
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排, 配合大语言模型, 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
AI-Powered Penetration Testing CLI — Speak plainly, find real bugs.
🌐 中文版: README.md
This project is a standalone AI penetration testing Agent.
Official Website: https://unclecheng-li.github.io/vulnclaw.com/
Built on LLM Agent + MCP Toolchain + optional Skill reference material, compatible with OpenAI / Anthropic / MiniMax / DeepSeek and similar models. Natural language input → automated "Recon → Vulnerability Discovery → Exploitation → Reporting".
Give it a natural language command and watch it run a full pentest:
User: "Run a penetration test on http://target.example.com"
VulnClaw executes:
Round 1: Recon → Fingerprinting, port scan, directory enumeration
Round 2: Vulnerability Discovery → Injection points, known CVEs, misconfigs
Round 3: Exploitation → PoC verification, access obtained
Round 4: Reporting → Structured report + Python PoC script
Suitable for authorized pentests, CTF competitions, security training, and red team operations.