AIDA: Open-Source Platform for AI-Powered Penetration Testing
AIDA is an open-source platform that gives AI agents access to a full penetration testing environment. The AI connects via MCP (Model Context Protocol) to a Docker container, executes security tools directly, adapts its methodology based on findings, and documents everything in a web dashboard.
How It Works
The AI agent runs security tools, reads the output, decides what to do next, runs the next tool, and continues iteratively through the testing process. This creates an automated workflow where the AI drives the penetration testing methodology.
Key Improvements in Current Version
The biggest issue with the first version was the setup requirement: it required pulling Exegol, a massive 40GB Docker image that was a dealbreaker for many users just wanting to test the tool.
The developer has fixed this by creating a purpose-built container that's approximately 1GB. This container includes all essential security tools:
- nmap
- sqlmap
- ffuf
- gobuster
- nikto
- hydra
- subfinder
- impacket
Setup and Usage
The platform now works out of the box with ./start.sh. The simplified workflow is:
- Clone the repository
- Run
./start.sh - Connect your AI client
- Begin testing
The project has been getting more stable over recent weeks and the developer is seeking testers and feedback from pentesters, security students, or anyone curious about AI-powered security testing.
AIDA is fully open source and not monetized. The project is available on GitHub at https://github.com/Vasco0x4/AIDA.
📖 Read the full source: r/LocalLLaMA
👀 See Also
wearehere browser extension scans sites for tracking and privacy risks
wearehere is a browser extension that scans websites across ten categories including cookies, trackers, device fingerprinting, and dark patterns, then scores them based on privacy risks. It's under 200KB, runs locally in the browser, and also comes as an npm package for integration with AI agents via barebrowse MCP server.
altRAG: Replace Vector DB RAG with 2KB Pointer Files for AI Coding Agents
altRAG is a Python tool that replaces vector database RAG with lightweight pointer files. It scans Markdown/YAML skill files to create a 2KB skeleton file mapping sections to exact line numbers and byte offsets, allowing AI agents to read only needed sections instead of entire files.
Open-source solo RPG engine uses three Claude instances for parsing, narration, and direction
EdgeTales is an open-source text-based solo RPG engine where dice mechanics determine outcomes and Claude AI generates atmospheric prose. The system uses three Claude instances in a pipeline: Brain (Haiku) for parsing input to JSON, Narrator (Sonnet) for writing prose, and Director (Haiku) for async scene analysis.
Conduid: Trust Infrastructure Layer for MCP Servers Built with Claude
Conduid indexes over 25,000 MCP servers across GitHub, npm, PyPI, and major directories, scoring each 0-100 based on GitHub activity, security posture, documentation quality, and maintenance signals. The entire codebase was written with Claude by a solo founder.