PentAGI

Headlines · 2

1. 2d
   Open-source multi-agent pentest system PentAGI hits GitHub Trending

   PentAGI, listed on GitHub Trending, is an open-source, self-hosted multi-agent system for autonomous penetration testing from VXControl, a security engineering company based in Dubai: a user describes a target and a goal in plain language, and specialized AI agents plan and carry out the work, running 20-plus professional tools such as nmap, Metasploit and sqlmap inside an isolated Docker sandbox before producing a report. The project says it supports 10-plus cloud LLM providers (OpenAI, Anthropic, Gemini, AWS Bedrock, DeepSeek, Qwen and others) plus local models via Ollama or vLLM, and ships with PostgreSQL and pgvector long-term memory, an optional Neo4j/Graphiti knowledge graph, execution monitoring and task planning, REST and GraphQL APIs, and Grafana/Langfuse observability; an enterprise edition adds agent profiles, plugins, MCP servers and a real-time attack-chain view. The maintainers state that PentAGI today is an autonomous or assistant-guided pentest platform, not a CALDERA-style breach-and-attack-simulation product with predefined campaigns, and that it is for authorized testing only.

   GitHub Trending（每日） · 🔥 4
2. 7d
   CrowdStrike: Korean bank hacks used ARTEX AI pentest tool with DeepSeek and Claude Code

   CrowdStrike reported on 7 October that an attack campaign against South Korean financial institutions used the AI penetration-testing tool ARTEX, with DeepSeek as its main model backend and Claude Code used alongside it. South Korean media reported data leaks at at least seven institutions including Shinhan Bank, KB Kookmin Bank and Hana Bank; roughly 25,000 Shinhan customers had names, phone numbers, annual income and loan limits exposed after attackers bypassed authentication to reach a loan-broker lookup service. ARTEX author Autumn-27 said on 8 October that the project was going closed-source with no further updates or support because of misuse, and the original GitHub repository became inaccessible, though hundreds of forks mean source backups and localized copies remain available online.

   虎嗅 AI · 🔥 0

Experience and discussion from the community

Share my PentAGI experienceAsk about PentAGI