PentestGPT: LLM-based penetration testing tool
AI-assisted Python framework for automated security testing.
Learn more about PentestGPT
PentestGPT is a Python-based penetration testing tool that leverages large language models to automate and assist security testing tasks. The tool interfaces with multiple LLM providers through a unified API, allowing users to select from cloud-based models (GPT-4o, Gemini, Deepseek) or run models locally using Ollama. It provides command-line interfaces for reasoning and parsing tasks, with configurable logging and base URL settings for different deployment scenarios. The tool is designed for security professionals to integrate AI-assisted analysis into penetration testing workflows.
Multi-provider LLM support
Supports OpenAI, Google Gemini, Deepseek, and local Ollama models through a unified interface, allowing users to choose between cloud and local deployment options based on privacy and capability requirements.
Local model capability
Includes integration with Ollama for running models locally, enabling offline operation and privacy-focused deployments without reliance on external API services.
Modular reasoning and parsing
Separates reasoning and parsing tasks into configurable components, allowing different LLM models to be used for different stages of the penetration testing workflow.
from pentestgpt import PentestGPT
pentester = PentestGPT(reasoning_model="gpt-4o")
# Analyze a security finding
response = pentester.reason(
"I found an open port 22 with SSH service. What should I test next?"
)
print(response)Major release introducing agentic penetration testing pipeline with terminal UI and 86.5% success rate on XBOW benchmark.
- –Agentic penetration testing pipeline
- –Terminal UI with real-time activity feed
- –86.5% success rate on XBOW benchmark (90/104)
- –Docker-based deployment
Added OpenAI compatibility and support for GPT-4o.
- –OpenAI compatibility
- –Support GPT-4o
Official support for GPT-4o with code formatting improvements and bug fixes.
- –Format code with black
- –Fix typo in argument name
- –Fast bugfix
- –README Fix
See how people are using PentestGPT
Related Repositories
Discover similar tools and frameworks used by developers
Sigma
YAML-based detection rules with SIEM query conversion.
CAI
LLM-powered Python framework for automated penetration testing workflows.
uBO Lite
Manifest V3 content blocker using declarative rules without persistent background processes.
WhatsMyName
JSON dataset for checking username availability across hundreds of websites for OSINT tools.
Volatility Framework
Open-source Python framework for extracting digital artifacts from RAM samples for Windows, Linux, and macOS forensics.