CoolFace
Modelpublic

automajicly/Local_Security_Model

sourceHugging Facemitupdated 3mo agoView on Hugging Face
1likes
Model Card

🔐 PenMaster Security

Autonomous AI-powered penetration testing agent — fully local, no cloud, no API keys.

Built on Kali Linux with a local LLM (Qwen 2.5-14B via LM Studio) and a Flask-based MCP tool server. The agent runs recon, attacks, and generates professional pentest reports — all autonomously.

[image]

What It Does

  • —🔍 Autonomous recon — masscan + nmap to discover open ports and services
  • —⚔️ Autonomous attack loop — selects and chains tools based on what it finds
  • —🧠 Persistent negative experience cache — learns what fails across ALL sessions and never repeats mistakes
  • —📝 Auto-generates branded HTML pentest reports on session end (Ctrl+C)
  • —🔒 100% local — Qwen 2.5-14B running in LM Studio, nothing leaves your machine

Tool Arsenal (18 Tools)

ToolPurpose
run_masscanFast port discovery
run_nmapDeep service/version scanning
run_niktoWeb vulnerability scanning
run_sqlmapSQL injection testing
run_hydraCredential brute forcing
run_ncrackNetwork authentication cracking
run_searchsploitCVE/exploit database lookup
run_metasploitExploit framework integration
run_curlHTTP interaction and payload staging
run_wgetFile retrieval and payload staging
run_enum4linuxSMB/Samba enumeration
run_smbclientSMB share access and enumeration
run_ftpFTP service interaction
run_sshSSH service interaction
run_telnetTelnet service interaction
run_wpscanWordPress vulnerability scanning
run_dirbWeb directory brute forcing
run_setSocial Engineering Toolkit

Sovereign Agent Upgrades

  • —✅ Autonomous tool reasoning — agent selects tools based on discovered services
  • —✅ Persistent negative experience cache — SHA-256 fingerprinting blacklists failing tool/parameter combos across sessions
  • —✅ Social Engineering Toolkit (SET) integration
  • —✅ Auto HTML pentest report generation

Stack

  • —Model: Qwen 2.5-14B Instruct (abliterated) via LM Studio
  • —OS: Kali Linux
  • —Server: Flask MCP server (port 8000)
  • —Agent: Python autonomous loop
  • —Reports: Auto-generated HTML on exit

Intended Use

Designed for:

  • —Professional penetration testing against authorized targets only
  • —Security audits for small businesses, WordPress sites, and ecommerce
  • —Bug bounty hunting workflows
  • —AI/security research and development

GitHub

XenoCoreGiger31/Local-Model