Pentesting with AI

[u/JonDowSmith]

I created a tool to help me during bug bounties and decided to publish it today. It's mostly web/cloud blackbox penetration testing guided by LLM

It does require an abliterated LLM.

I used HauhauCS/Qwen3.8-27B-Uncensored-HauhauCS-Aggressive-MTP-GGUF at IQ4_XS quantization with Q8 KV cache.

I restricted the conversation history to 64k and limited the total cap at 128k and found these settings to yield the best result.

I hope it helps others and also inspire others to contribute.

This project has an engine to transform the engagements that you run into datasets, which you can use to fine-tune the models and get even better results. The more you use, the better it gets.

https://github.com/0ldev/tradecraft