PentestGPT

Aug 1, 2023 · 1 min read

An LLM-empowered automatic penetration testing framework with 14k+ GitHub stars and 2.4k+ forks.

PentestGPT is designed to automate penetration testing by leveraging the domain knowledge inherent in Large Language Models. It features a three-module architecture (Reasoning, Generation, and Parsing) that emulates human penetration testing workflows.

Key Features:

  • Multi-module agent design for reasoning, generation, and parsing
  • Integration with multiple LLM backends and real-world security workflows
  • Evaluation on CTF challenges and practical penetration testing targets
  • 228.6% task completion improvement over baseline GPT models

Recognition:

  • Distinguished Artifact Award at USENIX Security 2024
  • Widely used open-source security research artifact with active community adoption
Large Language Models Penetration Testing Security Testing Open Source
Gelei Deng
Authors
Gelei Deng