0xpwn

0xpwn

AI-powered penetration testing engine. Point it at a target and let a ReAct agent drive reconnaissance, scanning, and vulnerability discovery — all tools run inside a Docker sandbox so nothing touches the host.

Input: Target URL, hostname, IP, or CIDR via CLI Output: Structured findings with CVE enrichment, phase-by-phase execution logs

  CLI  ──▶  ReAct Agent  ──▶  Docker Sandbox  ──▶  Target
  (Typer)   (LLM-driven       (Kali + nmap,       (your scope)
             tool selection)    nuclei, ffuf,
                                httpx, subfinder)

---

Installation

Option 1: Install from PyPI (recommended)

pip install 0xpwn

Option 2: Install with pipx (isolated environment)

pipx install 0xpwn

Verify installation

0xpwn --help

---

Setup

1. Build the Sandbox Image

All scan tools run inside a Docker container based on Kali Linux:

docker build -t oxpwn-sandbox:dev docker/

2. Configure an LLM Provider