🚧 Active Development — Public beta. Core modules are stable and fully usable. PRO features are under active development. Feedback and bug reports are welcome.
🌐 Languages: English · Русский · 中文 · हिन्दी
Pentool is a terminal-based (TUI) security toolkit for penetration testers and security researchers.
It combines HTTP interception, vulnerability scanning, automated attacks, and data analysis — all inside your terminal.
Fast, transparent, and built for real-world testing.
| Dashboard | Scanner |
|---|---|
 |
 |
| Proxy | Repeater |
|---|---|
 |
 |
| Intruder | Settings |
|---|---|
 |
 |
-
🌐 Proxy
Intercept and modify HTTP/HTTPS traffic in real time. Manage scope, apply Match & Replace rules, capture WebSocket messages. -
🔄 Repeater
Replay requests with any modifications. Save tabs between sessions and switch between scenarios instantly. -
💥 Intruder
Run automated payload attacks with four strategies: Sniper, Battering Ram, Pitchfork, Cluster Bomb.
Turbo Mode delivers 10× speed via Keep-Alive and connection pooling. -
🔍 Scanner
Active and passive vulnerability analysis: SQLi, XSS, SSTI, LFI, RCE, SSRF, XXE, CORS, JWT flaws, and more.
Smart context-aware payloads, WAF bypass, time-based and boolean-blind techniques. -
🕷 Spider
Crawl targets automatically — collect pages, forms, API endpoints, and JS files.
JavaScript rendering via Playwright is supported. -
🎯 Target / Site Map
Build a site map from proxy traffic, manage testing scope, and filter hosts directly from the UI. -
🔐 Decoder · Comparer · Sequencer
- Decoder — 19 encode/decode/hash operations with chaining support
- Comparer — side-by-side diff with change highlighting
- Sequencer — entropy analysis of tokens (sessions, CSRF, JWT) with FIPS tests
-
🧩 Plugin System
Extend functionality without touching the core. PRO plugins add advanced scanners, smart payloads, and report generators. -
⚡ Async Core
Fully async engine handles thousands of concurrent connections and hundreds of requests per second. -
📦 One-line Install
pip install pentool— no complex setup, works on Linux, macOS, and Windows (WSL). -
🆓 Open Source + PRO Extensions
The base version is free and open. PRO extensions unlock exclusive features and support the project.
# Install
pip install pentool
# Launch TUI
pentool
# Start proxy on custom port
pentool proxy start --port 8080
# Active scan
pentool scan active --url https://example.com
# Check for updates
pentool update --checkFull docs: pentool.pro
Pentool is currently in public beta.
All free modules are fully functional. PRO features are actively being built — a 14-day trial is available so you can evaluate everything upfront.
Running a security blog, YouTube channel, or Telegram channel?
Write an honest review and recommend Pentool to your audience — we'll give you a permanent PRO license, completely free.
No minimum follower count. We value quality over reach.
→ Reach out: @sudores on Telegram
Pentool is built and maintained by a solo developer in spare time.
If it saves you hours on a pentest — consider giving back. Every contribution directly funds new features, fixes, and faster releases.
- ⭐ Star on GitHub — free, takes 2 seconds, helps visibility enormously
- 🔑 PRO license — get early access and support development → @sudores
- 💬 Share — tell a colleague, post a review, or mention Pentool in your writeups
Building tools is lonely work. A star or a kind word genuinely matters. Thank you. 🙏
Contributions are welcome!
Please read CONTRIBUTING.md before opening a PR.
Special thanks to:
- codeby.net — For community support and feedback
Distributed under the AGPL-3.0 license. See LICENSE for details.
PRO extensions are available under a commercial license.
- Website: pentool.pro
- Telegram: @sudores
- Email: support@pentool.pro
- Author: Anatoly Kashtanov (DoctorX)
⭐ If Pentool saves you time, a GitHub star helps the project grow — thanks!