bugbasesecurity

    bugbasesecurity/pentest-copilot

    Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.

    ai
    security
    cybersecurity
    cybersecurity-tools
    llms
    pentesting
    TypeScript
    MIT
    1.5K stars
    293 forks
    1.5K GitHub watchers
    Updated Oct 27, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    The project lists 4 contributors on GitHub.

    Gained 17% fewer stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Provides an AI-powered browser-based assistant that autonomously executes and iterates penetration testing tasks on a Kali attack box.
    • Automates complex pentesting workflows with agentic execution and integrates multiple tools including Burp Suite and real browser automation.
    • Use for conducting autonomous penetration tests on real-world targets with minimal manual intervention.
    • Use for practicing and solving boot2root challenges and Capture The Flag (CTF) cybersecurity competitions.
    • Use for integrating AI-driven security testing into development pipelines with customizable AI models and parallel task execution.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • No GitHub releases; pin a commit or tag instead of a release.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    An open-source, AI-driven penetration testing agent. Connects to a Kali attack box, runs tools autonomously, analyzes results, and iterates. You describe the target. It does the rest.

    Built for real-world engagements, boot2root boxes, and CTFs.

    Pentest Copilot performing an auth bypass in OWASP Juice Shop:

    Watch it on YouTube

    Excerpt from the bugbasesecurity/pentest-copilot README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    293+70

    Open issues

    30+2

    Compared with peers in AI

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    bugbasesecurity/pentest-copilot compared with AI repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    thedotmack/claude-mem113.6K+8.8K35today
    D4Vinci/Scrapling98.1K+6.9K651 day ago
    Leonxlnx/taste-skill110.7K+5.2K551 day ago
    calesthio/OpenMontage77.2K+4.2K40—
    heygen-com/hyperframes79.6K+4.1K45today
    bugbasesecurity/pentest-copilot1.5K—17—
    Category median98.1K+5.2K45—

    Discover Repositories

    Search across tracked repositories by name or description