AIDA: Automated Pentesting with AI

A developer has released AIDA, an open-source pentesting platform that integrates an artificial intelligence agent capable of managing over 400 security tools. The project, started as a side project, aims to provide a complete environment for automated pentesting.

Main Features

The platform allows the AI agent to:

  • Directly execute pentesting tools within a Docker container (Exegol).
  • Chain attacks based on the results obtained.
  • Automatically document the entire process.
  • Track results in a web dashboard.
  • Maintain full context during the assessment.

Supported tools include nmap, sqlmap, nuclei, and ffuf. The source code is available on GitHub for those who want to contribute or simply examine the internal workings.

For those evaluating on-premise deployments, there are trade-offs to consider. AI-RADAR offers analytical frameworks on /llm-onpremise to evaluate these options.