🔒 Pentool — Professional TUI Web Pentesting Toolkit

🌐 Languages: English · Русский · 中文 · हिन्दी

Pentool is a terminal-based (TUI) security toolkit for penetration testers and security researchers.
It combines HTTP interception, vulnerability scanning, automated attacks, and data analysis — all inside your terminal.
Fast, transparent, and built for real-world testing.

✨ Features

• 🌐 Proxy
  Intercept and modify HTTP/HTTPS traffic in real time. Manage scope, apply Match & Replace rules, capture WebSocket messages.

• 🔄 Repeater
  Replay requests with any modifications. Save tabs between sessions and switch between scenarios instantly.

• 💥 Intruder
  Run automated payload attacks with four strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb.
  Turbo Mode delivers 10× speed via Keep-Alive and connection pooling.

• 🔍 Scanner
  Active and passive vulnerability analysis: SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE, CORS, JWT flaws, and more.
  Smart context-aware payloads, WAF bypass, time-based and boolean-blind techniques.

• 🕷 Spider
  Crawl targets automatically — collect pages, forms, API endpoints, and JS files.
  JavaScript rendering via Playwright is supported.

• 🎯 Target / Site Map
  Build a site map from proxy traffic, manage testing scope, and filter hosts directly from the UI.

• 🔐 Decoder · Comparer · Sequencer

  • Decoder — 19 encode/decode/hash operations with chaining support
  • Comparer — side-by-side diff with change highlighting
  • Sequencer — entropy analysis of tokens (sessions, CSRF, JWT) with FIPS tests

• 🧩 Plugin System
  Extend functionality without touching the core. PRO plugins add advanced scanners, smart payloads, and report generators.

• ⚡ Async Core
  Fully async engine handles thousands of concurrent connections and hundreds of requests per second.

• 📦 One-line Install
  pip install pentool — no complex setup, works on Linux, macOS, and Windows (WSL).

• 🆓 Open Source + PRO Extensions
  The base version is free and open. PRO extensions unlock exclusive features and support the project.

🚀 Quick Start

# Install
pip install pentool

# Launch TUI
pentool

# Start proxy on custom port
pentool proxy start --port 8080

# Active scan
pentool scan active --url https://example.com

# Check for updates
pentool update --check

📸 Screenshots

Screenshots and GIFs coming soon.

📚 Documentation

• Quick Start Guide
• User Guide
• Installation
• Plugin Development

Full docs: pentool.pro

🧪 Beta / Testing Mode

Pentool is currently in public beta.
All free modules are fully available. Paid (PRO) plugins are still in development — a trial version is provided for now.

If you run a blog or channel in the information security field and can help promote the project — write to us in private, we'll provide you with a private PRO key free of charge.

📬 Contact: @sudores on Telegram

💰 Support the Project

Pentool is built and maintained in spare time by a solo developer.
If it helps your work, consider supporting — it directly funds new features, bug fixes, and faster releases.

• ⭐ Star on GitHub — free and helps a lot
• ☕ Donate via TryBit — one-time support in crypto
• 🔑 PRO license — coming soon; trial available now

Every contribution matters. Thank you for supporting open-source security tooling. 🙌

🤝 Contributing

Contributions are welcome!
Please read CONTRIBUTING.md before opening a PR.

📄 License

Distributed under the AGPL-3.0 license. See LICENSE for details.
PRO extensions are available under a commercial license.

📬 Contact

• Website: pentool.pro
• Telegram: @sudores
• Email: akashtanov2020@gmail.com
• Author: Anatoly Kashtanov (DoctorX)

⭐ If Pentool saves you time, a GitHub star helps the project grow — thanks!