Penetration testing framework with AI-driven decision engine
Windows-native penetration testing framework written in Go. Modular architecture with AI-driven decision engine (OpenAI-compatible API).
go build -ldflags="-X main.version=$(git describe --tags)" -o FUCKER.exe ./cmd/fucker/
Cross-compile:
GOOS=linux GOARCH=amd64 go build -o FUCKER_linux_amd64 ./cmd/fucker/
GOOS=windows GOARCH=amd64 go build -o FUCKER_win_amd64.exe ./cmd/fucker/
GOOS=windows GOARCH=386 go build -o FUCKER_win_386.exe ./cmd/fucker/
FUCKER.exe -t example.com -portscan -fingerprint -vulnscan -report
FUCKER.exe -t example.com -subdomain -dirbuster
FUCKER.exe -socks 1080
FUCKER.exe -forward 3389:192.168.1.100:3389
FUCKER.exe -payload "revshell|10.0.0.1|4444"
| Flag | Description |
|---|
-t | Target domain/IP/URL |
-p | Ports (comma or range, default: 80,443,22,21,3389,3306,6379,27017) |
-subdomain | Subdomain enumeration |
-portscan | TCP port scan |
-fingerprint | Service fingerprinting |
-dirbuster | Directory brute force |
-vulnscan | POC-based vulnerability scan |
-logic | Logic vulnerability checks |
-spray | Password spraying |
-exploit | Exploitation modules |
-report | Generate HTML + JSON report |
-o | Output file (default: report.html) |
-socks | Start SOCKS5 proxy on port |
-httpproxy | Start HTTP proxy on port |
-forward | Port forward (local:host:remote) |
-payload | Generate payload (revshell|IP|PORT) |
-v | Verbose |
-debug | Debug output |
-workers | Concurrent workers (default: 20) |
-timeout | Request timeout seconds (default: 30) |
-proxy | Proxy URL |
-audit | Audit log path (default: audit.json) |
Copy .env.example to .env:
| Variable | Description |
|---|---|
OPENAI_BASE_URL | OpenAI-compatible API base URL |
OPENAI_API_KEY | API key |
OPENAI_MODEL_NAME | Model (default: gpt-4) |
PROXY | Proxy URL |
MAX_WORKERS | Max workers (default: 20) |
REQUEST_TIMEOUT | Timeout seconds (default: 30) |
RETRY_COUNT | Retries (default: 3) |
Without AI config, the tool runs in manual CLI mode (all flags work normally).
| Package | Description |
|---|---|
cmd/fucker/ | Entry point, CLI parsing, module orchestration |
internal/ai/ | OpenAI client, ReAct agent loop, tool system |
internal/scanner/ | Port scan, subdomain, fingerprint, dirbuster |
internal/vuln/ | YAML POC engine, 16 built-in POCs, logic checkers |
internal/exploit/ | Reverse shell generator, SOCKS5/HTTP proxy, memshell |
internal/lateral/ | Password spray, LSASS minidump, SMB/RDP proxy |
internal/report/ | HTML template report, JSON export, risk scoring |
internal/logger/ | Leveled logging, audit.json trail |
internal/plugin/ | Python/Go plugin loader |
internal/config/ | .env loader |
internal/common/ | Shared types |
When OPENAI_API_KEY is set, the tool runs a ReAct loop: the AI agent decides which tools to call based on previous results. The system prompt defines a pentest workflow: recon -> fingerprint -> vuln scan -> exploit -> report.
Without AI, all functionality is available via CLI flags.