Decepticon

Active
GitHub Python Apache-2.0

Description

Decepticon is an autonomous hacking agent framework for red-team scenarios, automating penetration testing and vulnerability discovery.

Key Features

  • Autonomous hacking agent — End-to-end automated penetration testing
  • Multi-stage attack chain — Reconnaissance, exploitation, privilege escalation and more
  • Tool integration — Built-in common security tools and custom script execution
  • Decision planning — LLM-driven dynamic attack strategy adjustment
  • Report generation — Auto-generated pentest reports and vulnerability lists
  • Security research — Authorized environments only, focused on defense improvement

Use Cases

💡 Automating penetration testing and vulnerability verification in authorized ranges
💡 Training security teams to recognize agent-driven attack patterns
💡 Building reusable attack toolchains for red team exercises
💡 Benchmarking different LLMs in red-team task capability
💡 Providing real attack behavior sample data for defense systems

Strengths & Limitations

Strengths

  • Actively maintained, recent updates
  • High community interest (5.4k stars)
  • Permissive open-source license (Apache-2.0)
  • Responsive to issues, low backlog

Quick Start

# Authorized environments only
git clone https://github.com/PurpleAILAB/Decepticon.git
cd Decepticon
pip install -r requirements.txt

# Configure LLM API key and start
python decepticon.py --target <authorized-target>

Related Projects

CAI

9.8k · Python
Active A

Alias Robotics' open-source AI security research agent framework for multi-agent orchestration of cybersecurity tasks, integrating 300+ AI models, designed for red-team operations and security research.

cybersecurityai-agentsred-team +2
  • · Multi-agent orchestration — Built-in cybersecurity-specialized agent roles for reconnaissance, vulnerability scanning, exploitation, and reporting
  • · 300+ model support — Unified interface to call OpenAI, Anthropic, Gemini, Ollama, and other major LLM providers
  • · Penetration testing tool integration — Built-in calls for common pentest tools, supports CTF benchmarks

GhidraMCP

9.9k · Java
Stale B

MCP server for Ghidra reverse engineering platform, enabling AI agents to autonomously perform binary analysis and vulnerability discovery.

mcpreverse-engineeringghidra +2
  • · MCP server for Ghidra enabling LLMs to autonomously perform binary reverse engineering
  • · Decompile and analyze binaries with automatic renaming of methods and data
  • · List all methods, classes, imports, and exports, exposing core Ghidra functionality to MCP clients

Portkey AI Gateway

12.9k · TypeScript
Stale B

Portkey AI Gateway is a blazing fast AI gateway with integrated guardrails, routing to 200+ LLMs with 50+ AI guardrails through a single fast and friendly API.

gatewayllm-routingguardrails +2
  • · Route to 250+ LLMs with a single OpenAI-compatible API endpoint
  • · Blazing fast at under 1ms added latency with a 122kb footprint
  • · Built-in automatic retries, fallbacks, and load balancing for reliability