Skip to main content

Modern Web Pentesting TUI - Professional security testing tool

Project description

🔐 Pentool — Modern Web Pentesting TUI

PyPI version Python License: AGPL-3.0 Tests

Pentool is a fast, modular web security testing tool with a terminal UI. Built for pentesters and security researchers who prefer working in the terminal.

pip install pentool
pentool

✨ Features

  • 🌐 Proxy — Intercept and modify HTTP/HTTPS traffic in real time, manage scope, apply match & replace rules
  • 🔄 Repeater — Replay requests with any modifications, persist tabs between sessions
  • 💥 Intruder — Automated attacks with 4 strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb
  • 🚀 Turbo Intruder — 10× speed via HTTP Keep-Alive and connection pooling (100–200 req/sec)
  • 🔍 Scanner — Detect SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE and more (active + passive modes)
  • 🕷 Spider — Crawl sites automatically, collect pages, forms and JS endpoints
  • 🎯 Target / Site Map — Build a site map and manage testing scope from the UI
  • 🔐 Decoder + Comparer + Sequencer — Encode/decode, diff requests, analyze token entropy
  • 🧩 Plugin system — Extend functionality without recompiling
  • ⚡ Async core — Fully async, optimized for high load
  • 🆓 Open Source + PRO — Free base, optional PRO license for advanced features

📦 Installation

Requirements: Python 3.10+, Linux / macOS / Windows

pip install pentool

From source:

git clone https://github.com/docx/pentool.git
cd pentool
pip install -e ".[dev]"

🚀 Quick Start

# Launch the TUI
pentool

# Start proxy on custom port
pentool proxy start --port 8080

# Run active scan
pentool scan active --url https://example.com

💰 Pricing

Plan Price Features
Free $0 Proxy, Repeater, Intruder, Decoder
Lite $29/mo + Scanner, Spider, Match & Replace
Medium $99/mo + WebSocket, Plugins, Turbo Mode
Full $299/mo + PRO Reports, API, Unlimited

Get PRO license →


🤝 Support the project

Pentool is developed in free time. If it helps your work, consider supporting:


📖 Documentation


🧪 Tests

pytest tests/unit/ -q

🤝 Contributing

See CONTRIBUTING.md. Report vulnerabilities to security@pentool.pro.

📄 License

Community Edition: AGPL-3.0 · PRO Edition: Commercial

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

pentool-1.0.0.tar.gz (329.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

pentool-1.0.0-py3-none-any.whl (415.2 kB view details)

Uploaded Python 3

File details

Details for the file pentool-1.0.0.tar.gz.

File metadata

  • Download URL: pentool-1.0.0.tar.gz
  • Upload date:
  • Size: 329.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for pentool-1.0.0.tar.gz
Algorithm Hash digest
SHA256 4321fdc96ce6dc2c59a7924d17c3cfa23e92fb0eb31492352c1f2fb2fab32efe
MD5 4638636ca10da60fbb9746a0639a9f6d
BLAKE2b-256 99005a8fe03507068d477162e898e0d3c01217e51efc2f76ba6d2df44a6f2164

See more details on using hashes here.

File details

Details for the file pentool-1.0.0-py3-none-any.whl.

File metadata

  • Download URL: pentool-1.0.0-py3-none-any.whl
  • Upload date:
  • Size: 415.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for pentool-1.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 a8a7e0e7da755e78a4eb0a3abd9c83d3b42dfe8583d4891d5737c20d713d88d2
MD5 b4585e77b42d3e10bf0e636995d10000
BLAKE2b-256 f68d47976cbe136a552a2c0c25ffff91d1e32c43ba626edbe2256737b35bd6bc

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page