Autonomous penetration testing agent
GhostPWN is a Rust terminal assistant for offensive security research. It streams from multiple LLM providers and runs local tools inside a workspace boundary.
# macOS
brew install GhostPWN/tap/ghostpwn
# Linux / Windows
cargo install --git https://github.com/GhostPWN/ghostpwn
ghostpwnBuilt for offensive security research
Terminal interface
A ratatui + crossterm TUI with streaming output, auto-scroll, and transcript controls.
Multi-provider
OpenAI, Anthropic, Google, GitHub Copilot, and local Ollama, with in-session model switching.
Secure key storage
Persistent API keys via the OS keychain, with environment and local state-file fallbacks.
Local tools
Read, list, search, diff, and edit inside a configured workspace. Shell commands require approval but are not sandboxed.
OAuth providers
GitHub Copilot device authorization and Codex ChatGPT/Codex OAuth browser login.
Clear architecture
A JSON-first agent loop, vendor provider adapters, and workspace-safe tool implementations.
In-session commands
/help # show all commands
/model # provider + model selector
/audit # read-only workspace security audit
/audit --fix # audit and apply approved fixes
/clear # reset conversation
/quit # exit the TUI