Awesome MCP › Security & Reverse Engineering

ethiack/ai4eh

⭐ 298 Python added to this list on 2025-10-04 repository created 2025-06-24

The AI for Ethical Hacking (AI4EH) project is an educational workshop repository designed to demonstrate practical applications of artificial intelligence in offensive security. It provides a comprehensive workshop guide, educational tools, and scripts that help learners understand how AI can be leveraged in various aspects of ethical hacking and security testing. The project covers multiple AI-driven techniques such as AI reconnaissance, which involves generating contextual subdomain wordlists and automating target enumeration to enhance the reconnaissance phase of penetration testing. It also includes intelligent screenshot analysis using neural networks and multimodal large language models (LLMs) to classify web applications based on screenshots, aiding in the identification of potential targets and vulnerabilities. Another key feature is smart content discovery, where custom fuzzing wordlists are created based on the context of the application, improving the efficiency and accuracy of fuzz testing. The project explores automated exploit generation through nuclei AI template generation, which helps automate the creation of vulnerability scanning templates. Additionally, it introduces hackbots, conversational AI agents designed for vulnerability discovery, and MCP (Model Context Protocol) integrations that connect AI assistants to popular security tools like Burp Suite and Ghidra, enhancing their capabilities with AI-driven insights. The repository includes core scripts such as a multimodal AI screenshot classifier, web scraping and analysis tools, NLP utilities for keyword extraction and text analysis, and AI agent examples with custom tools. It also bundles several well-known security tools within a Docker environment, including LLM command-line access, Nuclei vulnerability scanner, FFUF web fuzzer, Subfinder for subdomain enumeration, HTTPx HTTP toolkit, Notify for notifications, EyeBaller for pentest screenshot analysis, and PureDNS for domain resolution. The project is intended for educational use, focusing on learning AI applications in offensive security, authorized penetration testing, vulnerability research, and CTF experiments. It requires Docker and API keys for AI services like OpenAI and Google Gemini. The project emphasizes ethical hacking principles and responsible disclosure, making it a valuable resource for security professionals and enthusiasts interested in the intersection of AI and cybersecurity.

https://github.com/ethiack/ai4eh

ai-for-ethical-hackingai-reconnaissanceautomated-exploit-generationburp-suiteconversational-ai-agentsctfdockereducationalethical-hackingeyeballerffuffuzzing-wordlistsghidrahackbothackbotshackinghttpxintelligent-screenshot-analysisllmllm-command-linemcpmcp-integrationsmultimodal-llmsneural-networksnlpnotifynuclei-ai-templatesnuclei-scanneroffensive-securitypenetration-testingpurednsreconsecuritysecurity-toolssmart-content-discoverysubdomain-enumerationsubfindervulnerability-researchworkshop