VulnClaw
A penetration testing tool based on AI Agent and MCP toolchain, supporting natural language input.
- Type
- Agent Skill
- Open source
- Yes
- GitHub Stars
- ★ 2.7k
- Source
- skill-github
- Repository
- github.com/Netw0rkNoob/VulnClaw
Overview
VulnClaw is a CLI-based penetration testing tool built on AI Agent and the MCP toolchain. It automates the entire workflow—information gathering, vulnerability discovery, exploitation, and report generation—from natural language input. Suitable for authorized penetration testing, CTF competitions, security education, and red team exercises. Users can configure different LLM providers to use the tool and support various encoding and decoding operations. VulnClaw also offers a Web UI mode for interactive use.
Capabilities
- ▪Information Gathering: Fingerprinting, port scanning, directory enumeration
- ▪Vulnerability Discovery: Detecting injection points, known CVEs, configuration flaws
- ▪Exploitation: PoC validation, privilege escalation
- ▪Report Generation: Structured reports + Python PoC scripts
- ▪14 LLM Provider Support
- ▪29 Encoding/Decoding and Encryption/Decryption Operations
Use cases
Setup
pip install vulnclaw or install from source: git clone https://github.com/Netw0rkNoob/VulnClaw.git; cd VulnClaw; pip install -e .
This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.
FAQ
How to select an LLM provider?
Use the command `vulnclaw config provider <provider>`.
How to set the API Key?
Use the command `vulnclaw config set llm.api_key <your-key>`.
Related skills
gemini-cli
Gemini CLI is an open-source AI agent that brings Gemini's powerful capabilities directly into the terminal.
sast-skills
Transform your AI coding assistant into a SAST scanner to automatically detect vulnerabilities in code.
hello_js_reverse_skill
AI-driven JS reverse engineering Skill covering end-to-end scenarios such as encryption recovery and obfuscation analysis.
scientific-agent-skills
Transform any AI agent into a scientific assistant with 147 ready-to-use research skills.
susi_alexa_skill
A skill that enables question-and-answer interactions between Alexa and Susi AI.
claude-context
Provides code search capabilities for Claude Code, turning the entire codebase into context.