Original Summary

Hey everyone, I've been working on a project called PenX , an open-source security reconnaissance toolkit for Windows 10/11. It's based on the original METATRON project, which was designed for Linux. I wanted something similar that runs natively on Windows, without having to set up Kali, WSL, or a separate Linux VM just to use a few reconnaissance tools. So I've been porting and expanding it. PenX basically brings several security tools together in one terminal interface: Nmap – Port scanning and service discovery WhatWeb – Web technology fingerprinting Nikto – Web server vulnerability scanning WHOIS & DNS – Domain reconnaissance HTTP Headers – Basic security header analysis Local AI – Analyze scan results using your own LLM PDF/HTML Reports – Export findings Scan History – Store and review previous results locally The part I find most interesting is the local AI integration. You can connect PenX to Ollama or LM Studio and use whatever compatible model you have running locally. The model can analyze reconnaissance results, suggest potential security issues, and recommend fixes. No OpenAI subscription or paid API is required. I've also added SQLite support, so there's no need to configure MariaDB just to get started. For Windows, there's an installer that handles the Python environment and helps set up the external scanning tools. You can also build a Windows executable using PyInstaller. It's still an ongoing project, and there are definitely things that need improving, especially around compatibility, reliability, and the AI analysis workflow. I'm not trying to replace Nmap, Burp Suite, or other established tools. The goal is simply to make reconnaissance and initial security assessments more convenient, especially for people running Windows. GitHub: https://github.com/SLP-DEV1/PenX Everything is open source under the MIT license, with credit to the original METATRON developer. I'd be interested to hear what you think. What features would actually make something like this useful in your workflow? Bug reports, suggestions, and contributions are welcome. If you like the project, feel free to leave a star on GitHub. It helps a lot! For authorized security testing and educational use only.   submitted by   /u/Additional_Reach2545 [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/15 01:47:30