🔒 Pentool — Professional TUI Web Pentesting Toolkit
🚧 Active Development — Public beta. Core modules are stable and fully usable. PRO features are under active development. Feedback and bug reports are welcome.
🌐 Languages: English · Русский · 中文 · हिन्दी
Pentool is a terminal-based (TUI) security toolkit for penetration testers and security researchers.
It combines HTTP interception, vulnerability scanning, automated attacks, and data analysis — all inside your terminal.
Fast, transparent, and built for real-world testing.
✨ Features
-
🌐 Proxy
Intercept and modify HTTP/HTTPS traffic in real time. Manage scope, apply Match & Replace rules, capture WebSocket messages. -
🔄 Repeater
Replay requests with any modifications. Save tabs between sessions and switch between scenarios instantly. -
💥 Intruder
Run automated payload attacks with four strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb.
Turbo Mode delivers 10× speed via Keep-Alive and connection pooling. -
🔍 Scanner
Active and passive vulnerability analysis: SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE, CORS, JWT flaws, and more.
Smart context-aware payloads, WAF bypass, time-based and boolean-blind techniques. -
🕷 Spider
Crawl targets automatically — collect pages, forms, API endpoints, and JS files.
JavaScript rendering via Playwright is supported. -
🎯 Target / Site Map
Build a site map from proxy traffic, manage testing scope, and filter hosts directly from the UI. -
🔐 Decoder · Comparer · Sequencer
- Decoder — 19 encode/decode/hash operations with chaining support
- Comparer — side-by-side diff with change highlighting
- Sequencer — entropy analysis of tokens (sessions, CSRF, JWT) with FIPS tests
-
🧩 Plugin System
Extend functionality without touching the core. PRO plugins add advanced scanners, smart payloads, and report generators. -
⚡ Async Core
Fully async engine handles thousands of concurrent connections and hundreds of requests per second. -
📦 One-line Install
pip install pentool— no complex setup, works on Linux, macOS, and Windows (WSL). -
🆓 Open Source + PRO Extensions
The base version is free and open. PRO extensions unlock exclusive features and support the project.
🚀 Quick Start
# Install
pip install pentool
# Launch TUI
pentool
# Start proxy on custom port
pentool proxy start --port 8080
# Active scan
pentool scan active --url https://example.com
# Check for updates
pentool update --check
📸 Screenshots
Screenshots and GIFs coming soon.
| Dashboard | Proxy | Intruder |
|---|---|---|
| (coming soon) | (coming soon) | (coming soon) |
📚 Documentation
Full docs: pentool.pro
🧪 Beta / Testing Mode
Pentool is currently in public beta.
All free modules are fully functional. PRO features are actively being built — a 14-day trial is available so you can evaluate everything upfront.
🎙 For Bloggers & Content Creators
Running a security blog, YouTube channel, or Telegram channel?
Write an honest review and recommend Pentool to your audience — we'll give you a permanent PRO license, completely free.
No minimum follower count. We value quality over reach.
→ Reach out: @sudores on Telegram
💰 Support the Project
Pentool is built and maintained by a solo developer in spare time.
If it saves you hours on a pentest — consider giving back. Every contribution directly funds new features, fixes, and faster releases.
- ⭐ Star on GitHub — free, takes 2 seconds, helps visibility enormously
- 🔑 PRO license — get early access and support development → @sudores
- 💬 Share — tell a colleague, post a review, or mention Pentool in your writeups
Building tools is lonely work. A star or a kind word genuinely matters. Thank you. 🙏
🤝 Contributing
Contributions are welcome!
Please read CONTRIBUTING.md before opening a PR.
📄 License
Distributed under the AGPL-3.0 license. See LICENSE for details.
PRO extensions are available under a commercial license.
📬 Contact
- Website: pentool.pro
- Telegram: @sudores
- Email: support@pentool.pro
- Author: Anatoly Kashtanov (DoctorX)
⭐ If Pentool saves you time, a GitHub star helps the project grow — thanks!
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file pentool-0.1.6.tar.gz.
File metadata
- Download URL: pentool-0.1.6.tar.gz
- Upload date:
- Size: 227.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.11.15
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
942ebf7717e175a3dee3e706bf6b9bdac9fc61f2182aafdf86ef21e3df4b2169
|
|
| MD5 |
665459cecefcb6571f445a317ecffb2f
|
|
| BLAKE2b-256 |
94869d91f96d4c1b0b2b152efe16df4d127ad1a5797b6f11273ed0e9d0fbc3b1
|
File details
Details for the file pentool-0.1.6-py3-none-any.whl.
File metadata
- Download URL: pentool-0.1.6-py3-none-any.whl
- Upload date:
- Size: 276.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.11.15
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
95102149d6375d9e0354c9b58d3eb23966319b0a3341a3410be80cc59adc68f4
|
|
| MD5 |
741a39322399870ff70c7f79999fb761
|
|
| BLAKE2b-256 |
699ba7a6c8ed2467ee5f752e9fbf4ec22a2d3c5a340fe8473c5637e9df1f0aea
|