AI-powered penetration testing and bug hunting CLI tool
Project description
BugPilot CLI
AI-Powered Autonomous Penetration Testing & Security Research Assistant
Developer: LAKSHMIKANTHAN K (letchupkt)
Portfolio: letchupkt.vgrow.tech
๐ Quick Start
# Install
pip install bugpilot-cli
# Run
bugpilot
# Configure
/configure
โจ Features
Core Capabilities
- ๐ค AI-Powered Analysis - 5 AI providers (Gemini, OpenAI, Groq, Ollama, Anthropic)
- ๐ ๏ธ 50+ Pentesting Tools - Auto-install & management
- ๐ File System Access - Read, analyze, and work with files
- ๐จ 5 Modern Themes - Ocean, Sunset, Neon, Forest, Midnight
- ๐ Auto-Updates - Stay current with PyPI
- โก Intelligent Autocomplete -
/commands,@files,#folders
Advanced Features
- Dual Modes: Normal (guided) & Hacker (autonomous)
- Multi-API Keys: Store all provider keys, switch instantly
- Token Optimization: Agentic methodology reduces AI calls by 90%
- Cross-Platform: Windows, Linux, macOS, Termux
- Professional UI: Pure ASCII, no emojis, responsive design
๐ฆ Installation
Method 1: PyPI (Recommended)
pip install bugpilot-cli
Method 2: From Source
git clone https://github.com/letchupkt/bugpilot-cli.git
cd bugpilot-cli
pip install -e .
Requirements
- Python 3.8+
- Internet connection (for AI APIs)
- API keys for desired AI providers
๐ฏ Usage
Basic Usage
bugpilot
Commands
/help - Show all commands
/configure - Configure AI provider & settings
/tools - View 50+ pentesting tools
/update - Check for updates
/portfolio - Visit developer portfolio
/mode - Switch normal/hacker mode
/settings - View current configuration
/clear - Clear conversation context
/exit - Exit BugPilot
Autocomplete
- Type
/for command suggestions - Type
@for file suggestions - Type
#for folder suggestions
โ๏ธ Configuration
First-Time Setup
bugpilot
/configure
Configure Multiple API Keys (One-Time)
Select AI provider: gemini
Gemini API Key: AIza...
Select AI provider: openai
OpenAI API Key: sk-...
Select AI provider: groq
Groq API Key: gsk_...
Environment Variables (Alternative)
export GEMINI_API_KEY="your-key"
export OPENAI_API_KEY="your-key"
export GROQ_API_KEY="your-key"
export ANTHROPIC_API_KEY="your-key"
Configuration File
Located at: ~/.bugpilot/config.json
{
"model": {
"provider": "gemini",
"model_name": "gemini-2.0-flash-exp",
"api_keys": {
"gemini": "AIza...",
"openai": "sk-...",
"groq": "gsk_...",
"anthropic": "sk-ant..."
}
},
"mode": "normal",
"terminal_theme": "ocean",
"auto_update_check": true
}
๐ ๏ธ Features Deep Dive
1. AI Provider Support
Supported Providers:
- Gemini (Google) - gemini-2.0-flash-exp, gemini-1.5-pro
- OpenAI - gpt-4o, gpt-4-turbo, gpt-3.5-turbo
- Groq - llama-3.3-70b-versatile, mixtral-8x7b
- Ollama (Local) - llama3.2, qwen2.5, mistral
- Anthropic - claude-3.5-sonnet, claude-3-opus
Easy Switching:
/mode
# Select provider: openai
# Uses saved API key automatically!
2. Pentesting Tools (50+)
Categories:
- Network Scanning (nmap, masscan)
- Web Scanning (nikto, wpscan, nuclei)
- Fuzzing (ffuf, gobuster)
- Reconnaissance (subfinder, amass, httpx)
- Exploitation (sqlmap)
- And many more...
Auto-Install in Hacker Mode:
# Switch to hacker mode
/mode hacker
# Use a tool - it auto-installs if missing!
[!] You: scan target.com with nmap
[>>] Tool 'nmap' not found. Installing...
[+] Successfully installed nmap
[>>] Running: nmap -sV target.com
View All Tools:
/tools
3. Intelligent Autocomplete
Command Autocomplete (/):
[+] You: /h
/help โ Press Tab
/configure
File Autocomplete (@):
[+] You: analyze @con
@config.py โ Press Tab
@config.json
Folder Autocomplete (#):
[+] You: scan #bug
#bugpilot โ Press Tab
#build
4. File System Access
Read Files:
[+] You: read setup.py
[>>] Reading setup.py...
[AI] The setup.py file contains...
Analyze Projects:
[+] You: analyze the entire bugpilot folder
[>>] Scanning directory...
[AI] Found 11 Python modules, analyzing structure...
Search Files:
[+] You: find all files with "config" in the name
[>>] Searching...
[+] Found: config.py, config.json
5. Auto-Update
Automatic Check (on startup):
[!] Update available: v1.0.0 โ v1.1.0
[*] Run /update to install
Manual Update:
/update
[>>] Checking for updates...
[!] Update Available: v1.1.0
Install now? [y/n]: y
[>>] Updating...
[+] Successfully updated!
[!] Please restart: bugpilot
Disable Auto-Check:
/configure
# Check for updates on startup? [y/n]: n
๐จ Themes
5 Built-in Themes:
/configure
# Select theme:
1. ocean - Blue ocean waves
2. sunset - Warm sunset colors
3. neon - Vibrant neon lights
4. forest - Natural forest greens
5. midnight - Dark midnight blue
๐ก Use Cases
Security Research
[+] You: explain CVE-2024-12345
[AI] BugPilot: CVE-2024-12345 is a critical...
Vulnerability Scanning
[!] You: full reconnaissance on target.com
[>>] Executing autonomous workflow...
[*] Step 1/5: Port scanning with nmap
[*] Step 2/5: Subdomain enumeration
[*] Step 3/5: HTTP probing
[*] Step 4/5: Vulnerability scanning
[*] Step 5/5: Report generation
[+] Complete! 3 critical findings.
Code Analysis
[+] You: analyze this Python code for security issues
[+] You: @vulnerable.py
[AI] Analyzing... Found 2 SQL injection risks...
Exploit Development
[+] You: generate a POC for buffer overflow
[AI] Here's a proof-of-concept...
๐ง Advanced Usage
Hacker Mode (Autonomous)
/mode hacker
# Auto-executes commands
# Auto-installs tools
# Advanced capabilities
# Requires authorization!
Custom Workflows
[!] You: create a penetration testing workflow for web apps
[AI] I'll create a comprehensive workflow...
Token Optimization
Uses agentic methodology to reduce AI calls:
- Predefined pentesting workflows
- Built-in tool knowledge
- Automated decision-making
- 90%+ token savings
๐ Technical Details
Architecture
bugpilot-cli/
โโโ bugpilot/
โ โโโ __init__.py - Package initialization
โ โโโ cli.py - Main CLI interface
โ โโโ agent.py - AI agent logic
โ โโโ models.py - AI model integrations
โ โโโ config.py - Configuration management
โ โโโ toolmanager.py - Tool management
โ โโโ filesystem.py - File system access
โ โโโ autocomplete.py - Autocomplete engine
โ โโโ terminal_ui.py - UI & themes
โ โโโ prompts.py - System prompts
โ โโโ updater.py - Auto-update system
โ โโโ mcp.py - MCP protocol
โ โโโ utils.py - Utilities
โโโ test.py - Test suite (19 tests)
โโโ setup.py - Package setup
โโโ requirements.txt - Dependencies
Dependencies
google-generativeai # Gemini
openai # OpenAI/ChatGPT
anthropic # Claude
groq # Groq
requests # HTTP
rich # Terminal UI
pydantic # Data validation
prompt_toolkit # Autocomplete
packaging # Version comparison
๐งช Testing
Run Tests
python test.py
Test Coverage
- โ Configuration management
- โ Multiple API keys
- โ Tool manager
- โ Autocomplete system
- โ AI model integration
- โ File system access
- โ Auto-updater
- โ UI themes (no emojis)
- โ 19 tests, 100% pass rate
๐ Security & Ethics
Ethical Use Only
BugPilot CLI is designed for:
- โ Authorized penetration testing
- โ Security research
- โ Educational purposes
- โ Vulnerability assessment (with permission)
NOT for:
- โ Unauthorized access
- โ Illegal activities
- โ Malicious hacking
- โ Any unlawful purposes
Disclaimer
Users are responsible for ensuring they have proper authorization before testing any systems. Always follow responsible disclosure practices.
๐ค Contributing
Contributions welcome! Please:
- Fork the repository
- Create a feature branch
- Make your changes
- Add tests
- Submit a pull request
๐ Changelog
v1.0.0 (2025-12-17)
- โ Initial release
- โ 5 AI provider support
- โ 50+ pentesting tools
- โ Intelligent autocomplete
- โ Multiple API key storage
- โ Auto-update system
- โ 5 modern themes
- โ File system access
- โ 100% ASCII UI
- โ Cross-platform support
- โ Comprehensive test suite
๐ Troubleshooting
Issue: "API key required"
# Solution: Configure API key
/configure
# or set environment variable
export GEMINI_API_KEY="your-key"
Issue: "Tool not found"
# Solution: Use hacker mode for auto-install
/mode hacker
# or install manually
Issue: "Import error"
# Solution: Reinstall dependencies
pip install --upgrade bugpilot-cli
๐ Resources
- Documentation: This README
- PyPI: https://pypi.org/project/bugpilot-cli/
- Issues: https://github.com/letchupkt/bugpilot-cli/issues
- Developer: https://letchupkt.vgrow.tech
๐ License
MIT License - See LICENSE file for details
๐ค Author
LAKSHMIKANTHAN K (letchupkt)
- Portfolio: letchupkt.vgrow.tech
- Email: letchupkt@vgrow.tech
๐ Support
If you find BugPilot CLI useful:
- โญ Star the repository
- ๐ Report bugs
- ๐ก Suggest features
- ๐ค Contribute code
๐ฏ Quick Reference
# Install
pip install bugpilot-cli
# Run
bugpilot
# Configure
/configure
# Commands
/help # Show all commands
/tools # View tools
/update # Check updates
/mode # Switch mode
/exit # Quit
# Autocomplete
/ # Commands
@ # Files
# # Folders
BugPilot CLI - The Ultimate AI-Powered Pentesting Assistant
๐ด Configure Once. Hack Forever. ๐ด
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file bugpilot_cli-1.0.5.tar.gz.
File metadata
- Download URL: bugpilot_cli-1.0.5.tar.gz
- Upload date:
- Size: 35.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.10.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
302e14abc79eee103421c2d80deccaf4833c75a6c3ae8843a4cf8af737bddc89
|
|
| MD5 |
ab559bab5c3600766b07052ba3bcd159
|
|
| BLAKE2b-256 |
c2aa7f761aac39f84978140e571856df810cacba788bc16b727c147e8219f4c0
|
File details
Details for the file bugpilot_cli-1.0.5-py3-none-any.whl.
File metadata
- Download URL: bugpilot_cli-1.0.5-py3-none-any.whl
- Upload date:
- Size: 36.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.10.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
9b353ab35bdfb15262161e58e1c0a1f3ef8b53f5ff887f702afce4198d1cc820
|
|
| MD5 |
409e67a4af5b976d9c1babcd56d19978
|
|
| BLAKE2b-256 |
e98eead03f0ed881817119272a573eb295372c36ab91f13f98a5b63f4562603b
|