BugPilot CLI
AI-Powered Autonomous Penetration Testing Tool
Version: 1.4.0
Author: LAKSHMIKANTHAN K (letchupkt)
Status: Production Ready
Overview
BugPilot CLI is an AI-powered command-line tool for penetration testing and security research. It combines the power of multiple AI models with built-in security knowledge tools.
Features
- Multiple LLM support (Gemini, Groq, Claude, OpenAI, Ollama)
- Two operating modes: Forge (interactive) and Hacker (autonomous)
- Built-in CVE database lookup
- OWASP Top 10 2021 reference
- Auto-update system
- Rich terminal UI with 7 themes
- Session management and export
- Persistent operating modes
Quick Start
Installation
# Install dependencies
pip install -r requirements.txt
# Run BugPilot
python -m bugpilot
First Time Setup
- Add API key to
settings.yamlor environment variable - Run
/settingsto configure - Type
/helpto see all commands
Commands
/help - Show all commands
/settings - Configure settings
/update - Check for updates
/cve <ID> - Look up CVE information
/owasp [ID] - Get OWASP Top 10 info
/mode - Switch operating modes
/clear - Clear screen
/exit - Exit BugPilot
Examples
Look up a CVE
/cve CVE-2021-44228
Search for product vulnerabilities
/cve search apache 2.4.49
Get OWASP Top 10 info
/owasp A03
###Update BugPilot
/update check
/update install
Architecture
BugPilot uses a hybrid execution model:
- Regex-based command parsing for CLI commands
- Direct Python function calls for tools (CVE, OWASP, etc.)
- LLM integration for AI-powered analysis
- Optional MCP support available
Documentation
QUICKSTART.md- Detailed quick start guideSECURITY_TOOLS.md- CVE and OWASP tools documentationFINAL_PROJECT_STATUS.md- Complete project status
Requirements
- Python 3.8+
- See
requirements.txtfor full list - API key for at least one LLM provider
License
See LICENSE file
Contributing
Contributions welcome! Please ensure all tests pass before submitting.
Support
For issues and questions, refer to the documentation in the docs_archive folder or create an issue.
Happy Hunting!
Metadata
Release files for bugpilot-cli 1.3.5
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| bugpilot_cli-1.3.5.tar.gz | 60.4 kB | Without provenance | Details for bugpilot_cli-1.3.5.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| bugpilot_cli-1.3.5-py3-none-any.whl | Python 3 | none | any | Details for bugpilot_cli-1.3.5-py3-none-any.whl |
Total release size: 135.5 kB
Release files / bugpilot_cli-1.3.5.tar.gz
| Download URL | bugpilot_cli-1.3.5.tar.gz |
|---|---|
| Size | 60.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8fa46b1262c7037c24264410bfb71c65e55836719ac57cf5f4904893a8e26508
|
|
BLAKE2b-256 checksum How to use checksums |
ff9fa5be79df786d4af35bff7db10f194a86e9fa31fdb49908afb5a1c0cb9af1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.10.0
|
Release files / bugpilot_cli-1.3.5-py3-none-any.whl
| Download URL | bugpilot_cli-1.3.5-py3-none-any.whl |
|---|---|
| Size | 75.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
7e7ee5f4cba4de04d7533ff4fbedd60a23ec2cbf2bf22de0d5cf669e0ba21eae
|
|
BLAKE2b-256 checksum How to use checksums |
c144a7a4a13ff66d9c9f80e1f437ad120a6fc22ce2abc3b7ea9a64fbd19f1efb
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.10.0
|
Security for bugpilot-cli 1.3.5
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.