pentester 0.0.2

Full-scale web, network & API penetration testing with AI on demand — reserved for insom.ai.

pentester

 ██████╗ ███████╗███╗   ██╗████████╗███████╗███████╗████████╗███████╗██████╗
 ██╔══██╗██╔════╝████╗  ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝██╔════╝██╔══██╗
 ██████╔╝█████╗  ██╔██╗ ██║   ██║   █████╗  ███████╗   ██║   █████╗  ██████╔╝
 ██╔═══╝ ██╔══╝  ██║╚██╗██║   ██║   ██╔══╝  ╚════██║   ██║   ██╔══╝  ██╔══██╗
 ██║     ███████╗██║ ╚████║   ██║   ███████╗███████║   ██║   ███████╗██║  ██║
 ╚═╝     ╚══════╝╚═╝  ╚═══╝   ╚═╝   ╚══════╝╚══════╝   ╚═╝   ╚══════╝╚═╝  ╚═╝
        full-scale  web · network · api  pentesting  —  AI on demand

pentester is a full-scale offensive security toolkit that brings web, network, and API penetration testing under one command line — with AI on demand to drive recon, mutate requests, and triage findings.

🚧 Name reserved for insom.ai. This release secures the package on PyPI and ships a working CLI shell. The full dynamic-analysis engine lands in upcoming releases — watch this space.

What it will do

Surface	Capabilities (shipping incrementally)
Web	Crawling & spidering, authenticated sessions, fuzzing, OWASP-class detection (injection, XSS, SSRF, auth flaws), tech/CMS fingerprinting
Network	Host & port discovery, service fingerprinting, protocol enumeration, known-CVE matching, misconfiguration checks
API	REST / GraphQL / gRPC discovery, schema-aware fuzzing, auth / BOLA / mass-assignment testing
AI on demand	Attack-surface reasoning, request mutation, exploit-path suggestion, finding triage, and natural-language report narration — opt-in, bring-your-own model

Install

pip install pentester
# or, isolated and always on PATH:
pipx install pentester

Usage

pentester --version
pentester scan https://example.com   # engine coming soon

If the pentester command isn't found after a pip install --user, run it as a module (works regardless of PATH):

python -m pentester --version

Roadmap

• Live web/network/API target fingerprinting
• Active scanning & fuzzing engine
• Component & dependency vulnerability detection
• AI-assisted request mutation and finding triage
• HTML / JSON / SARIF reports with CI exit-code gating

License

MIT — see LICENSE.

---

© CQR Cybersecurity LLC · part of the insom.ai security platform.