automajicly commited on
Commit
2861378
Β·
verified Β·
1 Parent(s): 7ba7e15

Create app.py

Browse files

gr.Markdown("""
## About This Project

PenMaster Security is an autonomous penetration testing agent built entirely from scratch by a self-taught developer and security researcher. The project started as a learning exercise and evolved into a fully functional security tool capable of conducting end-to-end penetration tests autonomously against real targets.

The agent runs entirely offline on local hardware β€” a MacBook Pro M1 running Kali Linux in a UTM virtual machine. No cloud services, no API keys, no external dependencies. The LLM (Qwen 2.5-14B Instruct Abliterated) runs locally via LM Studio and communicates with the agent through a custom Flask MCP server.

Every tool in the arsenal has been manually tested and validated against Metasploitable in a controlled lab environment. The agent has successfully breached multiple services autonomously including FTP, SSH, SMB, HTTP, and database services.

The latest upgrade adds Social Engineering Toolkit (SET) integration, bringing the total autonomous toolset to 18 tools and expanding PenMaster's capabilities into social engineering attack vectors including credential harvesting and site cloning.

This project is intended exclusively for authorized penetration testing and security research. All testing was conducted in a private lab environment against systems owned and controlled by the developer.

## Support This Project
If you find this useful, consider starring the GitHub repo or sponsoring development at github.com/XenoCoreGiger31/Local-Model
""")

Files changed (1) hide show
  1. app.py +53 -0
app.py ADDED
@@ -0,0 +1,53 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ import gradio as gr
2
+
3
+ def penmaster_info():
4
+ return """
5
+ # πŸ” PenMaster Security
6
+
7
+ **Autonomous AI-powered penetration testing agent β€” fully local, no cloud, no API keys.**
8
+
9
+ Built on Kali Linux with a local LLM (Qwen 2.5-14B via LM Studio) and a Flask-based MCP tool server.
10
+
11
+ ## Tool Arsenal (18 Tools)
12
+ - masscan, nmap, nikto, sqlmap
13
+ - hydra, ncrack, medusa, john
14
+ - searchsploit, gobuster, enum4linux
15
+ - metasploit, wpscan, whatweb
16
+ - curl, wget, write_file, read_file
17
+ - **SET (Social Engineering Toolkit)** ← NEW
18
+
19
+ ## Architecture
20
+ agent_loop.py β†’ mcp_server.py (Flask) β†’ security tools
21
+
22
+ ## Stack
23
+ - Model: Qwen 2.5-14B Instruct Abliterated
24
+ - Agent: Python autonomous loop
25
+ - MCP Server: Flask on port 8000
26
+ - OS: Kali Linux (UTM on Apple Silicon M1)
27
+
28
+ ## GitHub
29
+ github.com/XenoCoreGiger31/Local-Model
30
+ """
31
+
32
+ with gr.Blocks() as demo:
33
+ gr.Markdown("# πŸ” PenMaster Security Agent")
34
+ gr.Markdown("**Autonomous AI penetration testing β€” local, private, no API keys required.**")
35
+ gr.Markdown(penmaster_info())
36
+
37
+ demo.launch()
38
+ gr.Markdown("""
39
+ ## About This Project
40
+
41
+ PenMaster Security is an autonomous penetration testing agent built entirely from scratch by a self-taught developer and security researcher. The project started as a learning exercise and evolved into a fully functional security tool capable of conducting end-to-end penetration tests autonomously against real targets.
42
+
43
+ The agent runs entirely offline on local hardware β€” a MacBook Pro M1 running Kali Linux in a UTM virtual machine. No cloud services, no API keys, no external dependencies. The LLM (Qwen 2.5-14B Instruct Abliterated) runs locally via LM Studio and communicates with the agent through a custom Flask MCP server.
44
+
45
+ Every tool in the arsenal has been manually tested and validated against Metasploitable in a controlled lab environment. The agent has successfully breached multiple services autonomously including FTP, SSH, SMB, HTTP, and database services.
46
+
47
+ The latest upgrade adds Social Engineering Toolkit (SET) integration, bringing the total autonomous toolset to 18 tools and expanding PenMaster's capabilities into social engineering attack vectors including credential harvesting and site cloning.
48
+
49
+ This project is intended exclusively for authorized penetration testing and security research. All testing was conducted in a private lab environment against systems owned and controlled by the developer.
50
+
51
+ ## Support This Project
52
+ If you find this useful, consider starring the GitHub repo or sponsoring development at github.com/XenoCoreGiger31/Local-Model
53
+ """)