AIRecon
An autonomous penetration-testing agent that drives an OpenAI-compatible LLM gateway against a Kali Linux Docker sandbox, running a structured recon-analysis-exploit-report pipeline through a real-time terminal interface.
AIRecon is an autonomous penetration-testing agent that connects any OpenAI-compatible LLM gateway, a local LiteLLM or vLLM instance proxying Ollama, or a hosted OpenAI, Anthropic or Gemini-compatible endpoint, to a Kali Linux Docker sandbox, native Caido proxy integration, and a real-time Textual terminal UI. It runs a structured recon, analysis, exploit, report pipeline aimed at security assessments, penetration testing and bug bounty reconnaissance.
It can run fully offline with no API keys when pointed at a local gateway, or against a hosted model for stronger reasoning; reasoning support is auto-detected at runtime rather than hardcoded per model. Built-in features include a scope guard and audit log that refuse out-of-scope targets and log every command, session resume across chat and tool calls, and an optional local knowledge base of roughly 1.09 million records.
Caido-native tooling covers list, replay, an automated fuzzer, findings, scope and sitemap views.