AIDA: Open-Source Platform for AI-Powered Penetration Testing
AIDA is an open-source platform that gives AI agents access to a full penetration testing environment. The AI connects via MCP (Model Context Protocol) to a Docker container, executes security tools directly, adapts its methodology based on findings, and documents everything in a web dashboard.
How It Works
The AI agent runs security tools, reads the output, decides what to do next, runs the next tool, and continues iteratively through the testing process. This creates an automated workflow where the AI drives the penetration testing methodology.
Key Improvements in Current Version
The biggest issue with the first version was the setup requirement: it required pulling Exegol, a massive 40GB Docker image that was a dealbreaker for many users just wanting to test the tool.
The developer has fixed this by creating a purpose-built container that's approximately 1GB. This container includes all essential security tools:
- nmap
- sqlmap
- ffuf
- gobuster
- nikto
- hydra
- subfinder
- impacket
Setup and Usage
The platform now works out of the box with ./start.sh. The simplified workflow is:
- Clone the repository
- Run
./start.sh - Connect your AI client
- Begin testing
The project has been getting more stable over recent weeks and the developer is seeking testers and feedback from pentesters, security students, or anyone curious about AI-powered security testing.
AIDA is fully open source and not monetized. The project is available on GitHub at https://github.com/Vasco0x4/AIDA.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Qwen 3.6 27B with MTP on V100 32GB: 54 t/s via llama.cpp Branch
am17an's MTP branch of llama.cc runs Qwen 3.6 27B at 54 t/s on V100 32GB via PCIe adapter, dropping to 29-30 t/s without MTP.
Lovelace: Project Management for Claude Code That Lives in Your Repo
A desktop app where tickets, docs, and session records are Markdown files inside your repo. The app renders a kanban board from the files, and Claude works the same files through 8 MCP tools. Free, no account needed.
OpenClaw AI Agent with 6 Roles, Memory, and ADHD-Aware Design: Daily Ops Breakdown
A solo founder with ADHD built an open-source AI agent with 6 roles (action planner, debriefer, writer, legal, investigator, CRM) sharing memory, auto-generating follow-ups and drafts from transcripts.
Claude Token Counter Updated with Model Comparison Feature
Simon Willison's Claude Token Counter tool now supports comparing token counts across different Claude models. The update reveals Opus 4.7 uses 1.0–1.35× more tokens than Opus 4.6 due to an updated tokenizer, potentially increasing costs by around 40% despite identical pricing.