Automated Penetration Testing using LLM Agents

This repository contains Python script that automates penetration testing using LLM agents.

Dependencies

To use this script, you need to have the following dependencies installed:

• Python 3.12
• Nmap (https://nmap.org/download#windows or sudo apt install nmap)
• uv from Astral
  • Linux: curl -LsSf https://astral.sh/uv/install.sh | sh
  • Windows: powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
• Any kind of LLM local or remote (e.g. OpenAI, Anthropic, etc.) In this example, we will use LM Studio (https://lmstudio.ai/) with SmolLM2.
• Metasploitable 2 VM.

Pentest Tools

• Nmap
• Metasploit
• Yuki-chan Auto Pentest Tools

Usage

• Open Metasploitable 2 VM using VMware and note NAT IP address.
• Inside repo directory, run:

uv venv
source .venv/bin/activate
uv sync
python3 main.py "Metasploitable2-IP-Address"

Notes

• Recommend GPU usage