Skip to main content

🔒 Pentool — Professional TUI Web Pentesting Toolkit

🚧 Active Development — Public beta. Core modules are stable and fully usable. PRO features are under active development. Feedback and bug reports are welcome.

PyPI version Python versions CI License: AGPL v3 Downloads

🌐 Languages: English · Русский · 中文 · हिन्दी


Pentool is a terminal-based (TUI) security toolkit for penetration testers and security researchers.
It combines HTTP interception, vulnerability scanning, automated attacks, and data analysis — all inside your terminal.
Fast, transparent, and built for real-world testing.


✨ Features

  • 🌐 Proxy
    Intercept and modify HTTP/HTTPS traffic in real time. Manage scope, apply Match & Replace rules, capture WebSocket messages.

  • 🔄 Repeater
    Replay requests with any modifications. Save tabs between sessions and switch between scenarios instantly.

  • 💥 Intruder
    Run automated payload attacks with four strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb.
    Turbo Mode delivers 10× speed via Keep-Alive and connection pooling.

  • 🔍 Scanner
    Active and passive vulnerability analysis: SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE, CORS, JWT flaws, and more.
    Smart context-aware payloads, WAF bypass, time-based and boolean-blind techniques.

  • 🕷 Spider
    Crawl targets automatically — collect pages, forms, API endpoints, and JS files.
    JavaScript rendering via Playwright is supported.

  • 🎯 Target / Site Map
    Build a site map from proxy traffic, manage testing scope, and filter hosts directly from the UI.

  • 🔐 Decoder · Comparer · Sequencer

    • Decoder — 19 encode/decode/hash operations with chaining support
    • Comparer — side-by-side diff with change highlighting
    • Sequencer — entropy analysis of tokens (sessions, CSRF, JWT) with FIPS tests
  • 🧩 Plugin System
    Extend functionality without touching the core. PRO plugins add advanced scanners, smart payloads, and report generators.

  • ⚡ Async Core
    Fully async engine handles thousands of concurrent connections and hundreds of requests per second.

  • 📦 One-line Install
    pip install pentool — no complex setup, works on Linux, macOS, and Windows (WSL).

  • 🆓 Open Source + PRO Extensions
    The base version is free and open. PRO extensions unlock exclusive features and support the project.


🚀 Quick Start

# Install
pip install pentool

# Launch TUI
pentool

# Start proxy on custom port
pentool proxy start --port 8080

# Active scan
pentool scan active --url https://example.com

# Check for updates
pentool update --check

📸 Screenshots

Screenshots and GIFs coming soon.

Dashboard Proxy Intruder
(coming soon) (coming soon) (coming soon)

📚 Documentation

Full docs: pentool.pro


🧪 Beta / Testing Mode

Pentool is currently in public beta.
All free modules are fully functional. PRO features are actively being built — a 14-day trial is available so you can evaluate everything upfront.

🎙 For Bloggers & Content Creators

Running a security blog, YouTube channel, or Telegram channel?
Write an honest review and recommend Pentool to your audience — we'll give you a permanent PRO license, completely free.

No minimum follower count. We value quality over reach.
→ Reach out: @sudores on Telegram


💰 Support the Project

Pentool is built and maintained by a solo developer in spare time.
If it saves you hours on a pentest — consider giving back. Every contribution directly funds new features, fixes, and faster releases.

  • Star on GitHub — free, takes 2 seconds, helps visibility enormously
  • 🔑 PRO license — get early access and support development → @sudores
  • 💬 Share — tell a colleague, post a review, or mention Pentool in your writeups

Building tools is lonely work. A star or a kind word genuinely matters. Thank you. 🙏


🤝 Contributing

Contributions are welcome!
Please read CONTRIBUTING.md before opening a PR.


📄 License

Distributed under the AGPL-3.0 license. See LICENSE for details.
PRO extensions are available under a commercial license.


📬 Contact


⭐ If Pentool saves you time, a GitHub star helps the project grow — thanks!

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

pentool-0.1.6.tar.gz (227.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

pentool-0.1.6-py3-none-any.whl (276.1 kB view details)

Uploaded Python 3

File details

Details for the file pentool-0.1.6.tar.gz.

File metadata

  • Download URL: pentool-0.1.6.tar.gz
  • Upload date:
  • Size: 227.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.11.15

File hashes

Hashes for pentool-0.1.6.tar.gz
Algorithm Hash digest
SHA256 942ebf7717e175a3dee3e706bf6b9bdac9fc61f2182aafdf86ef21e3df4b2169
MD5 665459cecefcb6571f445a317ecffb2f
BLAKE2b-256 94869d91f96d4c1b0b2b152efe16df4d127ad1a5797b6f11273ed0e9d0fbc3b1

See more details on using hashes here.

File details

Details for the file pentool-0.1.6-py3-none-any.whl.

File metadata

  • Download URL: pentool-0.1.6-py3-none-any.whl
  • Upload date:
  • Size: 276.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.11.15

File hashes

Hashes for pentool-0.1.6-py3-none-any.whl
Algorithm Hash digest
SHA256 95102149d6375d9e0354c9b58d3eb23966319b0a3341a3410be80cc59adc68f4
MD5 741a39322399870ff70c7f79999fb761
BLAKE2b-256 699ba7a6c8ed2467ee5f752e9fbf4ec22a2d3c5a340fe8473c5637e9df1f0aea

See more details on using hashes here.

Release history Release notifications | RSS feed

0.3.1

2 files

0.3.0

2 files

0.2.11

2 files

0.2.10

2 files

0.2.9

2 files

0.2.8

2 files

0.2.7

2 files

0.2.6

2 files

0.2.5

2 files

0.2.4

2 files

0.2.3

2 files

0.2.2

2 files

0.2.1

2 files

0.2.0

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

This release

0.1.6 This release

2 files

0.1.5

2 files

0.1.4

2 files

0.1.3

2 files

0.1.2

2 files

0.1.1

2 files

0.1.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page