arsenal has been manually tested and validated against Metasploitable in a controlled lab environment. The agent has successfully breached multiple services autonomously including FTP, SSH, SMB, HTTP, and database services.

The latest upgrade adds Social Engineering Toolkit (SET) integration, bringing the total autonomous toolset to 18 tools and expanding PenMaster's capabilities into social engineering attack vectors including credential harvesting and site cloning.

This project is intended exclusively for authorized penetration testing and security research. All testing was conducted in a private lab environment against systems owned and controlled by the developer.

## Support This Project
If you find this useful, consider starring the GitHub repo or sponsoring development at github.com/XenoCoreGiger31/Local-Model
""")

Files changed (1) hide show
  1. app.py +5 -5
app.py CHANGED
@@ -14,7 +14,7 @@ Built on Kali Linux with a local LLM (Qwen 2.5-14B via LM Studio) and a Flask-ba
14
  - searchsploit, gobuster, enum4linux
15
  - metasploit, wpscan, whatweb
16
  - curl, wget, write_file, read_file
17
- - **SET (Social Engineering Toolkit)** ← NEW
18
 
19
  ## Architecture
20
  agent_loop.py β†’ mcp_server.py (Flask) β†’ security tools
@@ -33,8 +33,6 @@ with gr.Blocks() as demo:
33
  gr.Markdown("# πŸ” PenMaster Security Agent")
34
  gr.Markdown("**Autonomous AI penetration testing β€” local, private, no API keys required.**")
35
  gr.Markdown(penmaster_info())
36
-
37
- demo.launch()
38
  gr.Markdown("""
39
  ## About This Project
40
 
@@ -44,10 +42,12 @@ The agent runs entirely offline on local hardware β€” a MacBook Pro M1 running K
44
 
45
  Every tool in the arsenal has been manually tested and validated against Metasploitable in a controlled lab environment. The agent has successfully breached multiple services autonomously including FTP, SSH, SMB, HTTP, and database services.
46
 
47
- The latest upgrade adds Social Engineering Toolkit (SET) integration, bringing the total autonomous toolset to 18 tools and expanding PenMaster's capabilities into social engineering attack vectors including credential harvesting and site cloning.
48
 
49
  This project is intended exclusively for authorized penetration testing and security research. All testing was conducted in a private lab environment against systems owned and controlled by the developer.
50
 
51
  ## Support This Project
52
  If you find this useful, consider starring the GitHub repo or sponsoring development at github.com/XenoCoreGiger31/Local-Model
53
- """)
 
 
 
14
  - searchsploit, gobuster, enum4linux
15
  - metasploit, wpscan, whatweb
16
  - curl, wget, write_file, read_file
17
+ - **SET (Social Engineering Toolkit)** NEW
18
 
19
  ## Architecture
20
  agent_loop.py β†’ mcp_server.py (Flask) β†’ security tools
 
33
  gr.Markdown("# πŸ” PenMaster Security Agent")
34
  gr.Markdown("**Autonomous AI penetration testing β€” local, private, no API keys required.**")
35
  gr.Markdown(penmaster_info())
 
 
36
  gr.Markdown("""
37
  ## About This Project
38
 
 
42
 
43
  Every tool in the arsenal has been manually tested and validated against Metasploitable in a controlled lab environment. The agent has successfully breached multiple services autonomously including FTP, SSH, SMB, HTTP, and database services.
44
 
45
+ The latest upgrade adds Social Engineering Toolkit (SET) integration, bringing the total autonomous toolset to 18 tools and expanding PenMaster capabilities into social engineering attack vectors including credential harvesting and site cloning.
46
 
47
  This project is intended exclusively for authorized penetration testing and security research. All testing was conducted in a private lab environment against systems owned and controlled by the developer.
48
 
49
  ## Support This Project
50
  If you find this useful, consider starring the GitHub repo or sponsoring development at github.com/XenoCoreGiger31/Local-Model
51
+ """)
52
+
53
+ demo.launch()