Modern Web Pentesting TUI - Professional security testing tool
Project description
🔐 Pentool — Modern Web Pentesting TUI
Pentool is a fast, modular web security testing tool with a terminal UI. Built for pentesters and security researchers who prefer working in the terminal.
pip install pentool
pentool
✨ Features
- 🌐 Proxy — Intercept and modify HTTP/HTTPS traffic in real time, manage scope, apply match & replace rules
- 🔄 Repeater — Replay requests with any modifications, persist tabs between sessions
- 💥 Intruder — Automated attacks with 4 strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb
- 🚀 Turbo Intruder — 10× speed via HTTP Keep-Alive and connection pooling (100–200 req/sec)
- 🔍 Scanner — Detect SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE and more (active + passive modes)
- 🕷 Spider — Crawl sites automatically, collect pages, forms and JS endpoints
- 🎯 Target / Site Map — Build a site map and manage testing scope from the UI
- 🔐 Decoder + Comparer + Sequencer — Encode/decode, diff requests, analyze token entropy
- 🧩 Plugin system — Extend functionality without recompiling
- ⚡ Async core — Fully async, optimized for high load
- 🆓 Open Source + PRO — Free base, optional PRO license for advanced features
📦 Installation
Requirements: Python 3.10+, Linux / macOS / Windows
pip install pentool
From source:
git clone https://github.com/docx/pentool.git
cd pentool
pip install -e ".[dev]"
🚀 Quick Start
# Launch the TUI
pentool
# Start proxy on custom port
pentool proxy start --port 8080
# Run active scan
pentool scan active --url https://example.com
💰 Pricing
| Plan | Price | Features |
|---|---|---|
| Free | $0 | Proxy, Repeater, Intruder, Decoder |
| Lite | $29/mo | + Scanner, Spider, Match & Replace |
| Medium | $99/mo | + WebSocket, Plugins, Turbo Mode |
| Full | $299/mo | + PRO Reports, API, Unlimited |
🤝 Support the project
Pentool is developed in free time. If it helps your work, consider supporting:
- GitHub Sponsors
- Buy PRO license — also supports development
📖 Documentation
🧪 Tests
pytest tests/unit/ -q
🤝 Contributing
See CONTRIBUTING.md. Report vulnerabilities to security@pentool.pro.
📄 License
Community Edition: AGPL-3.0 · PRO Edition: Commercial
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file pentool-1.0.0.tar.gz.
File metadata
- Download URL: pentool-1.0.0.tar.gz
- Upload date:
- Size: 329.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
4321fdc96ce6dc2c59a7924d17c3cfa23e92fb0eb31492352c1f2fb2fab32efe
|
|
| MD5 |
4638636ca10da60fbb9746a0639a9f6d
|
|
| BLAKE2b-256 |
99005a8fe03507068d477162e898e0d3c01217e51efc2f76ba6d2df44a6f2164
|
File details
Details for the file pentool-1.0.0-py3-none-any.whl.
File metadata
- Download URL: pentool-1.0.0-py3-none-any.whl
- Upload date:
- Size: 415.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a8a7e0e7da755e78a4eb0a3abd9c83d3b42dfe8583d4891d5737c20d713d88d2
|
|
| MD5 |
b4585e77b42d3e10bf0e636995d10000
|
|
| BLAKE2b-256 |
f68d47976cbe136a552a2c0c25ffff91d1e32c43ba626edbe2256737b35bd6bc
|