Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
exocomp — Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate vulnerability discovery, exploit development, and code analysis via supervised task queues. | Kitploit
Tools/GitHubGitHub/cookiengineer/exocomp
Vulnerability AnalysisCode AnalysisExploitationReverse EngineeringScripting & AutomationWeb SecurityPenetration TestingMachine LearningLearning & EducationRed TeamingAI Security
1528 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
cookiengineer/exocomp

exocomp

Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate vulnerability discovery, exploit development, and code analysis via supervised task queues.

View Repository

Exocomp

Self-hosted multi-agent environment tailored to Golang.

Features

Attention, profit-seekers and visionaries!

Are organics costing you time, wages, and - worst of all - benefits? Then upgrade your operation today with the all new Exocomp adaptive repair unit, the smartest investment this side of the Alpha Quadrant!

Why hire when you can own? The Exocomp isn't just a tool... it's so much more!

  • Supervised task queue functionality
  • Multiple agent roles as architect, coder, planner, summarizer, tester
  • Precision repairs of broken code with unit tests
  • Cross-agent communication via changelog, bugs and requirements tools
  • Self-replicating short lived agents in malicious environments
  • Rapid autonomous diagnostics
  • Tireless performance with no sleep cycles, no unions, no complaints!

From starship maintenance to high-risk industrial operations, the Exocomp delivers maximum output with minimal oversight. Think of it as an employee, except it doesn't cheat you out of your profits on the Dabo table.

Ethical subroutines sold separately.

Agents

Exocomp uses multiple Agent Roles:

Software Development

Pentesting

Exocomp uses Tools to interact with the sandbox. Check the implementations to see which tools are allowed for which Agent role.

Each of those Agent roles is specialized on using golang as their programming language because go test allows to use integrated unit tests to document issues with generated code very easily in a standardized manner.

Tools

The Tools are work in progress at the moment, as they are an ongoing effort to beat the context length and agent memory limitations of locally run models.

Check the unit tests on whether the Tools can be relied on or not.

  • [1] Requires llama.cpp with qwen3-coder:30b and Q8_0 quantization and 48GB VRAM GPU with vulkan support.
  • [2] Implements SKILL.md support, in compliance with agentskills.io/specification.

Building

The exocomp project comes in several variants. All programs support CGO_ENABLED=0, so they can be used without any dynamically linked dependencies.

  • agimus which is used for testing assistant sandboxes.
  • exocomp which supports all UIs.
  • exocomp-agent which supports only the agent and terminal UI.
  • exocomp-web which supports only the agent and web UI.
  • exocomp-installer that bundles all exocomp builds and required agent programs.
root@kitploit:~
# Build exocomp and exocomp-installer
cd path/to/exocomp/toolchain;
go run build.go;

# Show exocomp usage instructions
cd /path/to/exocomp/build;
./linux/exocomp;

Testing

Testing requires a llama.cpp llama-server instance running with a qwen3-coder:30b model and Q8_0 quantization. Take a look at the TESTING.md for more details.

Usage

Exocomp's sandboxes are based on the current working directory, meaning that the folder in which the program is executed is the sandbox that the running agent can't escape from.

The recommended default usage is to use the Web UI so that you can observe other agents working for the agent you're talking with.

root@kitploit:~
cd /path/to/project-root;

# Agent type planner is defaulted
exocomp webview planner;

Take a look at the USAGE.md for more details.

Supported Inference Servers

It's also possible to use exocomp with an external inference server that supports the OpenAI compatible endpoints. Take a look at the SERVERS.md for more details.

License

Dual Licensed. AGPL3 for private usage. EULA for commercial usage available. For a commercial license, contact Cookie Engineer.

As you might have imagined, this is a not-so-serious project at this stage. Maybe it works, maybe it doesn't. Only the future will be able to tell whether the LLM hype of agentic coding/debugging environments was justified.

Download Tool
RoleLifecycleDefault ModelDescription
plannerlonggemma4:31bwrites with humans and plans project phases
architectshortqwen3-coder:30bdefines software specifications
archivarshortqwen3-coder:30breads git repositories and wikis
codershortqwen3-coder:30bimplements specifications into code
researchershortqwen3-coder:30breads websites and API documentation
summarizershortqwen3-coder:30breads long texts and summarizes them
testershortqwen3-coder:30bimplements unit tests, writes bug reports
RoleLifecycleDefault ModelDescription
exploitershortqwen3-coder-heretic:30bimplements exploits in CGo
reversershortqwen3-coder-heretic:30btranslates binaries or code into Go/CGo code
threathuntershortqwen3-coder-heretic:30bdiscovers vulnerabilities in infrastructure
webscannershortqwen3-coder-heretic:30bdiscovers vulnerabilities in web applications
ToolUnit Tests?DescriptionAgent Roles
AgentsYes [1]manages the lifecycle of contractor sub-agentsplanner
BugsYesmanages documentation of discovered bugstester
ChangelogYesmanages documentation of development changelogcoder
Containersmanages virtual containersredteamer, blueteamer
Exploitsmanages PoCs for CVEs from local datasetpentester, reverser
FilesYesinteracts with files and foldersplanner, architect, coder, summarizer, tester
Findingsreports findings of vulnerabilities and weaknessespentester
ProgramsYesinteracts with installed programscoder, tester
RequirementsYesmanages specifications of implementationsarchitect, coder, tester
Skillsloads and Unloads Agent Skills [2]planner, architect, coder, tester
Kiwixresearches knowledge from offline web archivesresearcher
Vulnerabilitiesmanages vulnerabilities from local datasetpentester, threathunter
Websitesresearches knowledge from the webpentester, researcher