Skip to main content

BugPilot CLI

AI-Powered Autonomous Penetration Testing Tool

Version: 1.4.0
Author: LAKSHMIKANTHAN K (letchupkt)
Status: Production Ready


Overview

BugPilot CLI is an AI-powered command-line tool for penetration testing and security research. It combines the power of multiple AI models with built-in security knowledge tools.

Features

  • Multiple LLM support (Gemini, Groq, Claude, OpenAI, Ollama)
  • Two operating modes: Forge (interactive) and Hacker (autonomous)
  • Built-in CVE database lookup
  • OWASP Top 10 2021 reference
  • Auto-update system
  • Rich terminal UI with 7 themes
  • Session management and export
  • Persistent operating modes

Quick Start

Installation

# Install dependencies
pip install -r requirements.txt

# Run BugPilot
python -m bugpilot

First Time Setup

  1. Add API key to settings.yaml or environment variable
  2. Run /settings to configure
  3. Type /help to see all commands

Commands

/help          - Show all commands
/settings      - Configure settings
/update        - Check for updates
/cve <ID>      - Look up CVE information
/owasp [ID]    - Get OWASP Top 10 info
/mode          - Switch operating modes
/clear         - Clear screen
/exit          - Exit BugPilot

Examples

Look up a CVE

/cve CVE-2021-44228

Search for product vulnerabilities

/cve search apache 2.4.49

Get OWASP Top 10 info

/owasp A03

###Update BugPilot

/update check
/update install

Architecture

BugPilot uses a hybrid execution model:

  • Regex-based command parsing for CLI commands
  • Direct Python function calls for tools (CVE, OWASP, etc.)
  • LLM integration for AI-powered analysis
  • Optional MCP support available

Documentation

  • QUICKSTART.md - Detailed quick start guide
  • SECURITY_TOOLS.md - CVE and OWASP tools documentation
  • FINAL_PROJECT_STATUS.md - Complete project status

Requirements

  • Python 3.8+
  • See requirements.txt for full list
  • API key for at least one LLM provider

License

See LICENSE file

Contributing

Contributions welcome! Please ensure all tests pass before submitting.

Support

For issues and questions, refer to the documentation in the docs_archive folder or create an issue.


Happy Hunting!

Metadata

Release files for bugpilot-cli 1.3.5

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for bugpilot-cli 1.3.5
File Size Uploaded Provenance Actions
bugpilot_cli-1.3.5.tar.gz 60.4 kB Without provenance Details for bugpilot_cli-1.3.5.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for bugpilot-cli 1.3.5
File Interpreter ABI Platform Actions
bugpilot_cli-1.3.5-py3-none-any.whl Python 3 none any Details for bugpilot_cli-1.3.5-py3-none-any.whl

Total release size: 135.5 kB

Release files / bugpilot_cli-1.3.5.tar.gz

Download URL bugpilot_cli-1.3.5.tar.gz
Size 60.4 kB
Tags Source
SHA-256 checksum
How to use checksums
8fa46b1262c7037c24264410bfb71c65e55836719ac57cf5f4904893a8e26508
BLAKE2b-256 checksum
How to use checksums
ff9fa5be79df786d4af35bff7db10f194a86e9fa31fdb49908afb5a1c0cb9af1
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.10.0

Release files / bugpilot_cli-1.3.5-py3-none-any.whl

Download URL bugpilot_cli-1.3.5-py3-none-any.whl
Size 75.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
7e7ee5f4cba4de04d7533ff4fbedd60a23ec2cbf2bf22de0d5cf669e0ba21eae
BLAKE2b-256 checksum
How to use checksums
c144a7a4a13ff66d9c9f80e1f437ad120a6fc22ce2abc3b7ea9a64fbd19f1efb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.10.0

Security for bugpilot-cli 1.3.5

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page